{"report_id":"f439ccac-8f62-47b6-be7a-9f29caced737","version":6,"status":"done","tags":[],"date":"2026-03-07T12:48:14Z","url":{"schema":"http","addr":"binance-usdt.org","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"104.21.54.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"title":"Binance","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"binance-usdt.org","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"104.21.54.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T12:48:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":8}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-07T12:47:53Z","timestamp":1772887673,"ip_dst":{"addr":"Client IP","port":37092,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2026-03-07T12:47:53.573426+0000\",\"flow_id\":308054893106997,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.18.28.108\",\"src_port\":443,\"dest_ip\":\"172.18.0.38\",\"dest_port\":37092,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"sni\":\"ip.ddnspod.com\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":723,\"bytes_toclient\":213,\"start\":\"2026-03-07T12:47:53.562997+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"srz.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":378797,"first_seen":"2024-02-20T03:50:45Z","last_seen":"2026-03-01T05:39:26.940885Z","alert_count":0,"request_count":8,"received_data":5107,"sent_data":5772,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ip.ddnspod.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-10-25","domain_rank":4307005,"first_seen":"2025-04-05T17:51:06.28219Z","last_seen":"2026-03-01T02:20:51.449316Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":473,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets-cdn.salesmartly.com","ip":{"addr":"3.173.161.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":507251,"first_seen":"2024-07-26T10:32:03Z","last_seen":"2026-03-01T09:32:48.07322Z","alert_count":0,"request_count":3,"received_data":18376,"sent_data":1768,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-03-04T13:36:33.001491Z","alert_count":0,"request_count":1,"received_data":115163,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"msg.salesmartly.com","ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":360322,"first_seen":"2022-11-29T17:40:54Z","last_seen":"2026-02-28T22:08:02.435263Z","alert_count":0,"request_count":3,"received_data":1997,"sent_data":2541,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"worldtimeapi.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-06-28","domain_rank":18362,"first_seen":"2018-11-05T15:58:25Z","last_seen":"2026-02-28T15:41:21.607832Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":486,"comment":"","tags":null,"fingerprints":null},{"fqdn":"client.salesmartly.com","ip":{"addr":"108.156.60.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":491526,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2026-02-28T22:08:02.421311Z","alert_count":0,"request_count":2,"received_data":84985,"sent_data":936,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"binance-usdt.org","ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-07T12:48:20.247052Z","last_seen":"2026-03-07T12:48:20.247052Z","alert_count":292,"request_count":73,"received_data":8088012,"sent_data":33678,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s2.coinmarketcap.com","ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":209181,"first_seen":"2018-01-12T04:47:19Z","last_seen":"2026-03-02T14:23:43.407598Z","alert_count":0,"request_count":22,"received_data":57865,"sent_data":10181,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"api.binance-usdt.org","ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-07T12:48:20.25539Z","last_seen":"2026-03-07T12:48:20.25539Z","alert_count":80,"request_count":20,"received_data":307590,"sent_data":10844,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.salesmartly.com","ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":478953,"first_seen":"2022-03-11T21:16:37Z","last_seen":"2026-03-06T18:34:16.434146Z","alert_count":0,"request_count":9,"received_data":964643,"sent_data":3970,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":66438,"sent_data":1062,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":387428,"first_seen":"2022-11-29T17:40:50Z","last_seen":"2026-03-01T05:39:26.583271Z","alert_count":0,"request_count":2,"received_data":5900,"sent_data":1384,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"binance-usdt.org/js/9lSaaUcTNzBCKoSZj7.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"52a66e0268d347a7050416934bc55a38","sha1":"7202db82faab173725644e0a7a4bb36475b6b5ab","sha256":"b2c71abee063e98f2038f0aaba798d6362b1bdb7b743779b13635d0390075d8e","sha512":"a6f75bd71e949677079c1d21e88d6a72dade5ec5d59d31c7ac0c9438b1e224432254d0de50f854e15ab079fb04aa0e7ed31ebf56ed593dfe9742aff5f7420794","ssdeep":"","tlshash":"b431849db41ecfbdb0720938660bc05891188bdef326ca0170e84b1217d7c38662ab68","size":1678,"data":"","first_seen":"2025-09-04T08:54:20.508615Z","last_seen":"2026-03-07T13:25:36.504626Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/iSBcCTSFh6DPBMWIrt.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1364cae7ed5ef522a73e0d20b1317466","sha1":"37d18cfbf94892ea3aa603665729759633b8e9ff","sha256":"a4ee3bc98d083451924ad0a339bd258169aec8a0f0eee426012bf1fd77d7346b","sha512":"61d6b8da601ae93a8d7ea40b4b981016a0f1a11daf13746699f9dfef0c163d120a2146cd8ac0230da64eb386c2b16872d4e2069f77fc51ad3e9770497f759e2e","ssdeep":"","tlshash":"d8314591f6e9d035937e58e1c0391620e2591f447159f4e6d4ff0d815f86846f93ba3c","size":1810,"data":"","first_seen":"2025-09-04T08:54:20.47914Z","last_seen":"2026-03-07T13:25:36.505377Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/hChfuBKe9zB_A1xBdJ.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","size":27,"data":"","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-06-06T23:51:55.909505Z","times_seen":727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"dc3ad91797710d696debfe1533836190","sha1":"da6c5ff38aa3b30e3bb20bd03a30263c69ddc95d","sha256":"d63f2b262fc54bea1e386dea4ce43029ae7cbf33e29c11c257026a301e3c1fef","sha512":"c89be9e1f3d98ca1cf0edf74fca06d435d31367fced7d049c355a46b15760c44490ab161ae997bb7697ac04295f7c7cd4f1d1235d9d4d128ab6a1ee0930147fe","ssdeep":"","tlshash":"5cc08ce8b1c22d10aa12642128bf39e890244027708c2b028cd4ec492e230b08233ea8","size":153,"data":"","first_seen":"2024-09-21T18:14:23Z","last_seen":"2026-05-27T12:22:11.912502Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2c19cc74937e987332b796f96e1d4bff","sha1":"626b5843a48fc0d3b2792ac99f6503faeb8760c6","sha256":"d6ffd8cbd2a327856f7fe339d4bf460940bcfd4e32ea569b11f6ebccc74ff9c1","sha512":"2f3c983ae702759f0d94f07011004788c6d9a82090647e01dbcf3a4b950634ffa611ea18705e2aa0b8b5567fb376f98dba64b090267f8689caa5281bbd08acea","ssdeep":"","tlshash":"c3c08cc5a0c22d10160aa61110bf25e49034442674485b028c98d8883e220b08333ee8","size":147,"data":"","first_seen":"2024-03-11T20:01:51Z","last_seen":"2026-06-06T23:51:55.936255Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/js/project_51582_53936_1712669264.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41a80cbb017cafdd431d6487fbba106b","sha1":"b4252f9c765e2e2c97c686402c41e2f06f7a54e9","sha256":"a47457730e5ece9bfc39d067174effafa4ef9e8f8560234e3dad3b47483e37d6","sha512":"047bb1dce86aa5f7ddcd0d435cb2968c6ffeb77cc9e4daded7a1f05957b6405c96baa9fe2bb3fa2502778d9a76e2723a38ae951aacd2d99cea4469bd845f0eb5","ssdeep":"","tlshash":"60018b471c5330ba1be9717f0b3b5ce93a9962071180ca21bd4cc4692f908915a6aea8","size":671,"data":"","first_seen":"2026-02-24T14:10:04.452661Z","last_seen":"2026-06-04T11:53:58.785069Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0bf0fafb3dd896252599ea794ab8a38","sha1":"01149198f94a0f6c0c85833768c79010deb03d1e","sha256":"997fc0f203a40e44fd1f64573490fd44e9cf060123f26154eb86ca1928db0677","sha512":"57d16c9d5185062f4bc5f07305d7e27290444a31f334978535cfdeb80734fed2212c17e61d7c2dd47cfee23af6b1f32dca1f41d06d856cee633ace5eb4f8a0b0","ssdeep":"24576:+Kf438d2TmReyjb97NQRRg/Dm8NbQA5wYRQ:lQivp7EgLm8lQt","tlshash":"5c655a50642adab8e8f71468786c94c1b5692fffc201e915b1fc0c2627c7d38679e7b8","size":1507643,"data":"","first_seen":"2025-09-04T08:54:20.575883Z","last_seen":"2026-03-07T13:25:36.61523Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a165b580fdef0063f4f07735db86906","sha1":"e5f7cb9c865be58dad1208ebeb35b3f7ba57072a","sha256":"a470849c707f6212740e350cbaf00ed3c9d9fd791e73d9d017cd1d2adcf57070","sha512":"0d7d1ad42b8a502c1bc23e7379a52f07425465d4b3ef6ba8a2b2cef36091d45c1dffa79ec0d23723f48dd019409a3b851e898001dd63f676df6c60ccbf1484cb","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITq:s5TpRdfcKFU76x1H","tlshash":"aab33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":114830,"data":"","first_seen":"2026-03-01T09:32:56.157858Z","last_seen":"2026-03-10T09:56:03.829122Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/install.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2390ed36950670469ab68eaa380591e7","sha1":"711e527201d0e0be9d4712b3cda75085c70684c6","sha256":"87bfe2adc2bcdc039e5effaf223567652dee32107d68ab6e7b3a8181521106f6","sha512":"838fb858343e2465775cf494439c918b08ef5bdb02eec01c9c0f7ddae437c96548716a057dacdb9181def4aa21f5ba9009e4d63cec11e81246827e86133566fd","ssdeep":"384:dPygzNXbASlySwbgVTiB0WxjyyN1yL1hmGadeBT+SwQU:dygzxLTiGWc3LGdeBT6l","tlshash":"c792194870297cb8429e5a3315fea214307f1b852931d0a0f26ddb796f78e865177ebc","size":20685,"data":"","first_seen":"2026-02-18T21:57:56.58431Z","last_seen":"2026-04-15T20:10:01.050331Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.156.60.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","size":36489,"data":"","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-06-07T05:53:03.791099Z","times_seen":2372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/eXbqw4YyAWCH4RhJbn.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4dda62432449705b6e0882b8adc6a100","sha1":"cec4a61c756f4a67f5a4ac90270052e17ff1675b","sha256":"671d68c40183f5c9efd91cf1ec7219c66e20d74d995feb0bdb4e9f0929e5cad4","sha512":"e6bb8556a43a976ad8299c63d14f8419d018b485d5b56d2062873d3509070513095ee84a78740167855890d5ecb52c94967885f8f28a3c138d0180f169b51f98","ssdeep":"","tlshash":"1d01446fbd5dddb5759244f455c31859321a8f2cbb3a84c0e1b11a3015d2850f027748","size":707,"data":"","first_seen":"2025-09-04T08:54:20.548543Z","last_seen":"2026-03-07T13:25:36.549926Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1ca49f0e439cf34669924908e59b2897","sha1":"efea6ef6bd12f3ded99d07b429c6af21c23ed826","sha256":"9f9ee6011e8f88513c2761906180f430478c9d9835d4e74a211cafd3c79b955e","sha512":"f5dfd73abfc4c47819a1c10e68b974d2253a67fd9fb113e510809ee5ea650d5dd1f003dedcd6f88235e4e5b696f28c5e2f18526e794579f3b9f5a1d7db17bb21","ssdeep":"","tlshash":"fec08cc4b0c22d102602a91010af24e49024406770481b168c94dc882e224b09237e98","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-06T23:51:55.92819Z","times_seen":534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/tg9KuJbghaBa7adTHb.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab7855e824b298df8eecf6758fbc87a0","sha1":"8c46ae1be6761aeed0d8973b0c6f988b8cf85177","sha256":"ee630d92f20db4c0f11890eb4f5dc4545039a44ac31cde09ba9ca60daff8aa98","sha512":"5f0ffb30033fc89b5721f70d3fb1ab2621e272d292e4b57697f55698006fbc72960b1c35eb63f013336a3acd35bf44678167049aa9f39c31b6a2d8b163586ad7","ssdeep":"12288:wFOE7EWcTN8wafV0Za1UIjTApVo2P9gqpTa7Ah6G/kcWPaaiSfnnBRIhfGTAV9Sg:0jTg93rLJR","tlshash":"4d7523286a1bf744e419c0dbf9373c84d59de68aa00714d16f790bb71ba2792eb9cd03","size":1564645,"data":"","first_seen":"2025-09-04T08:54:20.566951Z","last_seen":"2026-03-07T13:25:36.619981Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/LQIglDmTnE9RKFU9Wo.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"508c2a054ef5401ee27ea21e05ba66e0","sha1":"3f925e6aa4ca411e8c72f84257575398a19104cd","sha256":"f51bdcb2cf6092f5e821a828542e7228f3a3d323866d98f835c87a3eef59eee6","sha512":"e179cf761be30db8950ff6c694f64e6a77da4e6a64656af01bdb874f281c5fc5eb5c569059ac1571ad8d66ecd0fbac0cb40bb5e702542967ac3d1fe24be16e61","ssdeep":"","tlshash":"61f0200fd801d6fd64b71c48395330512184afacc72098c4e6e52170e783875b06ef14","size":543,"data":"","first_seen":"2025-09-04T08:54:20.551904Z","last_seen":"2026-03-07T13:25:36.48904Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/aLo8GSggTsDGeW5QJW.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"afe9d833f070134c59337104ecb279f5","sha1":"97a04e022be252dd94774d9d97fa3d5180f291ea","sha256":"96345bc02de21a6c590cb15fdf8c57d687d3ab638251a68e65c845c097902462","sha512":"d5eb99130399e92c9a0592f7a6484eef47d37cd6b3f8c3e1ee787359ee3dcbd6da1eb19b4af15dcf6c3d69bf1e4911724a48c70fedca13c429a2d43d952381eb","ssdeep":"","tlshash":"0e212491b08cf17d42ff39b5f86b1016c35157e0236045cd6bbb058e4b269d1967ba1f","size":1246,"data":"","first_seen":"2025-09-04T08:54:20.53585Z","last_seen":"2026-03-07T13:25:36.497947Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/zGDaWqAb3DCTj41bwz.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f20eca31d26444f86d341e8248d5e393","sha1":"eea45ad610a82735797481e12614973af252396d","sha256":"91e095ef2a074c9086fdd7605e08e311cd5a868bfbf6bc03e663fe47faa067d2","sha512":"51fe3975642562f95b8c8c4817078032301ff0ee5a9fbdadccf14ae5d6121df9518ca8d37ae6f12522aab16089c4d1d2391577b8ef843a586aa49c1fb9fc7207","ssdeep":"96:0fXLjjA3qXkDai6xPtZ2ulKgRb2vbEj+U+Nka1Y34XJSq6F077W772E:0THvXKahVPlKXT4NjKYoXJQ0vW7T","tlshash":"b2b1283278a239036cc075f7794ccbce0e50053ae94398c3d2ea9e86d294f1cba69194","size":5319,"data":"","first_seen":"2025-05-15T07:17:42.12509Z","last_seen":"2026-03-27T02:24:47.36544Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/pIBi2ubwwXQ1yA6zd9.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a88b02b14a8748112acef1f40b39bacf","sha1":"473c38e1e043616b344d906387ae981941c76b3b","sha256":"d1cd8d858a0c6ff7ee95d1bf6a160d3f3321107334da399640429967f4ca909b","sha512":"7e4838a2140d071e78d97283fe88187fede41d722d8667d2973d10f3ac6a393a1a0e2cc2e2fc45ce83b09c0ebf9e2a6488c3ad8a69eab2a384ab24c9ac8be902","ssdeep":"3072:mP7fnZY5kWoH6J+2JfncB7Lp0JApCDZpjKoU2qeXp:g7fnm5AH6J+2JfnNa8","tlshash":"f1345c51740beb3ef4a3584968490800384d4fe6d51d9966f2fc7b3babc2db0573a7a8","size":237346,"data":"","first_seen":"2025-09-04T08:54:20.531481Z","last_seen":"2026-03-07T13:25:36.576395Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/zO1bOEg7NNSUQV_s9k.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ff3969455e45838d076a206cbfb6ce0b","sha1":"f5554360dc29c164488e6eb625a598e7dd60fcde","sha256":"96a6178ec85c4be0f67fcee07ac6e933ee298d60143152a1c772dd9bb49e236b","sha512":"da1aa567bbc2e3a17042667bbfc4f5566636163190a1f9752e0465ee566340b65aa99c5f3ec740615a16788f8c87eee93297c838c26a86181dd69ff01bac452b","ssdeep":"","tlshash":"a5d05b09859867b929f6106b07466bb021b7125d8f64c2b9515d0e34cf1a3065e4be32","size":246,"data":"","first_seen":"2025-09-04T08:54:20.461539Z","last_seen":"2026-03-07T13:25:36.520221Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e72149d5788d2e19b81eb5b4326ca99b","sha1":"ebd0948e33ee83e0512279c2df196c3ca6d73666","sha256":"c020455a7c5657122ea2127097388a76ec3a072d82af198e8602507908f8ac0b","sha512":"b39d961538e111fc6edb680ed562152624fa7e6896edd356490f6ffe429ce50e336b74357ece513c02d544878b019e5e361604fd793d78987879cc6e4b12e080","ssdeep":"","tlshash":"d7c08cc4a0c27d105622681010af24e49028406674481b028c94d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-14T08:59:55Z","last_seen":"2026-06-06T23:51:55.931494Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bbfdbe498eceeae4b8955afded5953f2","sha1":"8c751893c399c81cfa90910f797e551c903f6f03","sha256":"58b8d2d45f5c38007fb9d52dbfa22b0e70b9fc6eed0dde5c96f3c600a54c387c","sha512":"2ca782e375b5aea7b15ef61611be19449f3ae3efe35807414b2efdce77c2250741e4efc0b626fe817be0c8ff1e221f8a3f95e7bd9306ff3ac87b930c510077c9","ssdeep":"","tlshash":"84c08cc4a0c22e105622641010af28e89034402674489b528c98ec4d3e230b09233eac","size":141,"data":"","first_seen":"2023-05-08T02:54:43Z","last_seen":"2026-06-07T04:25:50.558737Z","times_seen":344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0a135a3820c44612d285347e945db1a0","sha1":"c751ab64ae029f5969e555a5dbec7dc15eb8f339","sha256":"6a02a962e9797eb8838be4ec5b3dbd47c5c6ced0fdee45ff8b242e92130a9d61","sha512":"92028e04908a6c3cdf03c75cf98c4678eb7bfbbdd11939716bad337599380d34293b296b7a059358cbdd3632a32b9f6b64f6768256fd20aa2efb83ff15d3a65f","ssdeep":"","tlshash":"6ec08cc4a0c23d001a22641068af34f4a034406ab14c1b528e94d8583e230f09233f98","size":147,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-06-07T00:27:53.727274Z","times_seen":996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/SqOik6GdtcDj7vnDa7.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"723c228b23f8bd6db3b8d16d13b45f5e","sha1":"6e4791d4e670a20c0ede920ff3527ed49e177945","sha256":"b063db3eabc45bd12842e0e5ccfbe1025a657d2494f688e5bf6e6aea337a1b9d","sha512":"e1dc59ea961555f196eabe3fa840be82e6f50fe1f65ffa138d106009d4c7f6c4e9df9e399a3feb8cf3245de96b2d2803c749802956dad1969d73daa99ba1866d","ssdeep":"192:y1END9bi8sJadU+8zpys8kyd8zp+zbmFpPZl3x0uTe8U7LO1idgcFJw0l8zpezDs:y1EFWVP0bmFpBl3Cuaru1iacFmzFtaVC","tlshash":"d682c8746010c32cfd95b5a51c909802b8cc4fdfca969172b1fd8d9263c39bbeeaa355","size":19037,"data":"","first_seen":"2025-09-04T08:54:20.503482Z","last_seen":"2026-03-07T13:25:36.563402Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/JZCjnbBqBsDBreQACu.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2b9dd3b2974a0d9b2a04f5de6af75e9c","sha1":"e5307bf5e522804691609c131f304de38bcf2610","sha256":"2562f0490a5208c596d86d76aafd394cc6fa3f3e7091de41c617c6d4dbb71b15","sha512":"afa064c45a601825a3fb1bc6d8f6f880149ea4285a944f63b1a046f2ab03ca1fcb53e1ca4412ec63e26f9622d6c29bcd2b643907f2b0c62fe41a141f914a3740","ssdeep":"","tlshash":"580128437574b2a0e3785c52d015568226f6475a3a42c4f0b90c5f426e3fe6354fdf55","size":717,"data":"","first_seen":"2025-09-04T08:54:20.547538Z","last_seen":"2026-03-07T13:25:36.502396Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e945cfacf91f6c0a27635339d8d37ff6","sha1":"4f09b7c9214edf2a190c29e64b54d2b6a69ca5c4","sha256":"9348a780a91a576eed3adcc0bae4d097a1761cbbe9fc3fb35029e60e604355c2","sha512":"2ac7ee471a447b022595f7e876b74c45bcbff208d1432e42faa5d3d152e034456910bd5fa6c25fc8a2cca51d32ea9f98b352c88465071c8f8e79d99b893f271d","ssdeep":"","tlshash":"515122193ad4b7298257b0b4987fcd49f520053a02e8d8484b1cd6fae82587dabb9cdd","size":2985,"data":"","first_seen":"2024-06-08T06:59:42Z","last_seen":"2026-06-06T23:51:55.922813Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/DaEnIiSxkDBmu4Hac9.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c985d4acb6dd91ab8e954141b105d9d1","sha1":"39cd032f0d581cefc73b3bbab74d6b4266f03b2c","sha256":"2c5044c8ddbaaea49d9119aebfdd5ee2c8d57b405d0c21d1a94f390c5b36dded","sha512":"e88987b3e0abb9d4680e33c015de8765df6012279842d5912ab37331717bbb586b853044a1dde2e5cb25824663596bb370debda0909d8f3471817786db21f3be","ssdeep":"","tlshash":"1a4184a8f911deb9e677463884131050220c1fdfa064dad8f0ae1e225bc6cf46456f78","size":2252,"data":"","first_seen":"2025-09-04T08:54:20.471983Z","last_seen":"2026-03-07T13:25:36.481209Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/wbXQLviW6Y1v1MbbBl.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"67904e12d6f358e3ecd5d343b0ba71fb","sha1":"ccd103fc031691590e2ad9bbdf05311ef122f5e2","sha256":"2326aa9540b342a4abddf87d2b6ea2c4a1db96023d94d6e6f709073075e20ecc","sha512":"1c3964f59c4944aad193138d85d70001983a90a9867fc4637764041496c267918aab17a7a5ddd80bdd0598a9fed1505688504368fcfd9ee781f2b9fc4af05c0a","ssdeep":"","tlshash":"17b01202468c45e8186400aa0b01a6f41362000c1b24d2b5a40d0e1cc71624a9d0fd22","size":92,"data":"","first_seen":"2025-09-04T08:54:20.462738Z","last_seen":"2026-03-07T13:25:36.578335Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7fc2131866c38ef4ff724bd98efff367","sha1":"df6ff71a44c573e84a622b07e56861450715dc60","sha256":"ad0b252875780cf92a0c79ab806df4f30c9490a10dad56be6d86117993558fb2","sha512":"a339e93c7702b02377c1c573b5d14ac25536fc7fee1b23439041dd2faf100b9a578a3f551489962a6afa00e7630a13af528880da26118e943831080081d52367","ssdeep":"","tlshash":"20c08cc4a0d22d001602a41010bf24e49024402670481b028c94e8483e220b08233e9c","size":136,"data":"","first_seen":"2023-12-01T02:41:08Z","last_seen":"2026-06-06T23:51:55.929984Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-06T23:51:55.924183Z","times_seen":1568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/Oiw60Q12YfC5yxZXX6.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e1975b3cb359841195e8da35eead5aa4","sha1":"1f59338410f141dd5229aaf282eeafe01cc0abd7","sha256":"7f567c7068112a03bfea9f9e08e292c34220556136c86e3f813058471068a001","sha512":"613907542d41fc80c531f79feee955b439905da753013624f54dc75a875fff74cc1a9c700d37a881ffbc2851774d1742be9f6cf03aba74075fb008f7359ea858","ssdeep":"","tlshash":"b10189647eccf6e2d16f046855e26349db3063ac58c000166e6783700fadbf3c46bb00","size":746,"data":"","first_seen":"2025-09-04T08:54:20.480085Z","last_seen":"2026-03-07T13:25:36.55455Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/4SueX34w3jDJVJxekC.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"44bda8c9ccd31ea79f17b5d0ceddcf38","sha1":"0cff06c0c63d8ee4cbc18400ba82af11cfa15cc5","sha256":"c66424c3c50252bed0be57e03aff6a1fa91feb1ceb8ebfca5ff830aadeda7aed","sha512":"9d39539cb30e34b7c627f28c9f0bc681059801d8a4ccb7d955d0fe73e623ec931bfa71f3bba195a9ce4d203b3e520431b157ebe2fe60ef16120e07747e923945","ssdeep":"","tlshash":"e2f0dc0eb011c17c51ba1c6d5840104c07628fa0128150c9763e1e980b34ce3e1a6c29","size":459,"data":"","first_seen":"2025-09-04T08:54:20.509573Z","last_seen":"2026-03-07T13:25:36.569342Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"596f72daaa28c1eb76c8f85b82bb899f","sha1":"3627dc24beb79ad0876f9f1b5997034b0650eb96","sha256":"7c3888a45ac6832ea65381b7611056853592c99996fb70e9ae6d3c64009b033f","sha512":"2d74da92ef020c6b6a2cdd84cc2026baa479f4f5ad98f038274ab6732bb92250bd7fc5910b75a9e3ab5400bbf07ee79017d6aed4bd395fc0c52e96808dccbef0","ssdeep":"","tlshash":"b4c080c471c63e4455177514167f25f450354077744c17629de8dc5d3e620b0e237ed8","size":172,"data":"","first_seen":"2024-12-08T21:22:12.603613Z","last_seen":"2026-06-04T11:53:58.845097Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/QsZwH9PMNjDlCCrCM0.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"daad07f8e6b8d794c4b2620055861d2b","sha1":"2efff03c37574c74e3cfb92420157f92ababe766","sha256":"05448bfdbcccd11e7357d2157860603de354e0230bcad63bc6a412eebe8adf9e","sha512":"abe7fb685cb2125f6c730a599ca30b09916d1d80b9c8af9fbbc044df2501a665cb405088b429d4190c92165b8d7d5f3e9c6f01dea304034360b168de8905f11f","ssdeep":"","tlshash":"a7517418fb85d03596f463f194d298c1862b6b01a5cbe8e9e2470d04273eba0b1eec23","size":2791,"data":"","first_seen":"2025-09-04T08:54:20.5202Z","last_seen":"2026-03-07T13:25:36.594017Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad7e35095f9a2452e79ebcc25fb81251","sha1":"3533927767ca29d6e0b31695488ef232872758a7","sha256":"91ae7e639fdbf3e17c99d0a5181209e00b574191a993bf842a3ebf8836c80f6f","sha512":"b2f77b83a888c755bc0032d77272ab73f68fa24ae71de4d16427b1347eab3608698ebadb6b413d7cd7e0ee92ae78e5a1dd3f785d92ce3f3d1f5ffbda94cc7e3f","ssdeep":"","tlshash":"a4f09e1b1c47b1ae1bd6a5baa77f9d1b22112246319054137e0c80286fe083c5fe9e8c","size":508,"data":"","first_seen":"2024-06-08T06:59:42Z","last_seen":"2026-06-06T23:51:55.926764Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/2VTS3rkdJCDpkXQ5T4.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"034f4936f38bae5b6018a4f3c1f781e8","sha1":"f9877a68e26de4e559af549d54f13b5443440d41","sha256":"062cccbade0e74690ba8f700ae9fe24908319fd85afe84dbd046b45eb6c3bb49","sha512":"5f49d38fb539446b55bf47c0b88860bd24e7131b84d3efee8415f8924582bbc29ecd4acaad509ff4ffa2c70ff94af8f6ce94cffee08c08795e75f8b3d7f2b18b","ssdeep":"","tlshash":"6a1108eb3781c16c0b3d98f8b22bbfa8d393834daee6dcd1845685500724c76802a862","size":862,"data":"","first_seen":"2025-09-04T08:54:20.51445Z","last_seen":"2026-03-07T13:25:36.524384Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/99MXOwofL6JLCIU48t.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fcd8d6b2c9dc70e10cf36bd5cf05a6f0","sha1":"24e21c4965768bc20b0482de0434845b1f06e611","sha256":"a8b57ce6db94b8c78963f3eb8573e4a0c29d2fc4d58c39d197a7ec6e2d2efce2","sha512":"773dd20b026f7914f16877f53557a3671a126dc30d9dafbb20dba6633bbb77e1b086d54d0117e4c36e14a0fc04980d5adc605d1c1cffb8794921d05ad4c343bc","ssdeep":"96:FCk2moXFWGHuMmG1nQD8moXFWGHuMmG1n9mfH/pq0eUDN6qNZNTNP:cdFbmhN6qNZNTNP","tlshash":"01c11581cb8fea0b873148c03b27ba9d939e1bcc70ae8583c389dd6c6d1cd5576569b4","size":5949,"data":"","first_seen":"2025-09-04T08:54:20.488525Z","last_seen":"2026-03-07T13:25:36.54033Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-07T00:27:53.723157Z","times_seen":485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ce2a497ed52d60984017d6c50050212f","sha1":"e5061d81325e8091799c99881264070b9ac648df","sha256":"87fe3ff7d869ecf3e942e21576e5622bea21282217409f77a14020c2160da30f","sha512":"88dbc2af0f09af280efe0b5ef7e7ba913e866c50c75aae5916ef6ffccb16a7a55ffc7b6c8158d18d17636845b7e139c2afd21b3dc1f030de36bf63136c7aa88d","ssdeep":"","tlshash":"34c08cc4a1c33d001a06661120bf39e4a0248026704c5b128cd4e8492e230b88237e9c","size":145,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-06T23:51:55.922116Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"25be7ed5930c8db4862612af8567a2db","sha1":"06f505826ddccfe66f0c52adfa2dfd79cf596c51","sha256":"4ead5b9f6af2838e6b4c856db3cfae0cb8cc475803253224228e7c7a6c3ae77a","sha512":"1ceddf178d3a758754cd18727489da2f0152594fec4174e8797417a3392191988709640277e89c3ebba6465a2bb51a46748aa938cdd549daecdb6d5667e6f4df","ssdeep":"","tlshash":"dac08cc9a0cb2e002a02665015bf3ae4a024442a704c9b438c94dc892e230f49233ea8","size":151,"data":"","first_seen":"2024-06-08T06:59:44Z","last_seen":"2026-05-24T05:24:57.828227Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/plugin.2b9c4b54.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"549b004d7237118dce19be5004924867","sha1":"5102830a217221d3c30e328e5f9d82581d1d2822","sha256":"3c6b0cff0b6e0c0e2dbce402e662602d865bffe9de3dd5c137d062827762dc5d","sha512":"8f3994ac862d360337667cc410d01122452f89f2d424e8d497a057ac46edc58c9bc620557c9256dd817687fbe738553b7e5986b4b85d30d65c7819cf951e1192","ssdeep":"6144:G0bg30bPKQQDLVQbOkTzhDetWx9a+gcmLTzrqGKAbCPfvaHcqiQUd+wa8Ar4gWDE:5bPKQQDLVQbpTzhDbMzrqGKAbCPaHcqn","tlshash":"3b844a49f5c9f86b07b361b1602f6009b3ba1b48e409d8e0fe75d6e91ab4d496323f1d","size":380050,"data":"","first_seen":"2026-02-18T21:57:56.5621Z","last_seen":"2026-04-15T20:10:01.102495Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/chunk-vendors.6ef765fa.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e788461ba915adcbfcfa9b10c35f265","sha1":"bc3841eff0c3841cfdef9a2f1e1b5f1d0dd6c26e","sha256":"69ced1151fb1b32d26c8b70739681828a1d99333c4a08114c98cd8af90b3f2ca","sha512":"b20ea5f22352ee329e6982d0fbd14fa2f4607a186b2d2973a99e43975164b2c6142b8ce87f7d5f54f47cb41bd6a33329ec3d09fafcb971de6e316ce5c0c8cfe0","ssdeep":"3072:gZcGj+j4Cm4m5BJ1IWqq/1cuC+4DdC58+skrMJz+8:gG27J1Wycu+4ikrMB","tlshash":"1424f7cdbb92f06843a335a4806f150bf17b6a18f40e81d4e6a6d5d1ac78a8e5137f3d","size":214670,"data":"","first_seen":"2025-12-10T08:58:23.267899Z","last_seen":"2026-06-07T05:53:03.796308Z","times_seen":1215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/vendor1_b8775aab.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4dd10bf9e3a55d04fb02d076f8d888fd","sha1":"73fe2ade639561e0fbee753a10ab3a8f64457ba6","sha256":"9b5cc937de300ae7ed821b3c25405086cd9fc0c25be5f6afc2213b06d1981408","sha512":"768877b7f6860408251dfc60ac57ed4499ac9ff259f506f98020a848b1f8dd67378758074406603c95d98bfa621d4d451d9a941f9932c2bc9ecfe1eb9e69f9ba","ssdeep":"3072:hUj1XOH0ipFe9OY0ceCK7KtWO77yzk83UzlgE6CjnWO:2kHbDCK7gf7n85NO","tlshash":"b22408c8b295b06143a770b4407f550bf13ab915680ec5a4f226e8da7cbc98e907bf7d","size":225000,"data":"","first_seen":"2025-05-10T22:57:10.916725Z","last_seen":"2026-06-07T05:53:03.797796Z","times_seen":2431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/Gwk2yi9gRyBBsFa_A8.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fbaff07f77aaf4ee408995dca1a6c7db","sha1":"eaa4aee1bbe91be3b45ff47d9f10615d01963ba4","sha256":"cdf26c5f8167936ed11704e8e65122a35966a20eaa10cd18ff5fc12c70974484","sha512":"28e66d9a1411bf5500c6f2ad56a9b32e60726c1e14f516ef4a084b2f72db45c7d86264f4941094584dfd4c855ff96e80e73c5c493aeb2a150f29b71637bad1ee","ssdeep":"","tlshash":"a5415588f66651358f777ce062a4308d4b1a07e0ebd624ee201d1f408b1bd027afd92e","size":1941,"data":"","first_seen":"2025-09-04T08:54:20.501682Z","last_seen":"2026-03-07T13:25:36.581257Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/chTAP4dexlCqVHK7WU.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"22a6013ba21e9dcc09d8f7c6154d9d49","sha1":"4bfbc5b97d857da48bc73b1518d1798e85eac112","sha256":"ace5d935c70ceb968dc23a079ac87463e0165bf8fb246ad093c35a1d6dce78bc","sha512":"04c366c49e5b9f23bd98883e85c02c1e1a9e401d367119b60bfbe42d1eecdd21c5a09f90e63f68ad6327dac2a9a540c52c46e2d516c05e4a311403126e6927d3","ssdeep":"","tlshash":"a901758c48e6cbf9c09702543d8a20a1d091a74cab35c8a2f05cad22634fcf095ce338","size":790,"data":"","first_seen":"2025-09-04T08:54:20.526718Z","last_seen":"2026-03-07T13:25:36.541327Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/y7R3FZ8ObQxX5-dKDf.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0a22fba42cd98a28c4eb3b1ae12aab4c","sha1":"9b98f7af24d8b9d52d52ce66495699aee9472826","sha256":"89119bb67b096c79a75606c9124f83824d8d19b7a227a896c97198a016e04ce6","sha512":"547d5c03c487837c4608de8cc794dda148962cc3cc2bf096c9c8121f4529c1aa5fa27015bfdf9bbf40dffdec93efb24b4f2f39739094a772722ba98115549f47","ssdeep":"","tlshash":"a1c08c1d784560f186590ce8d1220a6b5267fe44336a96f0a5298a1b432a2661206e66","size":157,"data":"","first_seen":"2025-09-04T08:54:20.53248Z","last_seen":"2026-03-07T13:25:36.564509Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/lOnmFhkPJ6BBthilus.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"859e10e5fd56d02ef33953a0cca0f0c7","sha1":"c76e6650533cb44d218941e9bb7ac30be598c27d","sha256":"c2a867036754d60978f6883e09da7009a4b9db168257ebfb4a5bbdef84ed0b0a","sha512":"15db3e21be07daf485c6043a4aed0d428b58f50dc4ec8a297f66b478d6fd8e5ed4d9b5b0ac41baeeb7bb507d50ead4098e7466ee218b138cc8974d0ea33cc0b0","ssdeep":"96:EGdbUm8q3EbIU67UTZmhxdmqkRxiwj0S1KM8MQrAqeMoHdRry3aqNTBGeRKGSfSM:9uq3AIx4qkR73WfZeM+Rry1BDRDSfqkd","tlshash":"8eb1e8e47580b93bc778a9ce90e011a0863667d8616fc7edb16f1e0b3608cb5727f50a","size":5182,"data":"","first_seen":"2025-09-04T08:54:20.515362Z","last_seen":"2026-03-07T13:25:36.501624Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"585bd093398adcca9c32b34732c37bec","sha1":"96a392e95f918d9e3f1bdb9580e449d2efae29a3","sha256":"61650dcdc8a73394c151be14084ae4baaeca952889b4bb593be70922e4150d04","sha512":"0775cc084b6d8ed8f39b1e784110ccd26a3dce8b19412f1045b40bca5a8595b3f9393ca0ef88cbbe253c4ab172b45f881940d98167de52998a866041b9d1bd4b","ssdeep":"","tlshash":"f311aa2824ea160c8117ba95b1bfff0c762c612565e4dc0c814dd079182edbed6dd9af","size":1070,"data":"","first_seen":"2024-06-08T06:59:43Z","last_seen":"2026-06-06T23:51:55.92757Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/chunk-common.c89c8366.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d5fc96181d6e46d019f09b4d2775252","sha1":"29727e3f3b0e59145e0f1ff25eeb28576a7bee6f","sha256":"05504a45064a116015be9b0eb83817af7c1b1042aae80c871726036ca0035436","sha512":"3a7a1401983a0b00d25c2baf14e98b2a6a4e0eeb9288b38108a9b2c7b3e2c1587fb3e00677f7b73bbed0954e8c63325ef8ade3b1c0ecb91ab44e7050668e3727","ssdeep":"384:kF9kWEuK2U72UecAvTbDPnPuTc2YejErqSqcDRVE1eDTaR5HJrCiKMcJHI7jW:q9mZ72UecAvrPuSqSpEPIMoyW","tlshash":"dbc222ccf2d7f0650b9a38a481bf110ae23e7d99b44e9196d261e0c17c3454da273f9b","size":27007,"data":"","first_seen":"2026-02-18T21:57:56.580919Z","last_seen":"2026-04-15T20:10:01.085959Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"02408d922d2e1998a79d8d6f850a8fa5","sha1":"05881ad7e2edf93b804c00b4998f794b9be830e2","sha256":"2864865ce925856a2bf5886ef5970aa3f3c2c592f2f6963f42fc77308efe5b95","sha512":"d79c14118cc3f703cf56276c6432e4c886ed04c65964fa528d842d1f2efb256ea5cb7f313b5dcf870032fddad8b695ac049c3d0de86f8ceeb0a5932b7586cc2a","ssdeep":"","tlshash":"c9c08cc4a0c26d105602645010af24e490244027b0481b028cd4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-06T23:51:55.93502Z","times_seen":975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6150a1c6197ff7e9ec85d1214825c8eb","sha1":"f28ab613765ba19af8baae0a49a255841efac7d9","sha256":"db158c1ce65630463b521eaceffbe394f6e613e87ab7c363839cfe1d781d1e39","sha512":"1e0a9160c81f65e7c109bc0ac536e968bf1be75345619f03c4beeca046ff18cf55fae30a3ab3ab5c09a35d28bfcc585ec5cc9d3a88163df32ac63597aa0cf6d5","ssdeep":"","tlshash":"8ec08cc9b0c72d5026026a5514ff25e49034402a708c2b03edd8e84a3e320b08233e9c","size":150,"data":"","first_seen":"2023-09-24T22:56:45Z","last_seen":"2026-06-06T23:51:55.924697Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"492c4389c8b2cae47694e67f1aef229e","sha1":"618289db1374901bd0f6dd4ab3aaaa2265aad8ca","sha256":"b9dcf35088337362546a445eb0a84b582586c6dda3b0621e60f638dd36df5dda","sha512":"03cf2aeed0e329a7343a92b1bfdc21de4a603343c1fb766b53eb55e1d45b4f8efb73602be72f29cb097935a1c6d124b7061d7f07cef7d9668586da7c1fe48040","ssdeep":"","tlshash":"75c08cc8b0d32e101602a46010af28e49024842bb4489b568dd5d8d92e660b48233e98","size":149,"data":"","first_seen":"2024-06-03T10:51:44Z","last_seen":"2026-06-05T04:06:43.906401Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/hjZatMuMwbCUocRiEs.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9c9fb39d889ccdb68c4fb03d5aecdcbf","sha1":"3a983d3a62d2017e5e3e681e3321f7953d1d12f3","sha256":"15a7e884af2a05c282321ed51a29bc4b7b7a9d6f9a99b00e2d2bd916c1dfb052","sha512":"5b0ec13975ea99c61d56f106fec14cebc4b82ce5713fd58450a00805164b3c873460c99a669092d0127f78c58fa542d1291a9fbb9e1dcf3da3086e536a41b0f8","ssdeep":"","tlshash":"20c08c9b310232b1a1220cc400160c82aef3826c139acfc190495fe44a368f4828b97d","size":165,"data":"","first_seen":"2025-09-04T08:54:20.534992Z","last_seen":"2026-03-07T13:25:36.602083Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/hTk5dpiK0KaZ2SayRG.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cf925c27bc8bd77f6d3e06ebfdeb522e","sha1":"2c13f1326cf4ebc593bb162dc1246bdbf66ea6a7","sha256":"8bc73a3eded7ee1fd3e200146637cc8cc99719442c86f8e328bbbbb535342856","sha512":"d020d6bff0ea48a5a0da147c5323fb5d8ace64d4700c7dd17f0d7cc87ba960c78cab2cd051295be5f7af8b1f43d4d29e08be188a142b041b0442f0c91c06e822","ssdeep":"","tlshash":"f1f00ea5c0c8dc30022ffa8892287591031cceb8c32141d4ec8a6658f3dd8a5d66cf20","size":503,"data":"","first_seen":"2025-09-04T08:54:20.522848Z","last_seen":"2026-03-07T13:25:36.58038Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de3ed6f62fa4508e69491bd89eb274b5","sha1":"eb8c50c4a1b5641abcb034fd7f88a95d15ed919e","sha256":"909705f246c8ead542b59e1f02453e6769864dcea4c1cfe24b8818a3a98ec0a3","sha512":"e7891d59adb2ea08b3810e31000d3b5df108358dc50347cd0bbad5fa3bfff24b170e934cbbce1bebc9baf1a352e9a1d34afda920db85c6f12e9759649fc03295","ssdeep":"","tlshash":"2ef022d91997593006eb11ff2b9e301060304003e908ffa0346f05046fed72ae7e1be8","size":618,"data":"","first_seen":"2024-12-08T21:22:12.696799Z","last_seen":"2026-06-06T23:51:55.932654Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df5e904e2a419fd848b94f0d8a9c5338","sha1":"ded3da98e8f557e3702034442c0527b9b6f2939d","sha256":"f46e53c31226b8a14d07eb98f71e7e9a331f5c34b36be4b50c4b23c4ad71796c","sha512":"c6afea57dbf39cd7d34d2ea55d4ecaab8c57547ca2ac0320e45e3e39d6b2e0388df4247c91746749c1f4d57539ec42ff0576a2abf6a9f090adc79fefee60c97c","ssdeep":"","tlshash":"90e0c02a18ea18b99757a2b6313ffc053102300d626883727a4cc505ef91d7f87a4f8c","size":388,"data":"","first_seen":"2024-08-25T20:57:00Z","last_seen":"2026-06-06T23:51:55.933246Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8d295e966aa710c73a7cbedaff20f458","sha1":"258b22ac189c9c1e6c41eef5f4ab03d77fb5b5f2","sha256":"35eac0a6bda589bd9c73fbd1dadf716012f9684ad7e7f0c6541f74f218989c9f","sha512":"9675e16b1c4b53dd16f3e589c2b7702e02446b306c300663dc20e3f7b4edd5bcf320a34f4595c55f60d651b50e4245fcc22d4c0f57b295a58f92e06c7955e174","ssdeep":"","tlshash":"1cc08cc4a0c27d005602a99010af24e4a028802a70485b468cd4d8482e620f18233ea8","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-06-01T19:00:20.431237Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ca3441268092f5f3296cbc45c9be4124","sha1":"0348b172ebfe7aa5e649e4b31851f332677e931b","sha256":"3f6acc164a5d0712e643ce2f47cef3052906a5d16a7cf7fa4ca21e2586aa63f9","sha512":"2145bb9c3d1285de751bb3ea1b899569192793bc0b0f1e0a15b4c79d43fd7880005341ca82f25db4905b17d1f212c49794684f356fdbf0acde101baf05fe7d1a","ssdeep":"","tlshash":"5bc08cc4a0c23d201a02641010bf24e49028842770481b028d94d8582e220b08233e98","size":137,"data":"","first_seen":"2023-05-11T11:46:06Z","last_seen":"2026-06-05T10:17:05.169059Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"92e81ef4d7ff796a20b80fcb8ecafb14","sha1":"3858157355200e83aa100cf5f214e911f10693ba","sha256":"d3a581bf91a70a8ca524ae1c262c4038b94530ea30d0464f6acecb58018931e4","sha512":"a23b0cc95270d3cd86f1ba4cd9605d791f61bc593f4570b1787e9cb84cea444ee4c8c3bd311fa45748451d191ac8b9c3736792935dfac95d25ef292b62f83983","ssdeep":"","tlshash":"1bc08cd8a0c22d105612a81211af29e490244026704c2b028c98e8483e230f08233eac","size":141,"data":"","first_seen":"2023-09-24T22:56:45Z","last_seen":"2026-06-06T23:51:55.92533Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/KWzPkQFngKBzeTdSZ6.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7f7a865239f9e3995bb85fa821af4b7e","sha1":"7479e98f689924c4e9ed67a2284aef1e7425085c","sha256":"23a8e5f398634bce8e82d4e37d70b5a22a0bad82c80512691ade922290305a92","sha512":"0ffd1b093ee8e18d7421a77d55e65236675c960204c5dfd9649ee75438ef1f717098d668760854e75e5bd0da76d264d702897cce855d51eb2d0c867943a98ef6","ssdeep":"192:s0whtiesnUXpkZlydAdbqBc/31XMHgFmypucFCZLoo7VaiJJg32vXoa8IkjtPdqk:JwzieMU5k/yMF+yAcFCZLoUaikcXstPn","tlshash":"a4321b9674047035c77799c5c09909b5a129378cf629c6d2f0ae2c3a3a695b4f0fef2e","size":11209,"data":"","first_seen":"2025-09-04T08:54:20.489611Z","last_seen":"2026-03-07T13:25:36.497286Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/swiper.eLl8_PPS.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e8f8c6e5da252bd2acc140e8271b7726","sha1":"66a225828b4d579097268b07d572437f1a27b1f5","sha256":"e48d4167abfd1772f8ce04b292c763afb0321ff17079dbc93e6ab9d7c5ee7e02","sha512":"75c9b9584d035b84fbeb1ec4c3f5ceee26b0171b23f3fe7e038ad46a572ff64e0fe2d3e450552f136a6e2b052fc85af5307e4b7984c96e0733c1a02027cd5dd8","ssdeep":"3072:sGvDusNtFqrZirVK0v0EumyP7EhOh0DvP/r02M0bd5:sA6ItFqrZiU0imyPYhOh0DvP/r02Td5","tlshash":"a6f34a997250b13252eb19e742768111b37909497809d4e8b1ad9ceb2d3f84812ffffe","size":167463,"data":"","first_seen":"2025-09-04T08:54:20.541637Z","last_seen":"2026-03-07T13:25:36.574125Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/lg3LPlDbkPCor3ABB0.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"76868ac75cdf3f274a8ee95807e8c30b","sha1":"c799060599dbd80adbca9fe2b33e874fe023c967","sha256":"d1841221ff2c51a93ea05c0496de5cb766f9f23559dbe2bce8b8fe784b2e585c","sha512":"34a8b9d055e42bf642325b4bf7cb86b06eb15a2c579e246d4912436fa580b884a0c7048248ed49542c9eb59ac4a937766150cb75cd71e4a2efb955541847dcbb","ssdeep":"","tlshash":"2f21021d7802d779d85649a8e1981802528d7beb976cc8a1f0ee9d256ad2df04527334","size":1232,"data":"","first_seen":"2025-09-04T08:54:20.463841Z","last_seen":"2026-03-07T13:25:36.573328Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/Yz3QkDyttwDM7p_PZI.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4b80488f12c0243f3e45234085ded996","sha1":"1338a83ba31aa2011154d3d1ebe0094138605ba7","sha256":"973e51f979eac7a591ce087d152271d955dc2d11d27ab9ea8bfa059429a0ff43","sha512":"9975417d5cd099b62b3d55def4814e626c2047fd52e35b66e7f0445c2b8ca93ee27b7f987ced7d40150b4866adf1e48e8320e523d658b1961bcbd00de60dd7f0","ssdeep":"96:IafdRuMfPzqfcSFuxEV16+4O0/q6Eyehq6i8Ht6JzdY86pd:XfdR7Pz4cSICVq/XOzKmP","tlshash":"5681f088780789bc88ed4624ac1764c065cf2bedd02449a1b1fedd1626d69e0cb96bf8","size":4103,"data":"","first_seen":"2025-09-04T08:54:20.517061Z","last_seen":"2026-03-07T13:25:36.547106Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bf511e0fc7bebf8446379a7876860af5","sha1":"92d699007efad44cf56c9b118816d468242fbeb9","sha256":"fdf3b4cc767d6d954a35e082047a49123acaf0e6173a23774fa46bd7ebee3dd6","sha512":"6b572687455fa56d0ab61a620d0e1b3cff07a51e198b986ddba5993551ed1dbf0f941811812dfa005ce79639479bb38c1f8518c5b59e442e9fc4347d93c103e1","ssdeep":"","tlshash":"32c08cc4a0c23e109a06682116af29e4a0244027704c5b138cd8ec482e221f4c233eac","size":148,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-06-06T23:51:55.93209Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/#/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2742162309ecb25408f0bdbd2e0e03d8","sha1":"0f732f495c154daa3c97fea9d422f8438f70ba4c","sha256":"c6ad747cb1db54d087ee3909f26e9ae3f0d6f66aab6245e48ad5d8168fce0fd2","sha512":"6f305b56fa56b526403d9c59de6cadadc7a428301ae45fc2a74de6a695d3752358d9fdeb04ccba88779aaab6a8327602e287ab5000a79dec03e7bc574fd8e41a","ssdeep":"","tlshash":"57c08cd8a1e22e005a0265a410bf38e89034542674486b039dd4d8593e635b0c233e98","size":150,"data":"","first_seen":"2024-03-11T20:01:51Z","last_seen":"2026-06-06T23:51:55.919841Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"binance-usdt.org/js/hjZatMuMwbCUocRiEs.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/hjZatMuMwbCUocRiEs.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHX3NdCIy4zmg0L1j82pCUNVUmUVcXAicgrlydDnC4EMDIqxwOauTndwcVediPy7KufdUGw6WUj2DWXlXPCRnRwYeCAGYi3RUj2HFw0B78M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2f2823e11df26e03bb7a9789f2d49f52\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61ebcad7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"9c9fb39d889ccdb68c4fb03d5aecdcbf","sha1":"3a983d3a62d2017e5e3e681e3321f7953d1d12f3","sha256":"15a7e884af2a05c282321ed51a29bc4b7b7a9d6f9a99b00e2d2bd916c1dfb052","sha512":"5b0ec13975ea99c61d56f106fec14cebc4b82ce5713fd58450a00805164b3c873460c99a669092d0127f78c58fa542d1291a9fbb9e1dcf3da3086e536a41b0f8","ssdeep":"","tlshash":"20c08c9b310232b1a1220cc400160c82aef3826c139acfc190495fe44a368f4828b97d","first_seen":"2025-09-04T08:54:20.534992Z","last_seen":"2026-03-07T13:25:36.602083Z","times_seen":4,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/hChfuBKe9zB_A1xBdJ.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/hChfuBKe9zB_A1xBdJ.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27\r\ncf-cache-status: MISS\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f9816492016a63d0b09768dfc8623c79\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8ZZtvhdZX4v0%2B1UNc0BBYYb9sq7pm0Xon%2FnA%2FJ8ZHc6ezJXMaWdDsfHROQbpfX6FPCXBIB%2B8JEybUCYtvAJ2WB5%2FAj2vlyneaCDJGbE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9d89b61eecc47dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-06-06T23:51:55.909505Z","times_seen":727,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/zGDaWqAb3DCTj41bwz.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/zGDaWqAb3DCTj41bwz.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/pIBi2ubwwXQ1yA6zd9.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kYu3D0Zziwx0l1pFRkGAnZidXYwzM%2F83MW%2FZIsYL38KZdqH9wiGUEZ0mTlZ7bEGdDGbSjsj8CE18F5v2nligX8VVZ4jw2g0MsuxQPZTuz9g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f23d3eb29195a77e86281f1e7267c5cd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b622ed1f7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5319,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5318)","md5":"f20eca31d26444f86d341e8248d5e393","sha1":"eea45ad610a82735797481e12614973af252396d","sha256":"91e095ef2a074c9086fdd7605e08e311cd5a868bfbf6bc03e663fe47faa067d2","sha512":"51fe3975642562f95b8c8c4817078032301ff0ee5a9fbdadccf14ae5d6121df9518ca8d37ae6f12522aab16089c4d1d2391577b8ef843a586aa49c1fb9fc7207","ssdeep":"96:0fXLjjA3qXkDai6xPtZ2ulKgRb2vbEj+U+Nka1Y34XJSq6F077W772E:0THvXKahVPlKXT4NjKYoXJQ0vW7T","tlshash":"b2b1283278a239036cc075f7794ccbce0e50053ae94398c3d2ea9e86d294f1cba69194","first_seen":"2025-05-15T07:17:42.12509Z","last_seen":"2026-03-27T02:24:47.36544Z","times_seen":88,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets-cdn.salesmartly.com/prod/project/f17ekxx/d4w/integration/plugin/image/20250907/1757250617059/image_1757250617059_928b4c15975a78c7c400456e873.jpg","fqdn":"assets-cdn.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.173.161.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /prod/project/f17ekxx/d4w/integration/plugin/image/20250907/1757250617059/image_1757250617059_928b4c15975a78c7c400456e873.jpg HTTP/1.1\r\nHost: assets-cdn.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 6818\r\nserver: AliyunOSS\r\ndate: Wed, 04 Mar 2026 14:33:16 GMT\r\nx-oss-server-time: 5\r\nx-oss-request-id: 69A842ACDA989C37340D0F72\r\naccept-ranges: bytes\r\netag: \"8D48E9A596B481EA8131E7F68E7AD7E0\"\r\nlast-modified: Sun, 07 Sep 2025 13:10:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16222585055312889202\r\nx-oss-storage-class: Standard\r\ncontent-md5: jUjppZa0geqBMef2jnrX4A==\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f71599c6fba16864f8f2e9521b2e54ea.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: NBnnvUPdhLchkbl5EryKixrjVAw1W741AP3u-iUIah77NLMHSr0cuw==\r\nage: 252880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6818,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 225x225, components 3","md5":"8d48e9a596b481ea8131e7f68e7ad7e0","sha1":"5c8025f76703bfabb6dafa74d4897564fa5df269","sha256":"f8fe90b29ad8abafdd9a85aef7e89c66af07b2f5105099b17f7637e684a257a3","sha512":"d1ee5209e1d0070431596d49202865ba4034b4e780c7056d1205f334754b8e1206470d18912d24dc088bbf73e547181d49c09f0c8e14a43e2f077407502513c8","ssdeep":"192:HftVRGvX/qxmYDBqTjUFIraR8CzyoTyqCvTE:HftVFxmYuUF4aOCznT2E","tlshash":"bce1e536fbc3d780774b41ad857e7cb3a3e06ad4a8c42a1759e30d9042a6f35590797c","first_seen":"2026-02-24T14:10:04.428934Z","last_seen":"2026-03-07T13:25:36.604379Z","times_seen":3,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":74,"dns":31,"connect":19,"send":0,"wait":21,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/52.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/52.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2330\r\nage: 38429\r\ndate: Sat, 07 Mar 2026 02:07:27 GMT\r\nlast-modified: Tue, 19 Oct 2021 05:35:17 GMT\r\netag: \"39edd8e5c80256300562f68afb1ab525\"\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin\r\nx-amz-cf-id: sVWAWr5MWAhXcHWOaGYmJi34VPXkmbDOcPVOZTaXYml628lGCvBCaQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-06-07T07:20:53.798285Z","times_seen":16166,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:51.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sat, 07 Mar 2026 12:47:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 01 Mar 2026 09:16:15 GMT\r\netag: W/\"69a403df-1c08e\"\r\nexpires: Wed, 11 Mar 2026 12:47:51 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"4a165b580fdef0063f4f07735db86906","sha1":"e5f7cb9c865be58dad1208ebeb35b3f7ba57072a","sha256":"a470849c707f6212740e350cbaf00ed3c9d9fd791e73d9d017cd1d2adcf57070","sha512":"0d7d1ad42b8a502c1bc23e7379a52f07425465d4b3ef6ba8a2b2cef36091d45c1dffa79ec0d23723f48dd019409a3b851e898001dd63f676df6c60ccbf1484cb","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITq:s5TpRdfcKFU76x1H","tlshash":"aab33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2026-03-01T09:32:56.157858Z","last_seen":"2026-03-10T09:56:03.829122Z","times_seen":112,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":138,"dns":5,"connect":24,"send":0,"wait":23,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/4SueX34w3jDJVJxekC.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/4SueX34w3jDJVJxekC.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BmXEBcpIgJmnUpMBuh7cTaq0mc%2FMjF2awdO3tXMwfLRFdzfnux2jhY43Lt8Aukz1HXIx6r67U248eDQBKHDIrz%2B1ytkuuP16vGJw2ZbJ38%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"eaea77bd873e3568741f17ea1c5ee2f2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623dd4e7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (458)","md5":"44bda8c9ccd31ea79f17b5d0ceddcf38","sha1":"0cff06c0c63d8ee4cbc18400ba82af11cfa15cc5","sha256":"c66424c3c50252bed0be57e03aff6a1fa91feb1ceb8ebfca5ff830aadeda7aed","sha512":"9d39539cb30e34b7c627f28c9f0bc681059801d8a4ccb7d955d0fe73e623ec931bfa71f3bba195a9ce4d203b3e520431b157ebe2fe60ef16120e07747e923945","ssdeep":"","tlshash":"e2f0dc0eb011c17c51ba1c6d5840104c07628fa0128150c9763e1e980b34ce3e1a6c29","first_seen":"2025-09-04T08:54:20.509573Z","last_seen":"2026-03-07T13:25:36.569342Z","times_seen":4,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/lang_j?rts=1772887674207\u0026l=en","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /api/lang_j?rts=1772887674207\u0026l=en HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nst-ctime: 1772887673576\r\nst-ttgn: 5f9cd912cdf31c89d8d43d4141e68528\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdhebyTvd0zLQNBfis42uYx5QhcLFT5pBDr0KD6rTQ1MfiSJ6BOKKJZPnwdmsX88Gsbyo5De%2FiQmqqPCvhr1L0M0E%2F3o1mUHcGWC%2BpjA1wBn%2FCxR\"}]}\r\ncf-ray: 9d89b61cea34be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30124,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (30124), with no line terminators","md5":"81b676d20b40c6d1e6c99a9bd7dd63e0","sha1":"9db40f08b75cd454cd20e09fa52efca05ad07639","sha256":"bbb0b1278fad39481def399f01da30d0f180ac025e29369b1e26ffc8b7eb7a00","sha512":"288b678aac4de5faf3ed4eba00401ebbe17938ed3175d6b1661494b6374af00be02e97fe5ed47ea238004fd80f0281d4d28a2e4615f6bacd08dc4a4002da7a99","ssdeep":"768:hlY3osS704O+iOFfsJ4Udf20k6FrKo1hGVE:Q3osS7JwOFfYtf20/phhGu","tlshash":"2ad2e1a797671d4d4e5d8d14c73ea80e5ea1e8ad80853a38e07fee0f654c30a1d64dcb","first_seen":"2026-03-07T12:48:29.210395Z","last_seen":"2026-03-07T12:48:29.210395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/pIBi2ubwwXQ1yA6zd9.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/pIBi2ubwwXQ1yA6zd9.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCb0RScisbxvsFy7jjI6gVEwDGqoKHuhTTjW6TTwWwpuhfES0Vy8w2kIb2jom7NbZmcdcZcKTxkEJoG2j4tutB%2FuxsNLJ8gWc23YRjl9IzE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"914f7feca962fe9ce2ec8e0933a23d99\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eaca57dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237346,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a88b02b14a8748112acef1f40b39bacf","sha1":"473c38e1e043616b344d906387ae981941c76b3b","sha256":"d1cd8d858a0c6ff7ee95d1bf6a160d3f3321107334da399640429967f4ca909b","sha512":"7e4838a2140d071e78d97283fe88187fede41d722d8667d2973d10f3ac6a393a1a0e2cc2e2fc45ce83b09c0ebf9e2a6488c3ad8a69eab2a384ab24c9ac8be902","ssdeep":"3072:mP7fnZY5kWoH6J+2JfncB7Lp0JApCDZpjKoU2qeXp:g7fnm5AH6J+2JfnNa8","tlshash":"f1345c51740beb3ef4a3584968490800384d4fe6d51d9966f2fc7b3babc2db0573a7a8","first_seen":"2025-09-04T08:54:20.531481Z","last_seen":"2026-03-07T13:25:36.576395Z","times_seen":5,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/w7LNKNSb61CL-iCuXR.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xBQ0mRB7dp3OyjcvrmKd3xra7zZLcTj6Mjb6WozKMDXlNFoWx5V2tV1Tz8saJ7CmUl4J78Hss2tCFsjoN5k7iXg4WFHDNUv8oJNJfRixUZI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e337f594692252113f6bea9391591936\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61ebcac7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1507643,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11423)","md5":"ac0922a25a28956d4dca13fc552e8694","sha1":"5e9f43d1f561a3624f73609458d7a7a1b3795bb0","sha256":"1303248a951e0a625a7aa2685c4348893b06013c3294baaae7eb81df8560689b","sha512":"6261f5c2f497710a2188e50f9cc084e186073add1c07975bb28659483df812880f72869497b6d070901b332ec6509b56bd4392b48312efe20097b3a04060687c","ssdeep":"12288:/QbSffpq3Fq/l2BGBIg9cZVyfR5k9yjb97NY3BA3z:+Kf438d2TmReyjb97NQS","tlshash":"7d253940643ad6b8e8f71468786d90c1b1693febc201e915b1fc0c2627d7d78a79e7b8","first_seen":"2025-09-04T08:54:20.513417Z","last_seen":"2026-03-07T13:25:36.552682Z","times_seen":4,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":339,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/plugin.2b9c4b54.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/plugin.2b9c4b54.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 06 Feb 2026 07:06:43 GMT\r\nx-oss-server-time: 65\r\ncontent-encoding: gzip\r\nx-oss-request-id: 698593030189C7333362BD57\r\nlast-modified: Fri, 06 Feb 2026 05:58:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3346053202184951564\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: VJsATXI3EY3OGb5QBJJIZw==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee6fa75e712f6cdc2fa03f92f2cfbde0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: eIXwhwzQx2gl3RaLngfTeirfo3zSFBJoZ7mUZ9UZTvnaieWWxLRD8A==\r\nage: 2526071\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":380050,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62398), with no line terminators","md5":"549b004d7237118dce19be5004924867","sha1":"5102830a217221d3c30e328e5f9d82581d1d2822","sha256":"3c6b0cff0b6e0c0e2dbce402e662602d865bffe9de3dd5c137d062827762dc5d","sha512":"8f3994ac862d360337667cc410d01122452f89f2d424e8d497a057ac46edc58c9bc620557c9256dd817687fbe738553b7e5986b4b85d30d65c7819cf951e1192","ssdeep":"6144:G0bg30bPKQQDLVQbOkTzhDetWx9a+gcmLTzrqGKAbCPfvaHcqiQUd+wa8Ar4gWDE:5bPKQQDLVQbpTzhDbMzrqGKAbCPaHcqn","tlshash":"3b844a49f5c9f86b07b361b1602f6009b3ba1b48e409d8e0fe75d6e91ab4d496323f1d","first_seen":"2026-02-18T21:57:56.5621Z","last_seen":"2026-04-15T20:10:01.102495Z","times_seen":290,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/311.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/311.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 871\r\nlast-modified: Mon, 07 Dec 2020 19:40:21 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 08:51:49 GMT\r\netag: \"fabe5ccf144cf71567206f8bd2fb6b10\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: -8QxwJjt4aqAQqdzNF6MGlK3gjf7twZyM0qbzwQ7agmDQt5Y2OLqpQ==\r\nage: 14289\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"fabe5ccf144cf71567206f8bd2fb6b10","sha1":"5954bf2fbf8dfdfe34a26bd5d34427d7489f5ef2","sha256":"d9b93f8dd7d88f101e9e1be40cb3032c5f854889caba49d45bcec65666f14a7e","sha512":"50fea5730262e7845033dec7515c78d1854f0a6b8ff77e13a9e15a7eae538bef0c7fbe8315db2868e92159c4ff8f39d447ba5874cbb29ef0730fcdd2ca4877e9","ssdeep":"","tlshash":"601196637878f712a99dc3925c6f6913e83815f442fc081c798a616563caee858e38c1","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-06-04T11:53:58.797843Z","times_seen":111,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":63,"dns":32,"connect":3,"send":0,"wait":15,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:52.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://binance-usdt.org/\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 13:24:56 GMT\r\nexpires: Fri, 05 Mar 2027 13:24:56 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nage: 170576\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-06-07T07:43:00.818168Z","times_seen":18333,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":123,"dns":1,"connect":21,"send":0,"wait":22,"receive":23,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/wJYO1kiEYtoBQ2vVpK.css","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/wJYO1kiEYtoBQ2vVpK.css HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HBytFt93bgM0aY1uTTkgDzmDTl0p%2BmfitR5nDuLKKddunBjbB%2BDCZUQIuqFAh1qcRo%2FPOp2urertzaXBscNCcI5Nn0vcYS7LLKq%2B%2FqTat%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a1dc892379af409bd6e05231ba838b71\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61e2c927dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49194,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (49193)","md5":"5b37797eb4758dc3462fdd45981465f8","sha1":"dcc45ab9865c66edec1a22cc9d593d31bfa49123","sha256":"942b63bb7a2213ee8c03bd29cff60e77f9180b989db20078995f906c45904ca3","sha512":"0de19f2cc30476457dfee294582253742e7bd2788b6492b83ca079a0f2485b2ed736dccaf78e4d282714a42feff3ab4714a036e2762e88e5e98326d816e2112e","ssdeep":"768:UAxh0BD8u5Y0Jwh0DNu95sRlDYxgRvvTo0NBW1sBk:CBU5EYgo0Ns","tlshash":"da237654256c633eda2bf16358fe46d91910f713c1377a4eba42733199dfb822231aca","first_seen":"2025-09-04T08:54:20.550561Z","last_seen":"2026-03-07T13:25:36.545408Z","times_seen":5,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/pIBi2ubwwXQ1yA6zd9.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/pIBi2ubwwXQ1yA6zd9.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/tg9KuJbghaBa7adTHb.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCb0RScisbxvsFy7jjI6gVEwDGqoKHuhTTjW6TTwWwpuhfES0Vy8w2kIb2jom7NbZmcdcZcKTxkEJoG2j4tutB%2FuxsNLJ8gWc23YRjl9IzE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"914f7feca962fe9ce2ec8e0933a23d99\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b6213cfc7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237346,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a88b02b14a8748112acef1f40b39bacf","sha1":"473c38e1e043616b344d906387ae981941c76b3b","sha256":"d1cd8d858a0c6ff7ee95d1bf6a160d3f3321107334da399640429967f4ca909b","sha512":"7e4838a2140d071e78d97283fe88187fede41d722d8667d2973d10f3ac6a393a1a0e2cc2e2fc45ce83b09c0ebf9e2a6488c3ad8a69eab2a384ab24c9ac8be902","ssdeep":"3072:mP7fnZY5kWoH6J+2JfncB7Lp0JApCDZpjKoU2qeXp:g7fnm5AH6J+2JfnNa8","tlshash":"f1345c51740beb3ef4a3584968490800384d4fe6d51d9966f2fc7b3babc2db0573a7a8","first_seen":"2025-09-04T08:54:20.531481Z","last_seen":"2026-03-07T13:25:36.576395Z","times_seen":5,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/aLo8GSggTsDGeW5QJW.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/aLo8GSggTsDGeW5QJW.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wq0N5xgsQX4cAE6rjCUrio%2FzvYKg5sjbJ2%2BPRbT2VIKF5JtfYY5mIg1v7HWMNxYz84eZ74f%2Biplg04qEOAUvIsqOuqpoetC28jSrselFqNQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ed7ae534c9983c8afcc80a982605ba48\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623dd4d7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1245)","md5":"afe9d833f070134c59337104ecb279f5","sha1":"97a04e022be252dd94774d9d97fa3d5180f291ea","sha256":"96345bc02de21a6c590cb15fdf8c57d687d3ab638251a68e65c845c097902462","sha512":"d5eb99130399e92c9a0592f7a6484eef47d37cd6b3f8c3e1ee787359ee3dcbd6da1eb19b4af15dcf6c3d69bf1e4911724a48c70fedca13c429a2d43d952381eb","ssdeep":"","tlshash":"0e212491b08cf17d42ff39b5f86b1016c35157e0236045cd6bbb058e4b269d1967ba1f","first_seen":"2025-09-04T08:54:20.53585Z","last_seen":"2026-03-07T13:25:36.497947Z","times_seen":4,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/lg3LPlDbkPCor3ABB0.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/lg3LPlDbkPCor3ABB0.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTXODIXBLhzXdXQ%2BCyzq2FZnML0WT8Wj5JHkBGpVWF%2FYOw4%2BWyQidesw%2F2smWNmhr7ouQybvb6g20YfWAy9jZZrLwN0f6TV4oVmR1vC1boQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9716ecd4aefa28eb3d860f0cf2b120d3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623ed527dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (796)","md5":"76868ac75cdf3f274a8ee95807e8c30b","sha1":"c799060599dbd80adbca9fe2b33e874fe023c967","sha256":"d1841221ff2c51a93ea05c0496de5cb766f9f23559dbe2bce8b8fe784b2e585c","sha512":"34a8b9d055e42bf642325b4bf7cb86b06eb15a2c579e246d4912436fa580b884a0c7048248ed49542c9eb59ac4a937766150cb75cd71e4a2efb955541847dcbb","ssdeep":"","tlshash":"2f21021d7802d779d85649a8e1981802528d7beb976cc8a1f0ee9d256ad2df04527334","first_seen":"2025-09-04T08:54:20.463841Z","last_seen":"2026-03-07T13:25:36.573328Z","times_seen":4,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/cY9Ifftan6JjKyE2Bj.png","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/cY9Ifftan6JjKyE2Bj.png HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1650\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d652a936bbdf0979647aed33019448cf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3U2JH4UYgxtTobEneYh1aBlAWLOTHuVPhMzC4Q2zOWNIehc5z1GQrUIEafFc7PsPYMRyvX2jlcAlsDgA9ht79MuSx9DBTlbJSM0TZYW0X4I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9d89b624ad6a7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"57ec4f98d0668501334f2b7b9e3e8f85","sha1":"53bb8a95b3170d80d4969d0b471fad9f9de87a87","sha256":"d390838e7ba5e4cebe075458448d3e6274e49879f0666b69cc373ac7657f7428","sha512":"384d461a444014170d44c89c772d180fec02fdb2ac8e29c7ab9fc2ef2929531ca50af06b332f6113989eae3164e77ec4746e582bf415065f504013588a89410a","ssdeep":"","tlshash":"51313acc3294aa2cdad500b1dca8b815f99b082800d67b45e07bf19cbd5580e2e1d277","first_seen":"2025-03-06T09:19:26.956445Z","last_seen":"2026-03-13T19:58:57.026172Z","times_seen":11,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets-cdn.salesmartly.com/prod/project/f17ekxx/d4w/integration/plugin/image/20250907/1757248777781/image_1757248777781_3e476632d33437ed77bbff70207.jpg?x-oss-process=image/resize,m_fill,h_120,w_120","fqdn":"assets-cdn.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.173.161.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /prod/project/f17ekxx/d4w/integration/plugin/image/20250907/1757248777781/image_1757248777781_3e476632d33437ed77bbff70207.jpg?x-oss-process=image/resize,m_fill,h_120,w_120 HTTP/1.1\r\nHost: assets-cdn.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 2758\r\nserver: AliyunOSS\r\ndate: Wed, 04 Mar 2026 14:41:37 GMT\r\nx-oss-server-time: 30\r\nx-oss-request-id: 69A844A15F471E393979FF52\r\netag: \"8D48E9A596B481EA8131E7F68E7AD7E0\"\r\nlast-modified: Sun, 07 Sep 2025 12:39:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-hash-crc64ecma: 9321313619554326486\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f71599c6fba16864f8f2e9521b2e54ea.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: 1ayjUNjo6HKMzEjeN2jP0QQ4KKB5I0EzSSVeI4vTUZjQeImYJ3sHJg==\r\nage: 252379\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2758,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x120, components 3","md5":"a4d8d8ec4701d3b1c56075d570b235cb","sha1":"d665d56c634ee7f9060aa3da132829d140b9c741","sha256":"57fecd1ea56b370921fa12d1b69763148c5a1448a057ca1d0130d71f4c7ed4b8","sha512":"30e86467ac8523aad5ec213f834f81d8c237a713422a5c393152c668942348ca4da10a5f3231e1c39e7ce3df370e2d3653fdceb3a45b97e5d01bffed5d65db91","ssdeep":"","tlshash":"29512b5a934ae7c5fe3a05fd44886d0197d38f409a4e0a9ef2c8a9bb19351542d3821d","first_seen":"2026-02-24T14:10:04.48944Z","last_seen":"2026-03-07T13:25:36.603263Z","times_seen":3,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":73,"dns":47,"connect":16,"send":0,"wait":19,"receive":8,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets-cdn.salesmartly.com/prod/project/f17ekxx/d4w/integration/plugin/image/20250907/1757250626470/image_1757250626470_928b4c15975a78c7c400456e873.jpg","fqdn":"assets-cdn.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.173.161.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /prod/project/f17ekxx/d4w/integration/plugin/image/20250907/1757250626470/image_1757250626470_928b4c15975a78c7c400456e873.jpg HTTP/1.1\r\nHost: assets-cdn.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 6818\r\nserver: AliyunOSS\r\ndate: Wed, 04 Mar 2026 14:33:16 GMT\r\nx-oss-server-time: 4\r\nx-oss-request-id: 69A842ACDA989C3734761372\r\naccept-ranges: bytes\r\netag: \"8D48E9A596B481EA8131E7F68E7AD7E0\"\r\nlast-modified: Sun, 07 Sep 2025 13:10:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16222585055312889202\r\nx-oss-storage-class: Standard\r\ncontent-md5: jUjppZa0geqBMef2jnrX4A==\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f71599c6fba16864f8f2e9521b2e54ea.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: -hW9irS2JisPnfM4-4IhLZGIlR0G0FaOmqAUp7G6Ql5l-9MT-yE8Ew==\r\nage: 252880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6818,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 225x225, components 3","md5":"8d48e9a596b481ea8131e7f68e7ad7e0","sha1":"5c8025f76703bfabb6dafa74d4897564fa5df269","sha256":"f8fe90b29ad8abafdd9a85aef7e89c66af07b2f5105099b17f7637e684a257a3","sha512":"d1ee5209e1d0070431596d49202865ba4034b4e780c7056d1205f334754b8e1206470d18912d24dc088bbf73e547181d49c09f0c8e14a43e2f077407502513c8","ssdeep":"192:HftVRGvX/qxmYDBqTjUFIraR8CzyoTyqCvTE:HftVFxmYuUF4aOCznT2E","tlshash":"bce1e536fbc3d780774b41ad857e7cb3a3e06ad4a8c42a1759e30d9042a6f35590797c","first_seen":"2026-02-24T14:10:04.428934Z","last_seen":"2026-03-07T13:25:36.604379Z","times_seen":3,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":70,"dns":24,"connect":16,"send":0,"wait":21,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/Oiw60Q12YfC5yxZXX6.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/Oiw60Q12YfC5yxZXX6.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c31RPWeYnps%2FRxv1IBRpR87UF0d65Cj4CoKq35zPaQh3Moa11GT8CEJJpVs%2Fp5qR9pfvhw4rgBKYBRayw4Mbw8bn4%2BVniHKTbnDH16Sshyk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"76a2dc6c7b91076e4a0bce0241a582d6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61edcb97dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":746,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"e1975b3cb359841195e8da35eead5aa4","sha1":"1f59338410f141dd5229aaf282eeafe01cc0abd7","sha256":"7f567c7068112a03bfea9f9e08e292c34220556136c86e3f813058471068a001","sha512":"613907542d41fc80c531f79feee955b439905da753013624f54dc75a875fff74cc1a9c700d37a881ffbc2851774d1742be9f6cf03aba74075fb008f7359ea858","ssdeep":"","tlshash":"b10189647eccf6e2d16f046855e26349db3063ac58c000166e6783700fadbf3c46bb00","first_seen":"2025-09-04T08:54:20.480085Z","last_seen":"2026-03-07T13:25:36.55455Z","times_seen":4,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/lOnmFhkPJ6BBthilus.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/lOnmFhkPJ6BBthilus.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCct9idcOVLRe2pvUoJp%2BSURukyRg%2FtZii%2Fc2m9q53DtEHQgiQLzgI5ZEMaB8GZXebQfzCujO6p9He4k3shD7SNI2Gdn94Hvl3b6aY6UE1c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f1edcc69d8703689a3eb2ca9c88a2848\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623cd487dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5182,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2666)","md5":"859e10e5fd56d02ef33953a0cca0f0c7","sha1":"c76e6650533cb44d218941e9bb7ac30be598c27d","sha256":"c2a867036754d60978f6883e09da7009a4b9db168257ebfb4a5bbdef84ed0b0a","sha512":"15db3e21be07daf485c6043a4aed0d428b58f50dc4ec8a297f66b478d6fd8e5ed4d9b5b0ac41baeeb7bb507d50ead4098e7466ee218b138cc8974d0ea33cc0b0","ssdeep":"96:EGdbUm8q3EbIU67UTZmhxdmqkRxiwj0S1KM8MQrAqeMoHdRry3aqNTBGeRKGSfSM:9uq3AIx4qkR73WfZeM+Rry1BDRDSfqkd","tlshash":"8eb1e8e47580b93bc778a9ce90e011a0863667d8616fc7edb16f1e0b3608cb5727f50a","first_seen":"2025-09-04T08:54:20.515362Z","last_seen":"2026-03-07T13:25:36.501624Z","times_seen":4,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/99MXOwofL6JLCIU48t.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/99MXOwofL6JLCIU48t.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5thXdoxk73xbZTJnRtLjtRvkH%2FTGk4nViym4DJvFIZ21hVPIYtdoL9OByMxc7ifkMxrvhgiNtnkmSxxZfI7ZZdArIu0wrpJVgLzIT1sG8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"09bf295677dd3a0274bbd28920c42069\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623ed517dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5949,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5948)","md5":"fcd8d6b2c9dc70e10cf36bd5cf05a6f0","sha1":"24e21c4965768bc20b0482de0434845b1f06e611","sha256":"a8b57ce6db94b8c78963f3eb8573e4a0c29d2fc4d58c39d197a7ec6e2d2efce2","sha512":"773dd20b026f7914f16877f53557a3671a126dc30d9dafbb20dba6633bbb77e1b086d54d0117e4c36e14a0fc04980d5adc605d1c1cffb8794921d05ad4c343bc","ssdeep":"96:FCk2moXFWGHuMmG1nQD8moXFWGHuMmG1n9mfH/pq0eUDN6qNZNTNP:cdFbmhN6qNZNTNP","tlshash":"01c11581cb8fea0b873148c03b27ba9d939e1bcc70ae8583c389dd6c6d1cd5576569b4","first_seen":"2025-09-04T08:54:20.488525Z","last_seen":"2026-03-07T13:25:36.54033Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/hChfuBKe9zB_A1xBdJ.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/hChfuBKe9zB_A1xBdJ.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27\r\ncf-cache-status: REVALIDATED\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f9816492016a63d0b09768dfc8623c79\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8ZZtvhdZX4v0%2B1UNc0BBYYb9sq7pm0Xon%2FnA%2FJ8ZHc6ezJXMaWdDsfHROQbpfX6FPCXBIB%2B8JEybUCYtvAJ2WB5%2FAj2vlyneaCDJGbE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d89b623ed557dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-06-06T23:51:55.909505Z","times_seen":727,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T12:47:51.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iudqlyPRR9flZxGSe3YbnqOckqEGLBYWH4%2BNgdOHrwGeWzqCzOHa1lhQCH8XbnMHEqK6ehAJfZWv%2BvdJCrtRZWUK6SZFRXsZGEcivrrg2Zc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d89b60aa8cd1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216515,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (58885)","md5":"38d3c0ae0c1bb960c46b436c36c91a3a","sha1":"acf0d168699746d0aa682f83d186b431c3a59947","sha256":"9981c6c09aaa71935934d5c49ffbe86cb79ac0d5fc0561d1a17f337342d33f10","sha512":"759fa20ddaae2c9cf283cb70f9822f08b332b81c578592deda8f796855255091ab3f0bc58347e8c908aa61caabc467a6766fe65d8fb8b071e0ea1d782f263119","ssdeep":"1536:fSfHQ34OObbsPO4MD7czwKCfymtGKnXWpV9zWblHoyGrmVcxq605HJjPxRfoowZr:f7","tlshash":"4b2418a153e0e2d8f755832dd5316c7621bf34ea7be0c28cc8cd6677aa1a8c9441cd6b","first_seen":"2025-09-04T08:54:20.553129Z","last_seen":"2026-03-07T22:47:42.888201Z","times_seen":7,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":58,"dns":24,"connect":8,"send":0,"wait":60,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/favicon.ico","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:52.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 07 Mar 2026 12:47:52 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6X%2BlIjD%2FQcWelC4tqpgw421HCM7QX4v%2BYrGFjKSZVC6PJR1aQG4KzDfIbIFFbVXT7HlJDYiptmvKvHLHe8faSRmcxqN5h8aZt79lBssrKcM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\ncf-ray: 9d89b6110b557dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216515,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (58885)","md5":"38d3c0ae0c1bb960c46b436c36c91a3a","sha1":"acf0d168699746d0aa682f83d186b431c3a59947","sha256":"9981c6c09aaa71935934d5c49ffbe86cb79ac0d5fc0561d1a17f337342d33f10","sha512":"759fa20ddaae2c9cf283cb70f9822f08b332b81c578592deda8f796855255091ab3f0bc58347e8c908aa61caabc467a6766fe65d8fb8b071e0ea1d782f263119","ssdeep":"1536:fSfHQ34OObbsPO4MD7czwKCfymtGKnXWpV9zWblHoyGrmVcxq605HJjPxRfoowZr:f7","tlshash":"4b2418a153e0e2d8f755832dd5316c7621bf34ea7be0c28cc8cd6677aa1a8c9441cd6b","first_seen":"2025-09-04T08:54:20.553129Z","last_seen":"2026-03-07T22:47:42.888201Z","times_seen":7,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/w7LNKNSb61CL-iCuXR.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/tg9KuJbghaBa7adTHb.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xBQ0mRB7dp3OyjcvrmKd3xra7zZLcTj6Mjb6WozKMDXlNFoWx5V2tV1Tz8saJ7CmUl4J78Hss2tCFsjoN5k7iXg4WFHDNUv8oJNJfRixUZI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e337f594692252113f6bea9391591936\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b6213cfb7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1507643,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11423)","md5":"ac0922a25a28956d4dca13fc552e8694","sha1":"5e9f43d1f561a3624f73609458d7a7a1b3795bb0","sha256":"1303248a951e0a625a7aa2685c4348893b06013c3294baaae7eb81df8560689b","sha512":"6261f5c2f497710a2188e50f9cc084e186073add1c07975bb28659483df812880f72869497b6d070901b332ec6509b56bd4392b48312efe20097b3a04060687c","ssdeep":"12288:/QbSffpq3Fq/l2BGBIg9cZVyfR5k9yjb97NY3BA3z:+Kf438d2TmReyjb97NQS","tlshash":"7d253940643ad6b8e8f71468786d90c1b1693febc201e915b1fc0c2627d7d78a79e7b8","first_seen":"2025-09-04T08:54:20.513417Z","last_seen":"2026-03-07T13:25:36.552682Z","times_seen":4,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/sys/company/plugin/get-plugin-info?plugin_sign=17d40d3a807653fbfd98019cea38aec1\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887674899\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 05:43:55 GMT","end":"Sat, 25 Apr 2026 06:43:54 GMT"},"fingerprint":{"sha1":"44:40:E1:9A:7C:64:DE:34:F7:E6:51:6C:3C:31:B6:14:29:EC:FD:A6","sha256":"F4:00:39:41:3A:82:85:F6:38:64:D7:10:F7:5E:34:C0:8D:14:A7:7F:1D:3A:C4:48:5B:41:B1:1A:27:52:BB:E8"}}},"request":{"raw":"GET /sys/company/plugin/get-plugin-info?plugin_sign=17d40d3a807653fbfd98019cea38aec1\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887674899\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: 9d89b620ce40b28a-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://binance-usdt.org\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: a9ba89c4-f489-456e-b207-b1b13d5a3481\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4369,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6ef1c7841446622a92a28ef475fa91dd","sha1":"b8b684d83f3501dee411087116d6c4a0d3f41856","sha256":"cca285fa325270cd146bc3baf7f3b1c9e24f8eec776a176f0e809679087006ff","sha512":"e861a63d150c49cbb4053890dba98092d45010a3c2d657fa572a1dfdc7922cf3646592fe550b5d9370ee2b2898a6f94eb22b5c58e4338ff89591041db76f46f0","ssdeep":"96:UzP2TJl7PzPIa43BSbuZSSbnCRqx2lUdsXUtU4OIXvkjix:UCTb7PzwaMcSzCRc2UtULrix","tlshash":"64919631915bc863a293486821fcad61ae9f8378c1ccce65edaccd1d99fc8e6570650f","first_seen":"2026-02-24T14:10:04.485338Z","last_seen":"2026-03-07T13:25:36.493506Z","times_seen":3,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":66,"dns":26,"connect":1,"send":0,"wait":588,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/5426.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/5426.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3759\r\nage: 33867\r\nlast-modified: Thu, 25 Jan 2024 08:50:23 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 03:23:30 GMT\r\ncache-control: public, max-age=86400\r\netag: \"8634cee42b68c501da8d76beee00bf86\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 0TLJ_9vt6QVyb02XPra0EewLCgyeVmF7EXUcmFHQKOUxeHqJFYfxWA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8634cee42b68c501da8d76beee00bf86","sha1":"346a50344174ec7c53cdd48080a55f7cd3a7c164","sha256":"890b9f9ed3f5ab8390b86f93b5b8ba0c2d5d50a5dc21668734b3537bc3a65f53","sha512":"405e62a3f1c24476041f90ddb5e50801693578a1b3e108919edcde05bb429bad77fc60b0096adbaa9a2704835ebd7dc165720ad0a14ada9498b3234d361ef259","ssdeep":"","tlshash":"fa715be58e8349f8b5ce461d652892f55cc24943d9f987101ee467921800a82f0a90e2","first_seen":"2024-01-31T18:12:49Z","last_seen":"2026-06-07T07:20:53.73858Z","times_seen":1909,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/fkhASwH1srDN-in7Ac.css","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/fkhASwH1srDN-in7Ac.css HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x63BMnRU5TNxlrdyeeHJYblCq1HmCU0M1MYZd8H8bXCSK1HcAaBAMWda4%2FdNDEhiUvnWXzhtJ4psQkn87PEqXlibqW8ZUucpcjP9zdatJGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5c10b0731e8e5015a20a47d52eaa4700\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61e6c9b7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9cd0259b2ea1270774b0bd885f3d6a59","sha1":"2bd73d35751da067cec030ba8558d8e1e0e08bce","sha256":"123bec169a48a47aaeb0595c6cca642ddbcbf14d78104b15cb8e836a746ab3f0","sha512":"77b2837f18040e9f7b1e3b229243a4863dab9406b64795e9227631334fe7088a19830d6dbbc9867efe8cad2251a8fc9ed6616a9f459ecbf02e5ce66a5516a26f","ssdeep":"","tlshash":"00d0224c2c40f07e29c431a80f0842dc08992204ff035fa43124bc3100ca6f62037c2f","first_seen":"2025-04-17T13:49:08.709612Z","last_seen":"2026-06-06T23:51:55.912158Z","times_seen":120,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/lg3LPlDbkPCor3ABB0.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/lg3LPlDbkPCor3ABB0.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTXODIXBLhzXdXQ%2BCyzq2FZnML0WT8Wj5JHkBGpVWF%2FYOw4%2BWyQidesw%2F2smWNmhr7ouQybvb6g20YfWAy9jZZrLwN0f6TV4oVmR1vC1boQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9716ecd4aefa28eb3d860f0cf2b120d3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eecc07dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (796)","md5":"76868ac75cdf3f274a8ee95807e8c30b","sha1":"c799060599dbd80adbca9fe2b33e874fe023c967","sha256":"d1841221ff2c51a93ea05c0496de5cb766f9f23559dbe2bce8b8fe784b2e585c","sha512":"34a8b9d055e42bf642325b4bf7cb86b06eb15a2c579e246d4912436fa580b884a0c7048248ed49542c9eb59ac4a937766150cb75cd71e4a2efb955541847dcbb","ssdeep":"","tlshash":"2f21021d7802d779d85649a8e1981802528d7beb976cc8a1f0ee9d256ad2df04527334","first_seen":"2025-09-04T08:54:20.463841Z","last_seen":"2026-03-07T13:25:36.573328Z","times_seen":4,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/521.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/521.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 418\r\nlast-modified: Thu, 30 Sep 2021 03:24:52 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 04:08:50 GMT\r\netag: \"57e82f79e42f5465d44ffd51b8034e99\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 2Grk_DAdJVaa72WzLef5kTpl7SRcRTa9sMkdLpFrHSyx7brdkTfayw==\r\nage: 36120\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"57e82f79e42f5465d44ffd51b8034e99","sha1":"c0a7499077e33b32052d5d9fa83f2b5c3b7e2c90","sha256":"28f7b537ed3a233e0e95944fcfea4ea4340204a3a8ba57622e85ef7fe25ec4c4","sha512":"cfb2eedc76e9d2fe3e46b6736ef9fed638eb3c0d8fa75ca934978bd3c150ee719cc4284c897647fdadcef2adef550e4a49361d38739c7ea567c3e8a851067dc3","ssdeep":"","tlshash":"2fe0ab83e1b66d5682cd0d6aa11e3160286a2c403e12f289c22963e21f15a4123f82b7","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-06-04T11:53:58.792109Z","times_seen":197,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2691\r\nage: 38076\r\nlast-modified: Tue, 19 Oct 2021 05:32:33 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 02:13:21 GMT\r\ncache-control: max-age=86400\r\netag: \"2edf1ef8b333c40979976d1a49bc234c\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 6_riOsuGZ4MqmgWsiyqX48zgqaQ__fSh1z7MDfQvuM0l-3VW_UW2eQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-07T07:20:53.747289Z","times_seen":21656,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/css/chunk-common.047ebad9.css","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/chunk-common.047ebad9.css HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:35 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1DF6590933634978EBF\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15301035701198459371\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: kuhLBjVJMHRRHJR6J/nD0w==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee6fa75e712f6cdc2fa03f92f2cfbde0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: dt1IMJC7Ieb9fQh_h7dGT04SrKAPejr3V8bw4INyt6hbRLlkZUOK8w==\r\nage: 2776219\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3567,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3567), with no line terminators","md5":"92e84b0635493074511c947a27f9c3d3","sha1":"1063727a5ae72bb23c46dad693b4b45828e2a74a","sha256":"85172738795fe7c2d724963c00cddb49256a70767071cea32d1729b809702ffe","sha512":"9ee606d5139307b4a204d111caf4297943a1894038526b59e9c0a4bd5a034fd328cdfc85edc24dd76732407f80e93aafa317fa53d85471a7dc45c23f4a72a854","ssdeep":"","tlshash":"e2710de5d50814ed7333c902a385b298ad92f5b2d8e04e67f01f562c8ff2655a291f39","first_seen":"2025-08-28T20:02:37.799245Z","last_seen":"2026-06-07T05:53:03.808076Z","times_seen":2139,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/lOnmFhkPJ6BBthilus.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/lOnmFhkPJ6BBthilus.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCct9idcOVLRe2pvUoJp%2BSURukyRg%2FtZii%2Fc2m9q53DtEHQgiQLzgI5ZEMaB8GZXebQfzCujO6p9He4k3shD7SNI2Gdn94Hvl3b6aY6UE1c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f1edcc69d8703689a3eb2ca9c88a2848\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eccb17dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5182,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2666)","md5":"859e10e5fd56d02ef33953a0cca0f0c7","sha1":"c76e6650533cb44d218941e9bb7ac30be598c27d","sha256":"c2a867036754d60978f6883e09da7009a4b9db168257ebfb4a5bbdef84ed0b0a","sha512":"15db3e21be07daf485c6043a4aed0d428b58f50dc4ec8a297f66b478d6fd8e5ed4d9b5b0ac41baeeb7bb507d50ead4098e7466ee218b138cc8974d0ea33cc0b0","ssdeep":"96:EGdbUm8q3EbIU67UTZmhxdmqkRxiwj0S1KM8MQrAqeMoHdRry3aqNTBGeRKGSfSM:9uq3AIx4qkR73WfZeM+Rry1BDRDSfqkd","tlshash":"8eb1e8e47580b93bc778a9ce90e011a0863667d8616fc7edb16f1e0b3608cb5727f50a","first_seen":"2025-09-04T08:54:20.515362Z","last_seen":"2026-03-07T13:25:36.501624Z","times_seen":4,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/KWzPkQFngKBzeTdSZ6.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/KWzPkQFngKBzeTdSZ6.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jS3b4KDkLkgXpRtcpkeZRQIG1w0EPoZF1r0sSbRjdyLsshmKuvz6%2B5%2Bu4zr1B%2FKOkWtwUcVUttSG89z7eNm3BFIYSHAliAHJICtpds7idjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8fb1f9f8a78d4c123943441853249475\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eccb27dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11209,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9254)","md5":"7f7a865239f9e3995bb85fa821af4b7e","sha1":"7479e98f689924c4e9ed67a2284aef1e7425085c","sha256":"23a8e5f398634bce8e82d4e37d70b5a22a0bad82c80512691ade922290305a92","sha512":"0ffd1b093ee8e18d7421a77d55e65236675c960204c5dfd9649ee75438ef1f717098d668760854e75e5bd0da76d264d702897cce855d51eb2d0c867943a98ef6","ssdeep":"192:s0whtiesnUXpkZlydAdbqBc/31XMHgFmypucFCZLoo7VaiJJg32vXoa8IkjtPdqk:JwzieMU5k/yMF+yAcFCZLoUaikcXstPn","tlshash":"a4321b9674047035c77799c5c09909b5a129378cf629c6d2f0ae2c3a3a695b4f0fef2e","first_seen":"2025-09-04T08:54:20.489611Z","last_seen":"2026-03-07T13:25:36.497286Z","times_seen":4,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/iSBcCTSFh6DPBMWIrt.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/iSBcCTSFh6DPBMWIrt.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gihg2SWzmSXGOMVKTDxkRZRotbtsWlruvFK82qiOSIV%2BNF18myQ4p3hrljLAGvFcWWbkGzVjpkhfS9E3pNHr27FXnJlET7ofIFIH040tbX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9f61d08c6078bb4084780256737bf80b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623cd447dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1809)","md5":"1364cae7ed5ef522a73e0d20b1317466","sha1":"37d18cfbf94892ea3aa603665729759633b8e9ff","sha256":"a4ee3bc98d083451924ad0a339bd258169aec8a0f0eee426012bf1fd77d7346b","sha512":"61d6b8da601ae93a8d7ea40b4b981016a0f1a11daf13746699f9dfef0c163d120a2146cd8ac0230da64eb386c2b16872d4e2069f77fc51ad3e9770497f759e2e","ssdeep":"","tlshash":"d8314591f6e9d035937e58e1c0391620e2591f447159f4e6d4ff0d815f86846f93ba3c","first_seen":"2025-09-04T08:54:20.47914Z","last_seen":"2026-03-07T13:25:36.505377Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/lang_j?rts=1772887674207\u0026l=en","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"OPTIONS /api/lang_j?rts=1772887674207\u0026l=en HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://binance-usdt.org/\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9ZQ2OyJLpPnQXZHKLt1SK4Din2VWzfGZOEB93T5VcIQXXf8uOcan23NyX7ynKD7LKxWt2D7Anh3dr%2BruLhfbPVzof5do8M9MfLMSB69W7FkKOiM\"}]}\r\ncf-ray: 9d89b61c0f83618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/chunk-vendors.6ef765fa.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-vendors.6ef765fa.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:35 GMT\r\nx-oss-server-time: 6\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1DFA846BB3831562029\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16184782789754269720\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: jniEYbqRWty/z6mxDDXyZQ==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee6fa75e712f6cdc2fa03f92f2cfbde0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: lwt1oTMSgO7aWsAEFMOuIMwgJnzVIL1f-MFOxqgHo46LhA55HuCc9g==\r\nage: 2776219\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":214670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"0e332602a352c093a8415f963085eaca","sha1":"b5abd134d641135bdfe728032bbfa0745b5c41f4","sha256":"712ac81b578f567d093c7e905beb66a134b86bb2da3082d2d0c2dc1ce3127f83","sha512":"ec00272f47897acf778d811370affd8f2beb9fd592d53b509a0952c1cb1267651eca1a7e1aad644fc523ad22d36b4dc407e63b93a454bb5d427e9d2154fd4a22","ssdeep":"3072:gZcGj+j4Cm4m5BJ1IWqq/1cuq+4DdC58+JkrMJz+8:gG27J1Wycum4XkrMB","tlshash":"0d24e7cdbb92f0a843a331a4806f150bf17b6a18f40e81d4e666d5d1ac78a8e5177f3d","first_seen":"2026-02-20T15:50:56.015687Z","last_seen":"2026-03-07T12:48:29.231191Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/vendor1_b8775aab.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/vendor1_b8775aab.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:35 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1DF40058438326443F2\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15305004930386263030\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: TdEL+eOlXQT7AtB2+NiI/Q==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee6fa75e712f6cdc2fa03f92f2cfbde0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: TtB8LmfB9BcBzXpGQAbRQatAlYUARikM2sTjaTMSHGg-0IdBLTinSA==\r\nage: 2776219\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":225000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49155)","md5":"4dd10bf9e3a55d04fb02d076f8d888fd","sha1":"73fe2ade639561e0fbee753a10ab3a8f64457ba6","sha256":"9b5cc937de300ae7ed821b3c25405086cd9fc0c25be5f6afc2213b06d1981408","sha512":"768877b7f6860408251dfc60ac57ed4499ac9ff259f506f98020a848b1f8dd67378758074406603c95d98bfa621d4d451d9a941f9932c2bc9ecfe1eb9e69f9ba","ssdeep":"3072:hUj1XOH0ipFe9OY0ceCK7KtWO77yzk83UzlgE6CjnWO:2kHbDCK7gf7n85NO","tlshash":"b22408c8b295b06143a770b4407f550bf13ab915680ec5a4f226e8da7cbc98e907bf7d","first_seen":"2025-05-10T22:57:10.916725Z","last_seen":"2026-06-07T05:53:03.797796Z","times_seen":2431,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/adi?rts=1772887674536","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"OPTIONS /api/adi?rts=1772887674536 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://binance-usdt.org/\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=piCJsQUqFCe0E257tUyq0yNyIVuHefRZgtX89H4U0tRzN9VmCPURkO5c%2Fb%2BHZ4dAFBWhfRc6jvej1znnrB9rdfmiGJqlDe1KlItie40SHM9iHUmc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89b61e1b05527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/hjZatMuMwbCUocRiEs.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/hjZatMuMwbCUocRiEs.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHX3NdCIy4zmg0L1j82pCUNVUmUVcXAicgrlydDnC4EMDIqxwOauTndwcVediPy7KufdUGw6WUj2DWXlXPCRnRwYeCAGYi3RUj2HFw0B78M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2f2823e11df26e03bb7a9789f2d49f52\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623cd467dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"9c9fb39d889ccdb68c4fb03d5aecdcbf","sha1":"3a983d3a62d2017e5e3e681e3321f7953d1d12f3","sha256":"15a7e884af2a05c282321ed51a29bc4b7b7a9d6f9a99b00e2d2bd916c1dfb052","sha512":"5b0ec13975ea99c61d56f106fec14cebc4b82ce5713fd58450a00805164b3c873460c99a669092d0127f78c58fa542d1291a9fbb9e1dcf3da3086e536a41b0f8","ssdeep":"","tlshash":"20c08c9b310232b1a1220cc400160c82aef3826c139acfc190495fe44a368f4828b97d","first_seen":"2025-09-04T08:54:20.534992Z","last_seen":"2026-03-07T13:25:36.602083Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/37.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/37.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 714\r\nlast-modified: Thu, 10 Nov 2022 17:33:23 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 06:14:39 GMT\r\netag: \"eff8c717a314a63994d50d77bb8c0665\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: X3uEPT9zThrnSte_1MRjdi5dOprDN6YrhUqrc59KbR2f_O6dd9v6Ew==\r\nage: 23922\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"eff8c717a314a63994d50d77bb8c0665","sha1":"c8689d7c32841214b0980a5b72b5062f6297ccd2","sha256":"f830dda6f52b5bae972920cbf64c6239edebd8692479f881f87017a94ec37f1c","sha512":"8d920c0c5cf69693ac78d0be2bc47f9a98cbfbca73e363a46b067d9e1a9a1af671333a5bda57f8134dbafd0a75e7a0bd3142f70ee514f95b442fd1214ea2e24a","ssdeep":"","tlshash":"c40144efda639271ba6034f34f4747c6b902c1689355b8dd9698663940255873c823f5","first_seen":"2024-08-19T20:20:32.21906Z","last_seen":"2026-06-04T11:53:58.800729Z","times_seen":59,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/init?rts=1772887673591","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:53.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"OPTIONS /api/init?rts=1772887673591 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://binance-usdt.org/\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BgXfntzxqzXiomZl%2BQGeLEXBy9flVM4c7ZFT4mCr%2B8wmUb98HNX818N4IttguupYrlFSJy4CTjbOAhl0HQ2WhWG%2Fb625SUaCIOXi3lDyutVaW%2Bvt\"}]}\r\ncf-ray: 9d89b6187ef8618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":42,"dns":8,"connect":8,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/xKPCxT0fUqSVA4yXCC.css","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/xKPCxT0fUqSVA4yXCC.css HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CWfTZtrSyaJYRozWwByVepMCKF8BkP6AMgXO7%2BmWf%2FRZrq5rCFJkVpZB55BKhz5ByMmrmevku920saOVxsjRAVwR3KGLpEs8oHEmoX1MV2Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"74c4854dd73e8447bb7f8a2809568561\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61e5c987dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1857,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1856)","md5":"c41962c9f2a02eba8f3456ec86fa9f87","sha1":"6a4a50d1dbdfb1334cb748491e736add30525c2e","sha256":"40c0e95eec894a533bf70113f8afa7d77a3f66576f740067a5132ecb45392660","sha512":"c1c48c8a2f0ceaadf6db090b574963ddb5bafb04dfca815cfbb2e478d64177e9734f658ef33e51408cdcc88235829c1edb66e1e3ecbc1f61ba087e2133992d30","ssdeep":"","tlshash":"023191e1a29995b85f62e115cf56ffdaf1686760da028149f0c31724cacff780ea1bc4","first_seen":"2025-04-17T13:49:08.73869Z","last_seen":"2026-06-06T23:51:55.877249Z","times_seen":98,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/4SueX34w3jDJVJxekC.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/4SueX34w3jDJVJxekC.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BmXEBcpIgJmnUpMBuh7cTaq0mc%2FMjF2awdO3tXMwfLRFdzfnux2jhY43Lt8Aukz1HXIx6r67U248eDQBKHDIrz%2B1ytkuuP16vGJw2ZbJ38%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"eaea77bd873e3568741f17ea1c5ee2f2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61edcb87dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (458)","md5":"44bda8c9ccd31ea79f17b5d0ceddcf38","sha1":"0cff06c0c63d8ee4cbc18400ba82af11cfa15cc5","sha256":"c66424c3c50252bed0be57e03aff6a1fa91feb1ceb8ebfca5ff830aadeda7aed","sha512":"9d39539cb30e34b7c627f28c9f0bc681059801d8a4ccb7d955d0fe73e623ec931bfa71f3bba195a9ce4d203b3e520431b157ebe2fe60ef16120e07747e923945","ssdeep":"","tlshash":"e2f0dc0eb011c17c51ba1c6d5840104c07628fa0128150c9763e1e980b34ce3e1a6c29","first_seen":"2025-09-04T08:54:20.509573Z","last_seen":"2026-03-07T13:25:36.569342Z","times_seen":4,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/SqOik6GdtcDj7vnDa7.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/SqOik6GdtcDj7vnDa7.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/pIBi2ubwwXQ1yA6zd9.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lqww6grvbUiXODrRgpc8XYqh0lGmxtxZGzi0bmpU5CGXkhk4DxLZmUKJ7CF9hYzdz9sTLcD4ZfUoCgWi9CIM6vtPB5KfFSi5muwcTXf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c1ad1319552dd381758987232bdda89b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b622ed1e7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19037,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19036)","md5":"723c228b23f8bd6db3b8d16d13b45f5e","sha1":"6e4791d4e670a20c0ede920ff3527ed49e177945","sha256":"b063db3eabc45bd12842e0e5ccfbe1025a657d2494f688e5bf6e6aea337a1b9d","sha512":"e1dc59ea961555f196eabe3fa840be82e6f50fe1f65ffa138d106009d4c7f6c4e9df9e399a3feb8cf3245de96b2d2803c749802956dad1969d73daa99ba1866d","ssdeep":"192:y1END9bi8sJadU+8zpys8kyd8zp+zbmFpPZl3x0uTe8U7LO1idgcFJw0l8zpezDs:y1EFWVP0bmFpBl3Cuaru1iacFmzFtaVC","tlshash":"d682c8746010c32cfd95b5a51c909802b8cc4fdfca969172b1fd8d9263c39bbeeaa355","first_seen":"2025-09-04T08:54:20.503482Z","last_seen":"2026-03-07T13:25:36.563402Z","times_seen":5,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/upload/img/68bc259b5cc0.webp","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /upload/img/68bc259b5cc0.webp HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1808\r\nlast-modified: Sat, 06 Sep 2025 12:14:19 GMT\r\netag: \"68bc259b-710\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qmYcIR4him3gPj0h39mN9dCsBVeEvTCAhK9n90yxvu1Ceb4WKZCrrxZ7CHdOJ3%2FQcKDmodkp7LOPgBy%2BJhSipfMKPqjXGQxFmNEZ%2FclRjmAGS4tp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d89b6232b43be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e54ab29cf9ba6238c8b047659a5f8054","sha1":"12728649ae9b99c42065ee007e66f2d6a982fed8","sha256":"72d79e4e9a27a6ef6408a48e3516b28e1cbe2abd7653969dd15c88c419d71832","sha512":"1de71654cd7b589d3e626346126bf2c5f8390c6659ead47049e80799731d3af4e548d4783d2255ef1b808d5ddc0ad4b4b5349b12fd5229918d08f47348d3b025","ssdeep":"","tlshash":"ca31290da651fc004d9831e48b75b98a74c0442386f11b9c997ba439c008e25dfcd72d","first_seen":"2026-02-24T14:10:04.479039Z","last_seen":"2026-03-07T13:25:36.585812Z","times_seen":3,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":382,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/wbXQLviW6Y1v1MbbBl.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/wbXQLviW6Y1v1MbbBl.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3V0xWPRDrz%2F474tRA69ATWq3pQ76RsDckgM%2FR3DbNqsMfy%2BR1IZpXqxlmS2E%2BzyKbixF5VDkSBJp9PgEcxBnTZEbfRalmzQq5dvNa3BF2Qc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b6e5ad146ef0ebe064eb92db3f0a7af1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623ed4f7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"67904e12d6f358e3ecd5d343b0ba71fb","sha1":"ccd103fc031691590e2ad9bbdf05311ef122f5e2","sha256":"2326aa9540b342a4abddf87d2b6ea2c4a1db96023d94d6e6f709073075e20ecc","sha512":"1c3964f59c4944aad193138d85d70001983a90a9867fc4637764041496c267918aab17a7a5ddd80bdd0598a9fed1505688504368fcfd9ee781f2b9fc4af05c0a","ssdeep":"","tlshash":"17b01202468c45e8186400aa0b01a6f41362000c1b24d2b5a40d0e1cc71624a9d0fd22","first_seen":"2025-09-04T08:54:20.462738Z","last_seen":"2026-03-07T13:25:36.578335Z","times_seen":4,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/upload/files/69683b3dcda4.mp4","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:57.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /upload/files/69683b3dcda4.mp4 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://binance-usdt.org/\r\nRange: bytes=20742144-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:57 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 54122\r\nlast-modified: Thu, 15 Jan 2026 00:56:29 GMT\r\netag: \"69683b3d-13d536a\"\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncontent-range: bytes 20742144-20796265/20796266\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S8kqLiwT0sjKxHMzL9F%2FZxlYK2i0r8sG7QnqzeTbSfMIw%2FRbrXb6%2BCvlup5%2BEzjlddeBQSVLf%2FHE5iQIW%2FAU5WHCtcW%2FOD51optFVo2AleR6lZ%2Bf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d89b62dac7abe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54122,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"c946a060e591ec3c5ec7c0dd4ddae251","sha1":"fbf4ae87cf47d94ccaab76268a8709af2ed30cc4","sha256":"85d82b95659951b72f3580c2ac1cbb736c52d706d9d8aa5c4e41ddd8b1b9f75c","sha512":"360446785d1c53a5f431556da545d07660bf187811f178c22f01376b4502943ba69c4e905bfb1a3767c00d2012a57eeb1c3b79cdec3c1d8196306a7236ab83e3","ssdeep":"1536:/cklJjJ19rxTsZXw/mXI416ssBoPwfLp2BX6Ui:/cIjn9F7mXIPSPwNo","tlshash":"9b33be6e2b21db03d464417374ea87e436ebdd18a95be70be0c9943569c02fc5fab0e4","first_seen":"2026-02-24T14:10:04.444687Z","last_seen":"2026-03-07T13:25:36.551776Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/QsZwH9PMNjDlCCrCM0.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/QsZwH9PMNjDlCCrCM0.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnnkbaNLxHfUIbOPW4FKveJk9OpDwVSwOFY5Dm8euGCQ2HldX8Gbi8dkLRD6fnY%2Fn1TMzpKzV6WoZF%2FUgHpHQxEVBY67g9zwMBbiHA4%2F%2BxA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e98854a41ad3d3cb82ee94a4231b8cea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61ebcae7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2791,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2790)","md5":"daad07f8e6b8d794c4b2620055861d2b","sha1":"2efff03c37574c74e3cfb92420157f92ababe766","sha256":"05448bfdbcccd11e7357d2157860603de354e0230bcad63bc6a412eebe8adf9e","sha512":"abe7fb685cb2125f6c730a599ca30b09916d1d80b9c8af9fbbc044df2501a665cb405088b429d4190c92165b8d7d5f3e9c6f01dea304034360b168de8905f11f","ssdeep":"","tlshash":"a7517418fb85d03596f463f194d298c1862b6b01a5cbe8e9e2470d04273eba0b1eec23","first_seen":"2025-09-04T08:54:20.5202Z","last_seen":"2026-03-07T13:25:36.594017Z","times_seen":4,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/9lSaaUcTNzBCKoSZj7.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/9lSaaUcTNzBCKoSZj7.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/pIBi2ubwwXQ1yA6zd9.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M642TV4RacLqXILsIePxUymaMiUmNB3XLFTOUeMxJLdzEjCpdRsP75nCWCBi38OS2L%2B6T4XRv7INHT6aCsONQ5ihqqHmci75S2d%2FzBDmotY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"029eec3cdca2764418f53740a77d1488\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b622dd1c7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1678,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1677)","md5":"52a66e0268d347a7050416934bc55a38","sha1":"7202db82faab173725644e0a7a4bb36475b6b5ab","sha256":"b2c71abee063e98f2038f0aaba798d6362b1bdb7b743779b13635d0390075d8e","sha512":"a6f75bd71e949677079c1d21e88d6a72dade5ec5d59d31c7ac0c9438b1e224432254d0de50f854e15ab079fb04aa0e7ed31ebf56ed593dfe9742aff5f7420794","ssdeep":"","tlshash":"b431849db41ecfbdb0720938660bc05891188bdef326ca0170e84b1217d7c38662ab68","first_seen":"2025-09-04T08:54:20.508615Z","last_seen":"2026-03-07T13:25:36.504626Z","times_seen":5,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/5805.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/5805.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 685\r\nage: 30544\r\nlast-modified: Wed, 27 Apr 2022 07:39:01 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 04:21:26 GMT\r\netag: \"b9913f5599faab08d2addf87011c61e0\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Ril3_P2OksT4POvhr75AxLFlC9dENJfsQs5QOnAFcTqS5ieTlfSBOw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b9913f5599faab08d2addf87011c61e0","sha1":"d9ae6e6a8ca0e50e02a991d032d9b9a461079f95","sha256":"68ba1605b3a54d7f827c22cc7252f01c6bf9412cfa6573be2c91fcd4b9e908cd","sha512":"7baea45f411fc30232bd93d04b8cf34414d333096ec669558ee6dd4a4a725785786f488b387e6c38654ba4fd3aecfda5526de2d949851796582c75214a42150f","ssdeep":"","tlshash":"8d01d8fb0957c025408f01f8224f7372d160c4eec9c7e20d89d9f7301862ad24c4524d","first_seen":"2023-05-15T13:26:32Z","last_seen":"2026-06-07T07:20:53.814963Z","times_seen":502,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/cus?rts=1772887674536","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"OPTIONS /api/cus?rts=1772887674536 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://binance-usdt.org/\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toDZ4FYhZEltyk%2B20H9AJiiQ8UZGLFYJLaT0dvnuALnrsW11pR9JP25GWmRKzU5HkcDGIJ%2Fgq0DT3P%2Fci5rp4X708Hh3xoX0lac%2BsgMWh67MgQKQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89b61e2b06527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/lNrea9JMz3B8brp-BE.css","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/lNrea9JMz3B8brp-BE.css HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8GAVk48hQq9echgqxNNrYBy1D02VKj6gJFl6LA2faYnaZxRTQO%2BXTszF5bv4SoRzgCSr2uXw9F35wDfJlqx1HuNHNsXpWoLw9A31NQF7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"dd3d984f0867d7ed77f842ad9690ff7c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61e4c957dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3227,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3226)","md5":"70e54f12d62d1315ffd14b024d382b54","sha1":"b0b0394eb58490a978161a192e0775d6a6760a76","sha256":"17c074f0564fc5eafe44d8111ba1ac4c85b99103d728c19c2fe486a11dfc92c6","sha512":"11312280a667403bb1ae15e2ca81b5cebe042ad198c4ec5504e960a42aa6e69f64e9e4d3d94d72c7129a784cf1a8d1c56b504a91ed8a4a3569018f5daf8d5171","ssdeep":"","tlshash":"0f61aa36a370a17b9f02f67dbb5a6adcf128e7714d01b3a5b281201888c7bfc1532917","first_seen":"2025-04-17T13:49:08.756011Z","last_seen":"2026-06-06T23:51:55.887332Z","times_seen":95,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/DaEnIiSxkDBmu4Hac9.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/DaEnIiSxkDBmu4Hac9.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i18APtw6tJmUI4XUbeGL%2BiIaDQDvJuuhU6WBYCUReRjmtEOZnGI8sqTRWogwLe9tlnTUfo6kjG%2FsB4AnlbTFPmzLEJ7bUuRiFas2FnRo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cf9491a809b6e7bfe97c81b9a591ae45\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eaca67dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2251)","md5":"c985d4acb6dd91ab8e954141b105d9d1","sha1":"39cd032f0d581cefc73b3bbab74d6b4266f03b2c","sha256":"2c5044c8ddbaaea49d9119aebfdd5ee2c8d57b405d0c21d1a94f390c5b36dded","sha512":"e88987b3e0abb9d4680e33c015de8765df6012279842d5912ab37331717bbb586b853044a1dde2e5cb25824663596bb370debda0909d8f3471817786db21f3be","ssdeep":"","tlshash":"1a4184a8f911deb9e677463884131050220c1fdfa064dad8f0ae1e225bc6cf46456f78","first_seen":"2025-09-04T08:54:20.471983Z","last_seen":"2026-03-07T13:25:36.481209Z","times_seen":5,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/99MXOwofL6JLCIU48t.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/99MXOwofL6JLCIU48t.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5thXdoxk73xbZTJnRtLjtRvkH%2FTGk4nViym4DJvFIZ21hVPIYtdoL9OByMxc7ifkMxrvhgiNtnkmSxxZfI7ZZdArIu0wrpJVgLzIT1sG8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"09bf295677dd3a0274bbd28920c42069\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61ebcaf7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5949,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5948)","md5":"fcd8d6b2c9dc70e10cf36bd5cf05a6f0","sha1":"24e21c4965768bc20b0482de0434845b1f06e611","sha256":"a8b57ce6db94b8c78963f3eb8573e4a0c29d2fc4d58c39d197a7ec6e2d2efce2","sha512":"773dd20b026f7914f16877f53557a3671a126dc30d9dafbb20dba6633bbb77e1b086d54d0117e4c36e14a0fc04980d5adc605d1c1cffb8794921d05ad4c343bc","ssdeep":"96:FCk2moXFWGHuMmG1nQD8moXFWGHuMmG1n9mfH/pq0eUDN6qNZNTNP:cdFbmhN6qNZNTNP","tlshash":"01c11581cb8fea0b873148c03b27ba9d939e1bcc70ae8583c389dd6c6d1cd5576569b4","first_seen":"2025-09-04T08:54:20.488525Z","last_seen":"2026-03-07T13:25:36.54033Z","times_seen":4,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/y7R3FZ8ObQxX5-dKDf.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/y7R3FZ8ObQxX5-dKDf.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BP3RrpPxPzw%2FZRJPIqeqGyje4MTUvLA4wl%2BN8ZjZd2jWI4KBRdTDcPoD1w3NiAP8tMM4YJXmMDLeO1IQ4ylXVPKTGyEbUKN8YoMHqEGa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fca2e3962e1cdc65fa7f9e0e2138fa68\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eccb57dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"0a22fba42cd98a28c4eb3b1ae12aab4c","sha1":"9b98f7af24d8b9d52d52ce66495699aee9472826","sha256":"89119bb67b096c79a75606c9124f83824d8d19b7a227a896c97198a016e04ce6","sha512":"547d5c03c487837c4608de8cc794dda148962cc3cc2bf096c9c8121f4529c1aa5fa27015bfdf9bbf40dffdec93efb24b4f2f39739094a772722ba98115549f47","ssdeep":"","tlshash":"a1c08c1d784560f186590ce8d1220a6b5267fe44336a96f0a5298a1b432a2661206e66","first_seen":"2025-09-04T08:54:20.53248Z","last_seen":"2026-03-07T13:25:36.564509Z","times_seen":4,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=6334ec7420e5614835ba92803d6eff71\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887674961\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 11:26:24 GMT","end":"Thu, 16 Apr 2026 12:26:22 GMT"},"fingerprint":{"sha1":"54:5C:60:E0:01:FF:74:D3:4F:29:AE:80:35:AE:CF:1A:7F:3C:FA:A9","sha256":"AB:32:8E:4E:39:30:DF:C2:53:A9:C9:73:29:0C:08:52:88:14:B9:FB:90:B2:75:3C:79:35:B9:60:72:3B:0A:70"}}},"request":{"raw":"POST /client/station/log?plugin_sign=6334ec7420e5614835ba92803d6eff71\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887674961\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 365\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":365,"data":"data=0qHafQ8hMhHKtTc8f5KWB9HEPQu%2Fs9DwtNIvtdmWfQfWyqFhBdHvP9a%2B1nkhMhHh1nm%2BPQIVBNX5rTo%2FPSHGyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2FldypyGHVrhyiyhypyQj%2BPQfhMhHVPhaXDqypyGYptntEPVzErdyiyQsjMnIAM2vhBdH%2BsScEP9khMhH8sntVXQVVtqypyGcW19X%2FyAKhyh8htnVvyAKhyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nset-cookie: ss_uid=888e333905d59186be914f83e0f15fa9; expires=Sun, 07-Mar-2027 12:47:55 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b620beb475ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1a5bafddb1b780e469ed45563f5e871e","sha1":"64699528e3e3606250ac0b3305f48f8e978660f2","sha256":"c1041e9ac008f4b7672e9583ed2ac04cf69cd071057108e00c00ba9d91e57448","sha512":"89e721c0e39cabeb905e2f22eb037202548359a375840d7627abb588f099694bf93b35f8a62cadd55ae1813597cb4eab6a651e1c3ac48404b79a8a33f8bb1a8f","ssdeep":"","tlshash":"f8b01251242833c30d11101e9011360852a47180ca104710c8784e0002480b42206191","first_seen":"2026-03-07T12:48:29.242761Z","last_seen":"2026-03-07T12:48:29.242761Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/2VTS3rkdJCDpkXQ5T4.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/2VTS3rkdJCDpkXQ5T4.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6eOVDf725i9LWfcsjG4dYWabnuL9tLC4rcxKzHNuSZQ%2BXV3GTiVPAUvRpwxgnCE0aiPRzaus2uRs29yAWxIyNcL%2BJuwsnD5tvpa%2Ft25D2ZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e2531bec3d103458a65f69ecd81063e8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623ed507dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (861)","md5":"034f4936f38bae5b6018a4f3c1f781e8","sha1":"f9877a68e26de4e559af549d54f13b5443440d41","sha256":"062cccbade0e74690ba8f700ae9fe24908319fd85afe84dbd046b45eb6c3bb49","sha512":"5f49d38fb539446b55bf47c0b88860bd24e7131b84d3efee8415f8924582bbc29ecd4acaad509ff4ffa2c70ff94af8f6ce94cffee08c08795e75f8b3d7f2b18b","ssdeep":"","tlshash":"6a1108eb3781c16c0b3d98f8b22bbfa8d393834daee6dcd1845685500724c76802a862","first_seen":"2025-09-04T08:54:20.51445Z","last_seen":"2026-03-07T13:25:36.524384Z","times_seen":4,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/24.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/24.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2401\r\nlast-modified: Mon, 07 Dec 2020 19:40:18 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 03:57:01 GMT\r\netag: \"0a179490163159340daa3580d26b6628\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: gyKE3XtUlTnoKE2FGdozTHZcuWkCIQZ2kUtaODCJGl7PydrJL1EWOA==\r\nage: 31855\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"0a179490163159340daa3580d26b6628","sha1":"eba46f4cac2c8a3d648c2a36f638449486c8b677","sha256":"b29dd0e21661025a7db7cbe2c1c1a29172c8e11c616237b2e1d7b231308cfd99","sha512":"96b9fac83b76adfe9ddee86ac62bad3efad3f54c79b350bdffa30ae5c8d3647cf7916aa1ed5f7c55bef51f1d1a1632884f5da53025be9ba8d0ef7d0087a540f7","ssdeep":"","tlshash":"90410a965e48e4e135138e21d651e4e0f6af9f7107f358453f2ac2cb4647913862e720","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-06-06T16:45:30.79751Z","times_seen":111,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":63,"dns":30,"connect":3,"send":0,"wait":6,"receive":11,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/Xv55aQ3tl1Be9b3THL.css","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:51.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/Xv55aQ3tl1Be9b3THL.css HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJYOz70TGcURb8pH73oxubSQppS3HuYRu3fVP0x6nn%2FKWwthA3nzlcheTtJQywypbh8B7RdKeCR3WVDcffM3ODL9VcpceILZLIuD7WD0o9s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"580faf26a48f843609e0e215f85d093f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b60c0acc7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6391,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6390)","md5":"b9bc69dfebbe70d73fb49c7d1c117e62","sha1":"ac989820671a1c955dc822ca46a51100542f421d","sha256":"4b9984ff63ee09b3985851625a57806a2cbef2cd08aaab0b0afbb6a2c1777076","sha512":"2ef879789fa48068bb0541d4011add0144646b00f38ab43dc10f4116356232dbbcab71588516e1d03876a1c4cc62ff5e441ac16c29aa416103c436e17f4392c5","ssdeep":"96:3B5mSJ+MbpDAKneQYX+4JToiL5dKSme+jeHPdw297fzrEIuf/:fmUJbiKnehJTtdKSme+jeH1Zpbw/","tlshash":"d0d1b730a3142c63a2224f194b44e6f86ea450638ff38919f6856e2cd7fd8f4125eb82","first_seen":"2024-03-11T20:01:52Z","last_seen":"2026-06-07T07:42:41.987441Z","times_seen":471,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/home?rts=1772887675614","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /api/home?rts=1772887675614 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nst-lang: en\r\nst-ctime: 1772887674576\r\nst-ttgn: c79738eeee59ff105c8d8774bf79bd21\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wDZtFsJDRcchDxmdL%2BD3YJ%2BzwF%2F1Uu0Nhn4qm3RpPK1twXdx35pZPaYLwI7jT4NlEczQtJn6bdzwjLfzUNMfaiqcNTj27FQgD%2BCozdAJlJae9y8\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d89b6268bbabe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15714,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (15714), with no line terminators","md5":"fca2b3debade538a5e8cb2a09147f345","sha1":"985eb32d348f65a764a826571b2ccfe08efa13b9","sha256":"692c1d252a2f0d231d2932e951b706f18df0303cfd6110d190a81ee0d0211783","sha512":"0fad0c6a57bf4fa4824b3947f0b7a3c2ed1aa95eac4c3de9844c1f186caa2a4b960fd399e5e674821e6e002328b32fffe05ad5a54e72beabe79a5b1596d2e5cd","ssdeep":"192:2VrpRhkHxeGGOx/0OnGLoq4s2Ma8eUdMWaqVjUFDj3mP8xM5oh8Zp7mRPR/J+877:UOHYpOnGLbZ8WarFXa6MzlmRZ/JvphFh","tlshash":"9362d1235b1d010c89538e91b77e4a6b34fddb675c7473fc7ca3a9194aa2217d953007","first_seen":"2026-03-07T12:48:29.2454Z","last_seen":"2026-03-07T12:48:29.2454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/6636.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/6636.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1745\r\nage: 38604\r\nlast-modified: Tue, 23 Dec 2025 07:43:14 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 02:05:14 GMT\r\ncache-control: public, max-age=86400\r\netag: \"9354a310aca2467883088a4c17693018\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: MFpBIMkNbYJN6PeH-LYAABhjsXGAOPHM6GmDhjO8HeIzCsrda6ZDQw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"9354a310aca2467883088a4c17693018","sha1":"8b68d24379142124633ae339e148c3db3baa73e8","sha256":"66498e82dee76d44bd12f5517f74785af51b6c23c7895fe18684ac914abf33c1","sha512":"597efe5d74e6c66063f06724931aec73e4edb064bc939ed48618af592bd8b602694ad04a1534c816ce8c334d6711affc474f99f45f0338919a7a5413eea29966","ssdeep":"","tlshash":"6f31c5d01452a47bb1030b9196bfc6b14e7024f800ced7bc946a48d273399ba78960a4","first_seen":"2025-12-23T14:18:57.776197Z","last_seen":"2026-06-07T07:20:53.832547Z","times_seen":268,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=af04994b276730a73c76ed16408a18e9\u0026chat_user_id=687e6d2c2be4e369bdceee3aa986eaea\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887676509\u0026_lt=af04994b276730a73c76ed16408a18e9\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 03:37:55 GMT","end":"Tue, 21 Apr 2026 04:37:52 GMT"},"fingerprint":{"sha1":"57:4B:24:A1:1A:1A:75:7D:DC:F3:2B:85:E7:4F:DC:59:C0:C0:0D:94","sha256":"84:AF:36:E1:EE:AD:88:CE:42:68:8F:E8:65:A6:07:34:D1:28:BC:9B:49:15:48:D2:2C:CD:C9:E6:81:30:BE:B0"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=af04994b276730a73c76ed16408a18e9\u0026chat_user_id=687e6d2c2be4e369bdceee3aa986eaea\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887676509\u0026_lt=af04994b276730a73c76ed16408a18e9\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nCookie: ss_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"is_new_user=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\ncontent-type: application/json\r\ncf-ray: 9d89b62adac54e4c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://binance-usdt.org\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 22e44d20-e1a5-44be-b098-82e1a2707a84\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6b210154a96c28a41ffbe341a228c02a","sha1":"2e5751bde9f2323a79989d165f22ba111624ab76","sha256":"57109c9877bb6690c6284c7b2b98088071ee4762449b6b5659dd908bf9d703e3","sha512":"16fc9ff07ff4e167be6b24dad448fe7479cb1e5b50d5e7f251c84852e4c67d8caff68a1eae5be69b8f4561d97bc6d41be026597033718181025b3a97c7e292fe","ssdeep":"","tlshash":"89800023282c2c830e0238cc880e8b8820e820808e200330cc8ca228cb080a8ba82830","first_seen":"2023-06-30T01:11:08Z","last_seen":"2026-06-07T05:53:03.787063Z","times_seen":1905,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":58,"dns":19,"connect":1,"send":0,"wait":221,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/270.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/270.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2050\r\nlast-modified: Mon, 07 Dec 2020 19:40:19 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 07:12:59 GMT\r\netag: \"66269b4cfa0d1a33b1f5829cc4d14b1e\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: QTqDujKZVOmcwo953h_WGvCMqm0W21TRiJODumgUIhABPJfUElgJgg==\r\nage: 36120\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"66269b4cfa0d1a33b1f5829cc4d14b1e","sha1":"f401eaeec79fad410778239e5ce7d72ebe5fefa9","sha256":"991bcd7ed73288fb8cf47e0b25d61bad30f4d4d53aa7e91a10ddbd5e0b01623d","sha512":"ee6b0723853d3af5b97bbae448cd78b0c5cf6e1f40071eaaf10acda9a130e3d7b36c462b58b61bbd82af5bb3f90e0b3668f8dfa3d516c91c75be4b427b5cabd9","ssdeep":"","tlshash":"a9413c87dd00ce75960eeeb4aa960b085c90e1211c5a6e241e27c701392ab28565d76f","first_seen":"2023-08-28T01:22:02Z","last_seen":"2026-06-04T11:53:58.794802Z","times_seen":216,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":72,"dns":35,"connect":1,"send":0,"wait":18,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=a21647ec73a2d845e5a13cb95d1cb58b\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887675750\u0026_lt=\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 11:26:24 GMT","end":"Thu, 16 Apr 2026 12:26:22 GMT"},"fingerprint":{"sha1":"54:5C:60:E0:01:FF:74:D3:4F:29:AE:80:35:AE:CF:1A:7F:3C:FA:A9","sha256":"AB:32:8E:4E:39:30:DF:C2:53:A9:C9:73:29:0C:08:52:88:14:B9:FB:90:B2:75:3C:79:35:B9:60:72:3B:0A:70"}}},"request":{"raw":"POST /client/log/log?plugin_sign=a21647ec73a2d845e5a13cb95d1cb58b\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887675750\u0026_lt=\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 757\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nCookie: ss_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":757,"data":"log_type=CHAT_MSG\u0026data=0qH8PTXG1nmb1nohMhHQl2VAs5vmyh8htTV8rCyiyQV%2F1Ncb1nmvrN%2BvsVzVfGHWfhypyGcW19X%2FyAKhyh8hrQjWtazErdyiyhypyQrpPStbfQXQyAKhyh8hfQzWPXz40NYVyAK9BdH9rNH51nz%2FyAKhtAO%2FlAv%2FIhk8N5OSI565I2f4M2OSIeOhBdHpsnmGtnuGrCyiyQX%2FBXX2yh8htNHpyAKh1Tc4fTliBqzh1nm%2BPQIVBNX5rTo%2FPSHGBqlWyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2Fld6hBdHpP9tbr3u4sCyi0qHvsVrVfGIEP9khMAOpyQXk1NI41nmGXQXqf9VWPhyiyhypyQXqfQzqyAKh0a8hPnX5f9uGrX8hMV8hoCYwtNc%2Bt3VWPhYWf3XqsNcEP9kRt9u5y3u4t3XwfTcVrdYWPhY%2By3c%2Bt3uhsNIVyTcKsNoRr3Vvy3mWtdY%2BP3jWtqYwtNc%2Bt3VWPGl%2FNdHzyh8hfScWfQXMsnaVfqyinSphPQuwrCyiyGI%2BP3X5Pnuqt3jmNSYbrAOms9lmMXzp1NI4yh8h19XmD3u41dyiyQVvyGatbN4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b626bcb65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-06-07T05:53:03.797303Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=af04994b276730a73c76ed16408a18e9\u0026chat_user_id=687e6d2c2be4e369bdceee3aa986eaea\u0026direction_type=1\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887676511\u0026_lt=af04994b276730a73c76ed16408a18e9\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 03:37:55 GMT","end":"Tue, 21 Apr 2026 04:37:52 GMT"},"fingerprint":{"sha1":"57:4B:24:A1:1A:1A:75:7D:DC:F3:2B:85:E7:4F:DC:59:C0:C0:0D:94","sha256":"84:AF:36:E1:EE:AD:88:CE:42:68:8F:E8:65:A6:07:34:D1:28:BC:9B:49:15:48:D2:2C:CD:C9:E6:81:30:BE:B0"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=af04994b276730a73c76ed16408a18e9\u0026chat_user_id=687e6d2c2be4e369bdceee3aa986eaea\u0026direction_type=1\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887676511\u0026_lt=af04994b276730a73c76ed16408a18e9\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://binance-usdt.org/\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9d89b62ada8276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":57,"dns":17,"connect":4,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/hTk5dpiK0KaZ2SayRG.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/hTk5dpiK0KaZ2SayRG.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PHKrE7j26tgJbWgmIBUnudfNBgym6VeZVQnLGbFhlusXazfqdZSfWVKjkKFAc08QZRgXyuoNtKDKd2jLlaDcikePfNOYcW1sOdqJMA9f8A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a62464d8ce78710c6362a1d3ba4352cb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eccb47dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (502)","md5":"cf925c27bc8bd77f6d3e06ebfdeb522e","sha1":"2c13f1326cf4ebc593bb162dc1246bdbf66ea6a7","sha256":"8bc73a3eded7ee1fd3e200146637cc8cc99719442c86f8e328bbbbb535342856","sha512":"d020d6bff0ea48a5a0da147c5323fb5d8ace64d4700c7dd17f0d7cc87ba960c78cab2cd051295be5f7af8b1f43d4d29e08be188a142b041b0442f0c91c06e822","ssdeep":"","tlshash":"f1f00ea5c0c8dc30022ffa8892287591031cceb8c32141d4ec8a6658f3dd8a5d66cf20","first_seen":"2025-09-04T08:54:20.522848Z","last_seen":"2026-03-07T13:25:36.58038Z","times_seen":4,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/fonts/iconfont.2ed03d2d.woff2","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/fonts/iconfont.2ed03d2d.woff2 HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://assets.salesmartly.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 8716\r\nserver: AliyunOSS\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\nx-oss-server-time: 2\r\nx-oss-request-id: 69AC1E7C48E95B363547368A\r\naccept-ranges: bytes\r\netag: \"2ED03D2D50DB630E6DB43AF0AB7754D0\"\r\nlast-modified: Fri, 06 Feb 2026 05:58:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18312883229832275330\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: LtA9LVDbYw5ttDrwq3dU0A==\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ee6fa75e712f6cdc2fa03f92f2cfbde0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: YhToVEo-48mnCCZWgJNX1-DT1YCz2HfBIMa_U6BaTD83HDhPVxixMA==\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8716,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8716, version 1.0","md5":"2ed03d2d50db630e6db43af0ab7754d0","sha1":"be76b52aae516e3c80f4e0648e9706ffbf3be214","sha256":"a193d84760e849b95a98318e0e925d8f8449f4b36606a94900a6b5fc173b1f98","sha512":"f3ef820f7347e9965c737da31127c58686d8027aa04ddcb26f6ac8d47c98a49a5dde8544e3abf4084a194cf8c47e9d639c5d8cacebfaff10a3898be7df322054","ssdeep":"192:MxEayh1xopHESFdJwCa2gJyU2VnQi0eoyyn+hgd:5ay/qRESFdJ4uUWnuP9nx","tlshash":"1f02aea0d59becf2dd573efc9e08627e409c2c5a4e91b2547baf8336124b39801e09e4","first_seen":"2025-08-29T00:00:23.805044Z","last_seen":"2026-06-07T05:53:03.81118Z","times_seen":1171,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":716,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1027.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1027.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2780\r\nage: 34731\r\nlast-modified: Tue, 19 Oct 2021 05:32:40 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 03:48:52 GMT\r\ncache-control: max-age=86400\r\netag: \"856bfdb63dc0d6fad6b92fc6a29719e1\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: ES2c1xN0IEuNUFiJ4FQVyZKabG8g8VQHV--PbtHM02TeCT9a0-q3XQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-07T07:20:53.803198Z","times_seen":21370,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/css/plugin.ca8811dc.css","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/plugin.ca8811dc.css HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 03 Feb 2026 09:37:35 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6981C1DF58A49D32397A27A6\r\nlast-modified: Tue, 03 Feb 2026 09:36:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4711444634510545221\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: GJkBkDDNMX5T+a6ZYreZHQ==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee6fa75e712f6cdc2fa03f92f2cfbde0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: bhMKOrm6sGDSPhgdSd9E5v2btAn3BPG9plCXTX2XQuhmYn7tBKTQSg==\r\nage: 2776219\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":77948,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1899019030cd317e53f9ae9962b7991d","sha1":"b9d94d577b4c079d5fa4823f82896df59f4d9b5e","sha256":"2d16333363ea5a097558bc8675e8fd989e71e6144b89c0ff537bfb5ca3a087b9","sha512":"152a11565d2e8f381451c197d63daadc1cc14baa9c2113361549949b0a2db1b1c5ad535a152b80eea4728caa8dae9ee32b26e15d42886dae45df70b97f9506d5","ssdeep":"1536:B+1IfcryTXKrMV4wU3k1rz0JUjMBwrjlvOb/E0/qPxE7aWSlsgTu1dQq5qsLxHig:g1Ifc6KYVh0JUjMBwrj6qxE7aWSlsgTg","tlshash":"5a73a832ca15312da177e125f5c0f9d930b5c207fa230aadfda47939c2f298527b668d","first_seen":"2025-11-10T12:55:36.307776Z","last_seen":"2026-06-07T05:53:03.809863Z","times_seen":1588,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/9lSaaUcTNzBCKoSZj7.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/9lSaaUcTNzBCKoSZj7.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M642TV4RacLqXILsIePxUymaMiUmNB3XLFTOUeMxJLdzEjCpdRsP75nCWCBi38OS2L%2B6T4XRv7INHT6aCsONQ5ihqqHmci75S2d%2FzBDmotY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"029eec3cdca2764418f53740a77d1488\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eaca77dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1678,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1677)","md5":"52a66e0268d347a7050416934bc55a38","sha1":"7202db82faab173725644e0a7a4bb36475b6b5ab","sha256":"b2c71abee063e98f2038f0aaba798d6362b1bdb7b743779b13635d0390075d8e","sha512":"a6f75bd71e949677079c1d21e88d6a72dade5ec5d59d31c7ac0c9438b1e224432254d0de50f854e15ab079fb04aa0e7ed31ebf56ed593dfe9742aff5f7420794","ssdeep":"","tlshash":"b431849db41ecfbdb0720938660bc05891188bdef326ca0170e84b1217d7c38662ab68","first_seen":"2025-09-04T08:54:20.508615Z","last_seen":"2026-03-07T13:25:36.504626Z","times_seen":5,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/eXbqw4YyAWCH4RhJbn.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/eXbqw4YyAWCH4RhJbn.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPwCj5ZBpURv5IaHfuEUyKUdQ6v55gceP2iYJA3f4uZL18DLDnfn0IlBNbzAhq57oJ8Fu2l2PMlVfWQ0oo9%2FMkN45hVrnXRk89fGymlb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"baab2491a98060eb90daeadb30239b36\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eecc17dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (706)","md5":"4dda62432449705b6e0882b8adc6a100","sha1":"cec4a61c756f4a67f5a4ac90270052e17ff1675b","sha256":"671d68c40183f5c9efd91cf1ec7219c66e20d74d995feb0bdb4e9f0929e5cad4","sha512":"e6bb8556a43a976ad8299c63d14f8419d018b485d5b56d2062873d3509070513095ee84a78740167855890d5ecb52c94967885f8f28a3c138d0180f169b51f98","ssdeep":"","tlshash":"1d01446fbd5dddb5759244f455c31859321a8f2cbb3a84c0e1b11a3015d2850f027748","first_seen":"2025-09-04T08:54:20.548543Z","last_seen":"2026-03-07T13:25:36.549926Z","times_seen":4,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/zO1bOEg7NNSUQV_s9k.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/zO1bOEg7NNSUQV_s9k.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B738unCPqErqOu9OzMWOqOe3NmY5RqQWtT39KshZawnMIEUAUWLea5HZPX5vwgqrSrG7NPk%2FWvJ80NiCRPjXL%2FyMAtvE%2FvYWtDxNZ3HA1rk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7a55d574edcff1affbb3886a06f7da97\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623dd4c7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"ff3969455e45838d076a206cbfb6ce0b","sha1":"f5554360dc29c164488e6eb625a598e7dd60fcde","sha256":"96a6178ec85c4be0f67fcee07ac6e933ee298d60143152a1c772dd9bb49e236b","sha512":"da1aa567bbc2e3a17042667bbfc4f5566636163190a1f9752e0465ee566340b65aa99c5f3ec740615a16788f8c87eee93297c838c26a86181dd69ff01bac452b","ssdeep":"","tlshash":"a5d05b09859867b929f6106b07466bb021b7125d8f64c2b9515d0e34cf1a3065e4be32","first_seen":"2025-09-04T08:54:20.461539Z","last_seen":"2026-03-07T13:25:36.520221Z","times_seen":4,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/28192.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/28192.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 9881\r\nage: 24996\r\nlast-modified: Thu, 28 Sep 2023 05:47:46 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\netag: \"738e03afa4b65f63b78c3a6a4c6c332b\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: -3bdD05djKUKKPXdk7T7I6733r5DkIufzmIVgAAeLvx90cmiaS5R3w==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"738e03afa4b65f63b78c3a6a4c6c332b","sha1":"d14af15385da03855efe878236d07d41e9c56ec4","sha256":"c533e2f35a8581477eedf7775009aad7aafda3790e17ded722b5598becfad360","sha512":"90507daae190e73834f55c88eb6b0b6fa6a5b10d2debd697a1ff9dafe6edea58089cc5ed92f86815f591882f27b0a1e4386525c596f1845a863364e14df92f66","ssdeep":"192:CkaFRc4itd+dIx3oxLkHxA2vb20MySGZfAAUqMaJgOgcU3wK/SbJK:CLKYSRA2vZIGFU6oyK","tlshash":"0c12bfe201550cf0baf29e83ef94775a097cb65f73179a991360acd208d252e8f6d841","first_seen":"2024-03-11T20:01:53Z","last_seen":"2026-06-06T23:51:55.913583Z","times_seen":157,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=dd83183721b2eab9dad659afb7c89658\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887674906\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 11:26:24 GMT","end":"Thu, 16 Apr 2026 12:26:22 GMT"},"fingerprint":{"sha1":"54:5C:60:E0:01:FF:74:D3:4F:29:AE:80:35:AE:CF:1A:7F:3C:FA:A9","sha256":"AB:32:8E:4E:39:30:DF:C2:53:A9:C9:73:29:0C:08:52:88:14:B9:FB:90:B2:75:3C:79:35:B9:60:72:3B:0A:70"}}},"request":{"raw":"POST /client/log/log?plugin_sign=dd83183721b2eab9dad659afb7c89658\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887674906\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 490\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":490,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHQl2VAs5vmyh8htTV8rCyiyGI%2BPnXbr3umN9jWsnohBdH4P9wVPhyiyhypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBAymBAs%2FluFjI5f8l5DSIevjI5ojyh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFWsQV%2FsnmArCaaf9c4BQzqrqFABqypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6Ryh8hP3zGN9c%2Bt3OhMGpht3VwrNI4sna8yAKhl2fSlARkI5sSIev8IdHzbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b620ae9775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-06-07T05:53:03.797303Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":45,"dns":19,"connect":1,"send":0,"wait":191,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/LQIglDmTnE9RKFU9Wo.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/LQIglDmTnE9RKFU9Wo.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/pIBi2ubwwXQ1yA6zd9.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYi3GAw9Eyj0%2F%2F2yk%2BS8MEUWSYkEcocmUiNRUXHZBerCNp67a0rEo0Uf7AdJlPQuVpRmjl9kstZMLSfWMF80heQWchpsm94IO60duZQ%2FTLE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ba1a17b0cb97afd90bc49cd8d1d50db3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b622dd1d7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (542)","md5":"508c2a054ef5401ee27ea21e05ba66e0","sha1":"3f925e6aa4ca411e8c72f84257575398a19104cd","sha256":"f51bdcb2cf6092f5e821a828542e7228f3a3d323866d98f835c87a3eef59eee6","sha512":"e179cf761be30db8950ff6c694f64e6a77da4e6a64656af01bdb874f281c5fc5eb5c569059ac1571ad8d66ecd0fbac0cb40bb5e702542967ac3d1fe24be16e61","ssdeep":"","tlshash":"61f0200fd801d6fd64b71c48395330512184afacc72098c4e6e52170e783875b06ef14","first_seen":"2025-09-04T08:54:20.551904Z","last_seen":"2026-03-07T13:25:36.48904Z","times_seen":5,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/KWzPkQFngKBzeTdSZ6.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/KWzPkQFngKBzeTdSZ6.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jS3b4KDkLkgXpRtcpkeZRQIG1w0EPoZF1r0sSbRjdyLsshmKuvz6%2B5%2Bu4zr1B%2FKOkWtwUcVUttSG89z7eNm3BFIYSHAliAHJICtpds7idjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8fb1f9f8a78d4c123943441853249475\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623dd497dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11209,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9254)","md5":"7f7a865239f9e3995bb85fa821af4b7e","sha1":"7479e98f689924c4e9ed67a2284aef1e7425085c","sha256":"23a8e5f398634bce8e82d4e37d70b5a22a0bad82c80512691ade922290305a92","sha512":"0ffd1b093ee8e18d7421a77d55e65236675c960204c5dfd9649ee75438ef1f717098d668760854e75e5bd0da76d264d702897cce855d51eb2d0c867943a98ef6","ssdeep":"192:s0whtiesnUXpkZlydAdbqBc/31XMHgFmypucFCZLoo7VaiJJg32vXoa8IkjtPdqk:JwzieMU5k/yMF+yAcFCZLoUaikcXstPn","tlshash":"a4321b9674047035c77799c5c09909b5a129378cf629c6d2f0ae2c3a3a695b4f0fef2e","first_seen":"2025-09-04T08:54:20.489611Z","last_seen":"2026-03-07T13:25:36.497286Z","times_seen":4,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/news?rts=1772887675614","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"OPTIONS /api/news?rts=1772887675614 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://binance-usdt.org/\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=raEdhF4S2RIQ6f2EuH37pJ0fr98BQVysCGjsrnUVAL5wknPRsr%2F3vVFObzDl7rPUYfZs8zPkX2kZaX38fE%2Bj58ibH6on3vlQFfM%2Btw5OrnJpUnZJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89b6252bc4527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/y0Cjo9nVNhB0SrEjPM.css","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:51.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/y0Cjo9nVNhB0SrEjPM.css HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7tqk4ykxpgAu1%2FgAG6%2BH5Uf2oA6ctABNjViq1moJOE8CfnxN3vq77kH8j9Dn8Vz12ZqlICotgYj4OlKwo7O6LuZsDgzYbzXF5eHzBgboS0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d6724b587e9492a29ac8e59cb62547f2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b60c0acd7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1019426,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"b87519a156cca706598c4f2c01ee1bfe","sha1":"9fcdacb76e05c1bf313e806c04cd758b04cf4a00","sha256":"e531442e8f804ae6206f75c6cc952100bb81770c8d81880d32171cf82d9f58bb","sha512":"6df129bc134bf20be2bdc91e82a10dca494180a4d33a732b61cd86ac3fcc145659e610b9abd34abc2521d1beb98daeae48e24daa99ab4fb66dae6985a194db6f","ssdeep":"6144:U5xsaJKNSgV56snEMm8TQ4ziHid5UbS88m2Z6GiQrQucpnZw3DuqqDWHIsfdZv78:U51x3HiDB3ma4ucT1le5Gn","tlshash":"d62529782b84113cfc0bdf729ae48adc652de153db534ed8a609763483c72e72673698","first_seen":"2025-09-04T08:54:20.544037Z","last_seen":"2026-03-07T13:25:36.567538Z","times_seen":5,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/install.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/install.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 24 Feb 2026 12:15:34 GMT\r\ncontent-md5: I5DtNpUGcEaato6qOAWR5w==\r\nx-oss-server-time: 4\r\nx-oss-request-id: 699D96667859E43739F858E6\r\ncontent-encoding: br\r\ncache-control: public, max-age=600\r\nlast-modified: Fri, 06 Feb 2026 05:58:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10938694382152741707\r\nx-oss-storage-class: Standard\r\netag: W/\"2390ED36950670469AB68EAA380591E7\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee6fa75e712f6cdc2fa03f92f2cfbde0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: rgVpcDBUGhtmRgaiGMA0kImgIKCLun0ruXmYPAonQtMJrWCL3pXwiA==\r\nage: 952340\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20685,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20685), with no line terminators","md5":"2390ed36950670469ab68eaa380591e7","sha1":"711e527201d0e0be9d4712b3cda75085c70684c6","sha256":"87bfe2adc2bcdc039e5effaf223567652dee32107d68ab6e7b3a8181521106f6","sha512":"838fb858343e2465775cf494439c918b08ef5bdb02eec01c9c0f7ddae437c96548716a057dacdb9181def4aa21f5ba9009e4d63cec11e81246827e86133566fd","ssdeep":"384:dPygzNXbASlySwbgVTiB0WxjyyN1yL1hmGadeBT+SwQU:dygzxLTiGWc3LGdeBT6l","tlshash":"c792194870297cb8429e5a3315fea214307f1b852931d0a0f26ddb796f78e865177ebc","first_seen":"2026-02-18T21:57:56.58431Z","last_seen":"2026-04-15T20:10:01.050331Z","times_seen":332,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/3vOl0SsWeHDYQdpHvT.css","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/3vOl0SsWeHDYQdpHvT.css HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIF7zbYJWUM%2BsR6ees%2F%2Fg7gm%2F0e0n9mb7UMYr2RoxxY93yzouCLukWDPKPHM8%2BLCZNvofGki%2FiDCUEyFNrp95XR2boLTpiyX%2FkPMruCJ%2B2U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6b31b41c8ab2611247fb4673c3d9f906\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61e3c947dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2694,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2693)","md5":"3f28253ee7f3d1cb19aeafad1111187f","sha1":"3130fac7725b7f6a5fff4a7c9df18a1067aa012e","sha256":"02bc3b1cad3d4bb9b0160135e6b16eb62133091d879c8d0d0a5b4ea831149626","sha512":"d07d7a8607add532475e31995dc647464951961675fbe74b8f202ce19ae29023272d997a3f873542094654e4e0e4a5fbcea3dcf88f602e8bb4ab9e162260c329","ssdeep":"","tlshash":"6051b3424892279d4693863e3198f3c8e07e74e33bb7dddaa1498dc1ac9b67509a3c53","first_seen":"2023-05-21T08:34:57Z","last_seen":"2026-06-06T23:51:55.919236Z","times_seen":212,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/SqOik6GdtcDj7vnDa7.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/SqOik6GdtcDj7vnDa7.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lqww6grvbUiXODrRgpc8XYqh0lGmxtxZGzi0bmpU5CGXkhk4DxLZmUKJ7CF9hYzdz9sTLcD4ZfUoCgWi9CIM6vtPB5KfFSi5muwcTXf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c1ad1319552dd381758987232bdda89b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61ebca97dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19037,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19036)","md5":"723c228b23f8bd6db3b8d16d13b45f5e","sha1":"6e4791d4e670a20c0ede920ff3527ed49e177945","sha256":"b063db3eabc45bd12842e0e5ccfbe1025a657d2494f688e5bf6e6aea337a1b9d","sha512":"e1dc59ea961555f196eabe3fa840be82e6f50fe1f65ffa138d106009d4c7f6c4e9df9e399a3feb8cf3245de96b2d2803c749802956dad1969d73daa99ba1866d","ssdeep":"192:y1END9bi8sJadU+8zpys8kyd8zp+zbmFpPZl3x0uTe8U7LO1idgcFJw0l8zpezDs:y1EFWVP0bmFpBl3Cuaru1iacFmzFtaVC","tlshash":"d682c8746010c32cfd95b5a51c909802b8cc4fdfca969172b1fd8d9263c39bbeeaa355","first_seen":"2025-09-04T08:54:20.503482Z","last_seen":"2026-03-07T13:25:36.563402Z","times_seen":5,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/iSBcCTSFh6DPBMWIrt.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/iSBcCTSFh6DPBMWIrt.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gihg2SWzmSXGOMVKTDxkRZRotbtsWlruvFK82qiOSIV%2BNF18myQ4p3hrljLAGvFcWWbkGzVjpkhfS9E3pNHr27FXnJlET7ofIFIH040tbX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9f61d08c6078bb4084780256737bf80b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61ebcab7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1809)","md5":"1364cae7ed5ef522a73e0d20b1317466","sha1":"37d18cfbf94892ea3aa603665729759633b8e9ff","sha256":"a4ee3bc98d083451924ad0a339bd258169aec8a0f0eee426012bf1fd77d7346b","sha512":"61d6b8da601ae93a8d7ea40b4b981016a0f1a11daf13746699f9dfef0c163d120a2146cd8ac0230da64eb386c2b16872d4e2069f77fc51ad3e9770497f759e2e","ssdeep":"","tlshash":"d8314591f6e9d035937e58e1c0391620e2591f447159f4e6d4ff0d815f86846f93ba3c","first_seen":"2025-09-04T08:54:20.47914Z","last_seen":"2026-03-07T13:25:36.505377Z","times_seen":4,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/Yz3QkDyttwDM7p_PZI.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/Yz3QkDyttwDM7p_PZI.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BXF064LWCmYNI0HUYLU60rWbvAYAMxKfUMGMcw7bOMqoihroXLWhsoA16Nuh6veqEbrTRtuVj58ox1%2BQhwFIcy8xkK2QJ6CsCUId9qdFFI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b1c4be61704192216f6e571a9197ac3c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eecc27dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4102)","md5":"4b80488f12c0243f3e45234085ded996","sha1":"1338a83ba31aa2011154d3d1ebe0094138605ba7","sha256":"973e51f979eac7a591ce087d152271d955dc2d11d27ab9ea8bfa059429a0ff43","sha512":"9975417d5cd099b62b3d55def4814e626c2047fd52e35b66e7f0445c2b8ca93ee27b7f987ced7d40150b4866adf1e48e8320e523d658b1961bcbd00de60dd7f0","ssdeep":"96:IafdRuMfPzqfcSFuxEV16+4O0/q6Eyehq6i8Ht6JzdY86pd:XfdR7Pz4cSICVq/XOzKmP","tlshash":"5681f088780789bc88ed4624ac1764c065cf2bedd02449a1b1fedd1626d69e0cb96bf8","first_seen":"2025-09-04T08:54:20.517061Z","last_seen":"2026-03-07T13:25:36.547106Z","times_seen":4,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=a21647ec73a2d845e5a13cb95d1cb58b\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887674934\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 11:26:24 GMT","end":"Thu, 16 Apr 2026 12:26:22 GMT"},"fingerprint":{"sha1":"54:5C:60:E0:01:FF:74:D3:4F:29:AE:80:35:AE:CF:1A:7F:3C:FA:A9","sha256":"AB:32:8E:4E:39:30:DF:C2:53:A9:C9:73:29:0C:08:52:88:14:B9:FB:90:B2:75:3C:79:35:B9:60:72:3B:0A:70"}}},"request":{"raw":"POST /client/log/log?plugin_sign=a21647ec73a2d845e5a13cb95d1cb58b\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887674934\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 757\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":757,"data":"log_type=CHAT_MSG\u0026data=0qH8PTXG1nmb1nohMhHQl2VAs5vmyh8htTV8rCyiyQV%2F1Ncb1nmvrN%2BvsVzVfGHWfhypyGcW19X%2FyAKhyh8hrQjWtazErdyiyhypyQrpPStbfQXQyAKhyh8hfQzWPXz40NYVyAK9BdH9rNH51nz%2FyAKhtAO%2FlAv%2FIhk8N5OSI565I2f4M2OSIeOhBdHpsnmGtnuGrCyiyQX%2FBXX2yh8htNHpyAKh1Tc4fTliBqzh1nm%2BPQIVBNX5rTo%2FPSHGBqlWyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2Fld6hBdHpP9tbr3u4sCyi0qHvsVrVfGIEP9khMAOpyQXk1NI41nmGXQXqf9VWPhyiyhypyQXqfQzqyAKh0a8hPnX5f9uGrX8hMV8hoCYwtNc%2Bt3VWPhYWf3XqsNcEP9kRt9u5y3u4t3XwfTcVrdYWPhY%2By3c%2Bt3uhsNIVyTcKsNoRr3Vvy3mWtdY%2BP3jWtqYwtNc%2Bt3VWPGl%2FNdHzyh8hfScWfQXMsnaVfqyinSphPQuwrCyiyGI%2BP3X5Pnuqt3jmNSYbrAOms9lmMXzp1NI4yh8h19XmD3u41dyiyQVvyGatbN4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b620cedb75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-06-07T05:53:03.797303Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":38,"dns":3,"connect":2,"send":0,"wait":188,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://binance-usdt.org/\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 12:10:54 GMT\r\nexpires: Fri, 05 Mar 2027 12:10:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 175021\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-06-07T08:17:36.511422Z","times_seen":14420,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":24,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/tg9KuJbghaBa7adTHb.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:51.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/tg9KuJbghaBa7adTHb.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:51 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otl9yMihuvVtKOOAwBP1FYmzC92l%2F1T%2BFkuC6D8LdRdX8il%2FjzAIH%2FuVfPBIekgKbVyhMv9fCvfyNxtS%2BpFH4%2FsYYZmWMFGXBBLuysistHY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3f0d2398486a203c8deab0fa784fc025\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b60c0aca7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1564645,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6914)","md5":"d04b653d658cf4e1734a1b58bedb81ec","sha1":"02881e1c9c6925ebdce48c2e6f4fc8c811c15152","sha256":"ab9b7cdee66b6cc558dc96dab16add7d70e9b2240d5b2e5d04414ac5023a7ea2","sha512":"dc847a4694dae14e1a2228b330d84defedf6f32f0afe7ff8162c94e570f8f3165e2f836b0ca9ad2b11c49182a22e9f3b432e267b9d7f1896f1f112e21e1414df","ssdeep":"6144:wDROE7EWcTN8wafZPEO2Zgx1Ur/sNjRsm14tiApyMo2PT:wFOE7EWcTN8wafV0Za1UIjTApVo2PT","tlshash":"9025f9281a6bf744e419c0dbfa373d84c59dd18aa44724d24f754bb31ba2793eaacd03","first_seen":"2025-09-04T08:54:20.557116Z","last_seen":"2026-03-07T13:25:36.599894Z","times_seen":5,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/swiper.eLl8_PPS.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:51.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/swiper.eLl8_PPS.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/tg9KuJbghaBa7adTHb.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:52 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mnRHaK4iCxax8aqtpIFbk3jWZlMLqEuFdberl9%2FEnoghooQw8yEDSaRRDNu0Waey6lJ22KHkQvmDGzxtw6vaA3VSXAAiJAapmb1POgH%2F%2Bpg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8ff13059e614b2af1b1579b1e6c57d11\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b60ddb097dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167463,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"e8f8c6e5da252bd2acc140e8271b7726","sha1":"66a225828b4d579097268b07d572437f1a27b1f5","sha256":"e48d4167abfd1772f8ce04b292c763afb0321ff17079dbc93e6ab9d7c5ee7e02","sha512":"75c9b9584d035b84fbeb1ec4c3f5ceee26b0171b23f3fe7e038ad46a572ff64e0fe2d3e450552f136a6e2b052fc85af5307e4b7984c96e0733c1a02027cd5dd8","ssdeep":"3072:sGvDusNtFqrZirVK0v0EumyP7EhOh0DvP/r02M0bd5:sA6ItFqrZiU0imyPYhOh0DvP/r02Td5","tlshash":"a6f34a997250b13252eb19e742768111b37909497809d4e8b1ad9ceb2d3f84812ffffe","first_seen":"2025-09-04T08:54:20.541637Z","last_seen":"2026-03-07T13:25:36.574125Z","times_seen":6,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/upload/files/69683b3dcda4.mp4","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:58.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /upload/files/69683b3dcda4.mp4 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://binance-usdt.org/\r\nRange: bytes=17596416-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:58 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 3199850\r\nlast-modified: Thu, 15 Jan 2026 00:56:29 GMT\r\netag: \"69683b3d-13d536a\"\r\nstrict-transport-security: max-age=31536000\r\nage: 1\r\ncontent-range: bytes 17596416-20796265/20796266\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BubUZ6t8Y4XJeWeRx6nbHC1vbqiaBDL%2FhFpSOghU2nSWKJ5VrEKXQz9XK2i6qP6el496vd3gUGitK%2Bv9ILydjhKk9e0e%2FibNbwJFIDkxf47JMdRE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d89b6361d2cbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41682,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"0d95b8780569d9ac0c7b6ca5c1dabe06","sha1":"ee04c59785ede7e6bef7e2f899395b131a3814d5","sha256":"ea3e6a0fc9002af0d63a34d0487acc1725f11f53c0436f26c4d2aaffe3cb067f","sha512":"24dec52f517fa14174d992c5db3988f8eecac91ba789e2f7a3a3b4bcbc331c7ca9439221727e45bae212e039835efbc984c8a852cc08968e83de60b5e012d8a7","ssdeep":"768:CIc59qTCBpTbqwcCumOcbIKyDaIqeLrUb8FO1nIWR5Sxa:s54TCB1+vCumpbiDt77qnrR5Ya","tlshash":"0813d08b77b57f00d48ac6794687409b3c77073a6f26a6a9d0e9f36f0e2437b5592803","first_seen":"2026-03-07T12:48:29.260464Z","last_seen":"2026-03-07T12:48:29.260464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldtimeapi.org/api/timezone/Etc/UTC","fqdn":"worldtimeapi.org","domain":"worldtimeapi.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:52.159Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/timezone/Etc/UTC HTTP/1.1\r\nHost: worldtimeapi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":1103,"timings":{"blocked":62,"dns":1041,"connect":1049,"send":0,"wait":0,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/wbXQLviW6Y1v1MbbBl.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/wbXQLviW6Y1v1MbbBl.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3V0xWPRDrz%2F474tRA69ATWq3pQ76RsDckgM%2FR3DbNqsMfy%2BR1IZpXqxlmS2E%2BzyKbixF5VDkSBJp9PgEcxBnTZEbfRalmzQq5dvNa3BF2Qc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b6e5ad146ef0ebe064eb92db3f0a7af1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eecbe7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"67904e12d6f358e3ecd5d343b0ba71fb","sha1":"ccd103fc031691590e2ad9bbdf05311ef122f5e2","sha256":"2326aa9540b342a4abddf87d2b6ea2c4a1db96023d94d6e6f709073075e20ecc","sha512":"1c3964f59c4944aad193138d85d70001983a90a9867fc4637764041496c267918aab17a7a5ddd80bdd0598a9fed1505688504368fcfd9ee781f2b9fc4af05c0a","ssdeep":"","tlshash":"17b01202468c45e8186400aa0b01a6f41362000c1b24d2b5a40d0e1cc71624a9d0fd22","first_seen":"2025-09-04T08:54:20.462738Z","last_seen":"2026-03-07T13:25:36.578335Z","times_seen":4,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=3d49ff41b89c88e6b7f023c3f9dbd7a3\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887674959\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 11:26:24 GMT","end":"Thu, 16 Apr 2026 12:26:22 GMT"},"fingerprint":{"sha1":"54:5C:60:E0:01:FF:74:D3:4F:29:AE:80:35:AE:CF:1A:7F:3C:FA:A9","sha256":"AB:32:8E:4E:39:30:DF:C2:53:A9:C9:73:29:0C:08:52:88:14:B9:FB:90:B2:75:3C:79:35:B9:60:72:3B:0A:70"}}},"request":{"raw":"POST /client/log/log?plugin_sign=3d49ff41b89c88e6b7f023c3f9dbd7a3\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887674959\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 542\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":542,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHQl2VAs5vmyh8htTV8rCyiyGtEPVzpP9uvyh8ht3zZrnkhMhyhBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCkqMCk9BAYbl2fSlelaI5oml2f4lCypyQj%2BPQtasntVyAKhrnkwXXlhBdHafQ8hMhHKtTc8f5KWB9HEPQu%2Fs9DwtNIvtdmWfQfWyqFhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8ydypyGX5rXz41naVyAKaM2fpyQjWrazvsNc%2ByAEgyQHqPSt5rNHbfSX8f3zqtdyi0qHAP9zZ1nX5yAKjBdHpP9I%2BPuI4PSH%2Br9DhMAuzBdHAtNHqrnm4D9Iq1NY4yAKhyGaz\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b620beb175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-06-07T05:53:03.797303Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/DaEnIiSxkDBmu4Hac9.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/DaEnIiSxkDBmu4Hac9.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/pIBi2ubwwXQ1yA6zd9.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i18APtw6tJmUI4XUbeGL%2BiIaDQDvJuuhU6WBYCUReRjmtEOZnGI8sqTRWogwLe9tlnTUfo6kjG%2FsB4AnlbTFPmzLEJ7bUuRiFas2FnRo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cf9491a809b6e7bfe97c81b9a591ae45\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b622dd1b7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2251)","md5":"c985d4acb6dd91ab8e954141b105d9d1","sha1":"39cd032f0d581cefc73b3bbab74d6b4266f03b2c","sha256":"2c5044c8ddbaaea49d9119aebfdd5ee2c8d57b405d0c21d1a94f390c5b36dded","sha512":"e88987b3e0abb9d4680e33c015de8765df6012279842d5912ab37331717bbb586b853044a1dde2e5cb25824663596bb370debda0909d8f3471817786db21f3be","ssdeep":"","tlshash":"1a4184a8f911deb9e677463884131050220c1fdfa064dad8f0ae1e225bc6cf46456f78","first_seen":"2025-09-04T08:54:20.471983Z","last_seen":"2026-03-07T13:25:36.481209Z","times_seen":5,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/upload/img/69aa8d58cb3f.webp","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /upload/img/69aa8d58cb3f.webp HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17176\r\nlast-modified: Fri, 06 Mar 2026 08:16:24 GMT\r\netag: \"69aa8d58-4318\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ve7EcxGIY3S%2BCfkYO21fxBAenfFLa60e4gDtKcBaeuq6Wwjamy5e9NQs7MKY1fMotQn1hmLxeP49M1NIZntwIE3bAzmpoHwn2ttzsWOqRVPkTVQ9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d89b6232b45be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"98a24e7c7305af0176691255a4154178","sha1":"7e0b159c61c27b50340f3ba06df6bc58872e2f21","sha256":"38d47160e16cab327ab6d62fc226d673fecc09db84182f5d8ecdec8a9b66453a","sha512":"47cd0b094d2c7c8df74f7702dc789984d128885ed75cc9b48b4a08c23fb2afe4c410ab555246468c1add23301201db0cff700b97d83ea281cecb80f1a402fc0f","ssdeep":"192:lk3MJ6ptdUDXKZmbunht+Q/XNrDcUHKJP5v88/pW6Hn9y9ZM7zpAd5SrN3xMXVaL:lPJo+aFxFrG5r/LdygvaV9xprZTd41Wy","tlshash":"dd72e0b1fe1d057e0f6f898f400f338b5b4183caa88779c9b6531c5a25066134a92af7","first_seen":"2026-03-07T12:48:29.261254Z","last_seen":"2026-03-07T13:25:36.582025Z","times_seen":2,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=4ac2d8e35a2dfe5bca0ac66b1bce3298\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887677012\u0026_lt=af04994b276730a73c76ed16408a18e9\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:57.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 11:26:24 GMT","end":"Thu, 16 Apr 2026 12:26:22 GMT"},"fingerprint":{"sha1":"54:5C:60:E0:01:FF:74:D3:4F:29:AE:80:35:AE:CF:1A:7F:3C:FA:A9","sha256":"AB:32:8E:4E:39:30:DF:C2:53:A9:C9:73:29:0C:08:52:88:14:B9:FB:90:B2:75:3C:79:35:B9:60:72:3B:0A:70"}}},"request":{"raw":"POST /client/station/log?plugin_sign=4ac2d8e35a2dfe5bca0ac66b1bce3298\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887677012\u0026_lt=af04994b276730a73c76ed16408a18e9\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 527\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nCookie: ss_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":527,"data":"data=0qHafQ8hMhHKtTc8f5KWB9HEPQu%2Fs9DwtNIvtdmWfQfWyqFhBdHvP9a%2B1nkhMhHh1nm%2BPQIVBNX5rTo%2FPSHGyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2FldypyGHVrhyiyhypyQj%2BPQfhMhHVPhaXDqypyQIKsNcbtNIVfVzErdyiyAskI9D9reHAlQHVI3D5IAVhr3IVrnD5snOmMerVsnX%2Byh8hf3jar9V%2FN9VvyAKhrAOms9lmMCypyQuAt3VWPhyiyGY%2Br9Xn1nXSyh8ht3zZrnkhMhH%2BrA64M2v4sAySIAf5l3OSl9lSIQXvl2s4le%2B%2Bl2%2BVMCypyGXErdyiyARkM3D5l5lmleXvI2vjMerhr2vjI3skl9D8rAOarQOmyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:57 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b62d8d095a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1a5bafddb1b780e469ed45563f5e871e","sha1":"64699528e3e3606250ac0b3305f48f8e978660f2","sha256":"c1041e9ac008f4b7672e9583ed2ac04cf69cd071057108e00c00ba9d91e57448","sha512":"89e721c0e39cabeb905e2f22eb037202548359a375840d7627abb588f099694bf93b35f8a62cadd55ae1813597cb4eab6a651e1c3ac48404b79a8a33f8bb1a8f","ssdeep":"","tlshash":"f8b01251242833c30d11101e9011360852a47180ca104710c8784e0002480b42206191","first_seen":"2026-03-07T12:48:29.242761Z","last_seen":"2026-03-07T12:48:29.242761Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/adi?rts=1772887674536","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /api/adi?rts=1772887674536 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nst-lang: en\r\nst-ctime: 1772887673576\r\nst-ttgn: 5f9cd912cdf31c89d8d43d4141e68528\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=chYEdhJbn4jbNlQ8V56L8uPIgQ4pIaIDntv00TORjtftehZ58smux3WtmY0dAkFfq%2BJCVcGkI9zL6C%2B1R2zeUd1%2FV%2BH7BRTXZvH75%2BS9dqew%2BBGC\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d89b61f4a9abe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"36aa653d1fbee8fae19171b9d08c2a3a","sha1":"b9148a5506a5f34144aec3b6fb20f0809dcebd5c","sha256":"484db964b9dae5ac24ed5f7a9cd69ea4cf2be04a6757f8974be8bb58444364bb","sha512":"77356eb852d3c7a3ca1287a0ec84f3c4a1460e71b792f97723ae03ea0be817bd82e3e03ae538f5c3a3334b2c224862cd9db2f5b9fa12b9420857f3b2f9185e9a","ssdeep":"","tlshash":"aed0978ad12d16c8c13800392ea765a1d9cf79ee42a9f40ec0bee4d944aeced301745a","first_seen":"2026-03-07T12:48:29.262122Z","last_seen":"2026-03-07T12:48:29.262122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.156.60.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/marked/v14.1.2/marked.min.js HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Sat, 28 Feb 2026 07:30:37 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 20 Sep 2024 06:38:39 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JFBntxsrfZ64VoXBE8CHtNjr4.xFrBV4\r\nserver: AmazonS3\r\netag: W/\"4726c8d370952011c5137ee8e13eb6bb\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bf1322673c76eb0dbc1cb8544c47f1e2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P2\r\nx-amz-cf-id: sI8LmdA8VSeUOmJjJZKQLjxTMQ2HQC47jx3BbAZt77ZJ5X6jTFMpoQ==\r\nage: 623838\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36340)","md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-06-07T05:53:03.791099Z","times_seen":2372,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"api.binance-usdt.org/uws","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /uws HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://binance-usdt.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: KgQKeKOnVCq1hNdwH/eIHg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 07 Mar 2026 12:47:56 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: TwKirMJ2bqGRYkpRJh1ARzjAcqE=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bP7zEXt6Biz48ffLjoyh%2FFu0U30l6ciQId9oGP7yz4PDY5mbKhPIiZXoKNdoYThJZ%2BjZMSCbqv2WzC4e0ysppeaDnKbk2COgPh9yCFfjZNtO8H8Io%2BSm2ZJ9%2F10P7OGCOQgwtJeY6A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d89b6253b8ca9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7667\u0026min_rtt=7656\u0026rtt_var=2176\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2356\u0026recv_bytes=1165\u0026delivery_rate=374015\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=79a6470dfeddb972\u0026ts=423\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":41,"connect":49,"send":0,"wait":395,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/513.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/513.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 525\r\nlast-modified: Tue, 25 Jul 2023 22:58:56 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 04:48:43 GMT\r\netag: \"f28f04520098a3b137e4a9819a63c193\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: EPfWOfrBKIyGDXNTQeVj8k-PTKUkDbCfc_tdpYq28OLhLnn_3U-ySA==\r\nage: 30635\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"f28f04520098a3b137e4a9819a63c193","sha1":"e1a14814c53de51553ad1bb77a596cf13ee918d5","sha256":"f49107be685dbc68e93acbcfecf26ac12418bbc5e954e93e8a7d84b6a9f18f4b","sha512":"d301ca4cbd4c5a74577e6f4a0950d60818e935b50261b2871a889c5ac5e7e954b8c94ad0e6bc370528bd1d9e8debd0508565b34c6d56369776494c1240324ae0","ssdeep":"","tlshash":"13f00581239ea24757764410573ff92c86f38eac5ca4007ed5015da141b67c9d8992bf","first_seen":"2024-12-08T21:22:12.532481Z","last_seen":"2026-06-07T01:53:19.643834Z","times_seen":166,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1839.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1839.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1387\r\nage: 40049\r\nlast-modified: Thu, 17 Feb 2022 08:19:34 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 01:40:28 GMT\r\netag: \"aef8727bea8367cd9fd252c025b45887\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: hnteHqNn7SIMcYzflTzUuU_mhAeyyWa7cjogp6UfuOXeZgpGiRaZLQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"aef8727bea8367cd9fd252c025b45887","sha1":"c2ab9d909455bff35181dfd92bcc7baba930867f","sha256":"ce5a07d36768bcb5524044a9e92a606ae6effe1cb0913dfa418703461db62fe3","sha512":"5f97e368e23aa5e501e57917aea9426704ac3c4068b34d803f44944663bab45131170fec2872fb868a5faceb6856ce4d9f8870053aba7e8d08455989a731984d","ssdeep":"","tlshash":"5321085f5b644577dda94dbede05a54b29e30d208d978bc2c404ec1534598a643608ad","first_seen":"2023-05-06T05:54:57Z","last_seen":"2026-06-07T07:20:53.731396Z","times_seen":14534,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"108.156.60.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://binance-usdt.org/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Sat, 28 Feb 2026 07:30:38 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bf1322673c76eb0dbc1cb8544c47f1e2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P2\r\nx-amz-cf-id: WVsnXjm4fCTHagb_lzMnAOb7sp3YMJCHiYajsgjMrEtF1xBg49hwHw==\r\nage: 623837\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":47223,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-06-07T05:53:03.790166Z","times_seen":2882,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":78,"dns":42,"connect":18,"send":0,"wait":22,"receive":20,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/zGDaWqAb3DCTj41bwz.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/zGDaWqAb3DCTj41bwz.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kYu3D0Zziwx0l1pFRkGAnZidXYwzM%2F83MW%2FZIsYL38KZdqH9wiGUEZ0mTlZ7bEGdDGbSjsj8CE18F5v2nligX8VVZ4jw2g0MsuxQPZTuz9g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f23d3eb29195a77e86281f1e7267c5cd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61ebcaa7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5319,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5318)","md5":"f20eca31d26444f86d341e8248d5e393","sha1":"eea45ad610a82735797481e12614973af252396d","sha256":"91e095ef2a074c9086fdd7605e08e311cd5a868bfbf6bc03e663fe47faa067d2","sha512":"51fe3975642562f95b8c8c4817078032301ff0ee5a9fbdadccf14ae5d6121df9518ca8d37ae6f12522aab16089c4d1d2391577b8ef843a586aa49c1fb9fc7207","ssdeep":"96:0fXLjjA3qXkDai6xPtZ2ulKgRb2vbEj+U+Nka1Y34XJSq6F077W772E:0THvXKahVPlKXT4NjKYoXJQ0vW7T","tlshash":"b2b1283278a239036cc075f7794ccbce0e50053ae94398c3d2ea9e86d294f1cba69194","first_seen":"2025-05-15T07:17:42.12509Z","last_seen":"2026-03-27T02:24:47.36544Z","times_seen":88,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/QsZwH9PMNjDlCCrCM0.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/QsZwH9PMNjDlCCrCM0.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnnkbaNLxHfUIbOPW4FKveJk9OpDwVSwOFY5Dm8euGCQ2HldX8Gbi8dkLRD6fnY%2Fn1TMzpKzV6WoZF%2FUgHpHQxEVBY67g9zwMBbiHA4%2F%2BxA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e98854a41ad3d3cb82ee94a4231b8cea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623cd477dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2791,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2790)","md5":"daad07f8e6b8d794c4b2620055861d2b","sha1":"2efff03c37574c74e3cfb92420157f92ababe766","sha256":"05448bfdbcccd11e7357d2157860603de354e0230bcad63bc6a412eebe8adf9e","sha512":"abe7fb685cb2125f6c730a599ca30b09916d1d80b9c8af9fbbc044df2501a665cb405088b429d4190c92165b8d7d5f3e9c6f01dea304034360b168de8905f11f","ssdeep":"","tlshash":"a7517418fb85d03596f463f194d298c1862b6b01a5cbe8e9e2470d04273eba0b1eec23","first_seen":"2025-09-04T08:54:20.5202Z","last_seen":"2026-03-07T13:25:36.594017Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/JZCjnbBqBsDBreQACu.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/JZCjnbBqBsDBreQACu.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FGfo%2Bd359b%2FXpft1vmNcTPkAOkuA0sdTk1G9Z6LYuLVRXqLEm8xpwcbRFKfzsPSzlDQYsxY%2Fgh5vWTcdvudHWwNx1E4btoLmOa9RC848Ck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9f054937d2257ff060a3f5ac25b2ef46\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623fd587dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":717,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (716)","md5":"2b9dd3b2974a0d9b2a04f5de6af75e9c","sha1":"e5307bf5e522804691609c131f304de38bcf2610","sha256":"2562f0490a5208c596d86d76aafd394cc6fa3f3e7091de41c617c6d4dbb71b15","sha512":"afa064c45a601825a3fb1bc6d8f6f880149ea4285a944f63b1a046f2ab03ca1fcb53e1ca4412ec63e26f9622d6c29bcd2b643907f2b0c62fe41a141f914a3740","ssdeep":"","tlshash":"580128437574b2a0e3785c52d015568226f6475a3a42c4f0b90c5f426e3fe6354fdf55","first_seen":"2025-09-04T08:54:20.547538Z","last_seen":"2026-03-07T13:25:36.502396Z","times_seen":4,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/upload/img/69aa8d58cb3f.webp","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /upload/img/69aa8d58cb3f.webp HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17176\r\nlast-modified: Fri, 06 Mar 2026 08:16:24 GMT\r\netag: \"69aa8d58-4318\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rj8Lym6er%2BYrskb5PmuD8sJG4rjVwJC0uCIuNapVF%2FMmBBe9dMNq%2BJe3875OYvXEimpnmYuGle%2Bx9ype83an3gRMn3IjLwXs10L9wxPL3Mp8Z0Nk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d89b6247b6dbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"98a24e7c7305af0176691255a4154178","sha1":"7e0b159c61c27b50340f3ba06df6bc58872e2f21","sha256":"38d47160e16cab327ab6d62fc226d673fecc09db84182f5d8ecdec8a9b66453a","sha512":"47cd0b094d2c7c8df74f7702dc789984d128885ed75cc9b48b4a08c23fb2afe4c410ab555246468c1add23301201db0cff700b97d83ea281cecb80f1a402fc0f","ssdeep":"192:lk3MJ6ptdUDXKZmbunht+Q/XNrDcUHKJP5v88/pW6Hn9y9ZM7zpAd5SrN3xMXVaL:lPJo+aFxFrG5r/LdygvaV9xprZTd41Wy","tlshash":"dd72e0b1fe1d057e0f6f898f400f338b5b4183caa88779c9b6531c5a25066134a92af7","first_seen":"2026-03-07T12:48:29.261254Z","last_seen":"2026-03-07T13:25:36.582025Z","times_seen":2,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/294.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/294.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 420\r\nlast-modified: Tue, 25 Jan 2022 23:25:51 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 08:22:22 GMT\r\netag: \"015c7115ee3c8e6093e4e4544df3f9b4\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: jRNIVyifkPLr73AAdABP0gfarXQD2j5N36i2n4atGDi79e-gZgAPJw==\r\nage: 27085\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"015c7115ee3c8e6093e4e4544df3f9b4","sha1":"f551174f0b60806fb45f297bc62213dae8c4e2da","sha256":"67eadd6bf613e6b6a870c43efedc69765ac8608092f0636592f1ecc6ab0e66a7","sha512":"b18fc279e4de1df2e327c6b1525579c506dec015549d9cd7ddf83187251f2927063f1004e45cb43370a3d937b5f3c5f89dc137c443579c5a1652685ef00184bd","ssdeep":"","tlshash":"e7e0c05abaf330b5cde920a64c89fd63803ce72b63151e150a94ecf4560b7d48e9cd17","first_seen":"2024-05-25T12:31:04Z","last_seen":"2026-06-04T11:53:58.811153Z","times_seen":205,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":71,"dns":27,"connect":3,"send":0,"wait":10,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/Gwk2yi9gRyBBsFa_A8.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/Gwk2yi9gRyBBsFa_A8.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhxW7KkpI2nVyDXBrGvo4oCxShpT6HefKw656JC1WxstOiS53dYIRG6pEr0DxQzfnNLgQ1QDJvgPGhmYsIDS1CkzpF16EFv9IvLF3e%2F%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0e1143b0929f7b5a44b8d139cb627739\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eccb37dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1941,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1940)","md5":"fbaff07f77aaf4ee408995dca1a6c7db","sha1":"eaa4aee1bbe91be3b45ff47d9f10615d01963ba4","sha256":"cdf26c5f8167936ed11704e8e65122a35966a20eaa10cd18ff5fc12c70974484","sha512":"28e66d9a1411bf5500c6f2ad56a9b32e60726c1e14f516ef4a084b2f72db45c7d86264f4941094584dfd4c855ff96e80e73c5c493aeb2a150f29b71637bad1ee","ssdeep":"","tlshash":"a5415588f66651358f777ce062a4308d4b1a07e0ebd624ee201d1f408b1bd027afd92e","first_seen":"2025-09-04T08:54:20.501682Z","last_seen":"2026-03-07T13:25:36.581257Z","times_seen":4,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/upload/files/69683b3dcda4.mp4","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /upload/files/69683b3dcda4.mp4 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://binance-usdt.org/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 20796266\r\nlast-modified: Thu, 15 Jan 2026 00:56:29 GMT\r\netag: \"69683b3d-13d536a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-range: bytes 0-20796265/20796266\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3yvt2fZ%2FG%2BO52qjdlW9YNF470NnuMFlVskHzQyrOoQBodg8jPUfawjP6NkWNSa7xxIWtg1yCDDtsKYU2g9oScCRw6I7q%2Byrg9i0NuE1Yyq9DJlqp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d89b62a8c29be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"5f189dabfb472c4696d37461418bdc2e","sha1":"203bdaec7e96fa29e04b9ec4f376273c59a8d2fb","sha256":"cce9ae0498053d9a0d661888e71f647c43c96bb489e814dfecda97b9511a00c4","sha512":"f686bf18b176a98f18d9ec7b383afed0cc380453153ef65481346deaa3c87c187bbfce2def53fbe7de6cc941daf1f6edcf3c80218adcf775ec1fb14c7672d84a","ssdeep":"768:EI7CE0vCYf1pj2Gi38wE2bibqAAzaoI8dHXiH4AkQ4E0:EI7VgCgYBlcoI8dSY2m","tlshash":"4ce2be739f269687160aaa18d098417f777a12e54fcf963d0c097d737a212d3663fc48","first_seen":"2026-03-07T12:48:29.268207Z","last_seen":"2026-03-07T12:48:29.268207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/n2gAMH5rIvD-ECb4SB.css","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/n2gAMH5rIvD-ECb4SB.css HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tphKu2sV6BJfc0N67eH9Wvr7GKhg9GY8JE3kBNyZnnaZa6L6k7vtJGaDH0hUQO1RYKZl8deMftlB78VchIkvI%2BLIoAfMbr4R8WKGiR1C3VM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7a2a437537b3afdd9ca560003ba553eb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61e6c9a7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6ad82a5f48465d9e5de0e84bd5f50d7c","sha1":"9c24e97b567146159614d9e16dfb68a1a3381595","sha256":"22525203f59285ea97b21dd7612463b3697f5ad782a756acf991fca8073a8a45","sha512":"ced62d3cac70b38203882f9ac47b97c0f4a8d900ac4374847fe0bf9e5b580cd5ec0ca4e796f627d25e1e51806258eb21a4b7429ab9e1b8c6e026314a0203945e","ssdeep":"","tlshash":"56d02b5a8c5851dcc77ef214963401dc01243213d5730c3ac57c7b167cc6b601526bd4","first_seen":"2025-04-17T13:49:08.656528Z","last_seen":"2026-06-06T23:51:55.910108Z","times_seen":95,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/zO1bOEg7NNSUQV_s9k.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/zO1bOEg7NNSUQV_s9k.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B738unCPqErqOu9OzMWOqOe3NmY5RqQWtT39KshZawnMIEUAUWLea5HZPX5vwgqrSrG7NPk%2FWvJ80NiCRPjXL%2FyMAtvE%2FvYWtDxNZ3HA1rk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7a55d574edcff1affbb3886a06f7da97\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61edcb67dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"ff3969455e45838d076a206cbfb6ce0b","sha1":"f5554360dc29c164488e6eb625a598e7dd60fcde","sha256":"96a6178ec85c4be0f67fcee07ac6e933ee298d60143152a1c772dd9bb49e236b","sha512":"da1aa567bbc2e3a17042667bbfc4f5566636163190a1f9752e0465ee566340b65aa99c5f3ec740615a16788f8c87eee93297c838c26a86181dd69ff01bac452b","ssdeep":"","tlshash":"a5d05b09859867b929f6106b07466bb021b7125d8f64c2b9515d0e34cf1a3065e4be32","first_seen":"2025-09-04T08:54:20.461539Z","last_seen":"2026-03-07T13:25:36.520221Z","times_seen":4,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/89.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/89.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 520\r\nlast-modified: Thu, 20 May 2021 15:13:16 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 01:56:09 GMT\r\netag: \"f1d378e8b7235653a310ca27c515fda5\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: jK5eP_VZ6ZeZw3cvFHuA0sZldN2vCz9RQbAyL6qFWOD4SxDE0yzIcg==\r\nage: 39141\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"f1d378e8b7235653a310ca27c515fda5","sha1":"3c3454f5a2c30aee34cf78273162487fcad6754f","sha256":"6b7215f7d0890a0db68f595d5e72e955bb7cce88469c760a567acf0668dcb295","sha512":"8362007edbc30d0ba9abd05f0b47c6b55bdf8fafeb183c19ee5644573c0b8d8f0478a132897b7e65cdbe187f5a639ac2560666100b13eea3666ee7b08cc38e2f","ssdeep":"","tlshash":"68f029cf57b8aca6aa1ee839ad202ef43d05af18c00242ea8918c060420042a42b2edc","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-06-06T16:45:30.811099Z","times_seen":118,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":61,"dns":33,"connect":3,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/chat/msg-user/create-user?plugin_sign=5c1338b6145e3086e9353fe4f5ea73d3\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887675760\u0026_lt=\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 05:43:55 GMT","end":"Sat, 25 Apr 2026 06:43:54 GMT"},"fingerprint":{"sha1":"44:40:E1:9A:7C:64:DE:34:F7:E6:51:6C:3C:31:B6:14:29:EC:FD:A6","sha256":"F4:00:39:41:3A:82:85:F6:38:64:D7:10:F7:5E:34:C0:8D:14:A7:7F:1D:3A:C4:48:5B:41:B1:1A:27:52:BB:E8"}}},"request":{"raw":"POST /chat/msg-user/create-user?plugin_sign=5c1338b6145e3086e9353fe4f5ea73d3\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887675760\u0026_lt=\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582 HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 375\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nCookie: ss_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":375,"data":"source_url=https%3A%2F%2Fbinance-usdt.org%2F%23%2F\u0026language=en-US\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026user_id=09b3cd652a16158be642afd019ec8e41\u0026data=eyJwaG9uZSI6IiIsImVtYWlsIjoiIiwiZGVzY3JpcHRpb24iOiIifQ%3D%3D\u0026is_sandbox=0\u0026before_source_url=\u0026label_names=\u0026custom_fields_ext=\u0026update_label_type=update"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: 9d89b626bf404e4c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://binance-usdt.org\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: b4d88796-904a-4eda-9fed-9af3d1936365\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"064b7a1959571040646305fc7851e809","sha1":"b0c4eafe4d815665b50109254a7ec5b88d5c84fd","sha256":"8dfe7d317457d8baad82575c378f32ffa8cb3cbb066e1e3f5319e9e4f159e237","sha512":"80b4a83de402520a3e8dc9bee0c0fe01b9a83890ebf5e81f50f592b8574c8a118ab327d6455a14e134024c83a871c25cb065de0190845b0a6db2bd644466c359","ssdeep":"","tlshash":"71c02b62d44e93b61d93b48f0018210222bc14148e41bb2eccfc43b50e9c1eaf3e3111","first_seen":"2026-03-07T12:48:29.270266Z","last_seen":"2026-03-07T12:48:29.270266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/2.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/2.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2456\r\nage: 39140\r\nlast-modified: Tue, 19 Oct 2021 05:33:54 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 01:55:54 GMT\r\ncache-control: max-age=86400\r\netag: \"bdaeb947a2eb31bae0a170559df9013c\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: FP7NFbIqSatRxoFtFLw5ZOZzRGnLK5-4TcueisHl0Ijp7eD_WgTOQQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-07T07:20:53.846445Z","times_seen":18323,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/swiper.eLl8_PPS.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:52.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/swiper.eLl8_PPS.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:52 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mnRHaK4iCxax8aqtpIFbk3jWZlMLqEuFdberl9%2FEnoghooQw8yEDSaRRDNu0Waey6lJ22KHkQvmDGzxtw6vaA3VSXAAiJAapmb1POgH%2F%2Bpg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8ff13059e614b2af1b1579b1e6c57d11\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b60e5b147dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167463,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"e8f8c6e5da252bd2acc140e8271b7726","sha1":"66a225828b4d579097268b07d572437f1a27b1f5","sha256":"e48d4167abfd1772f8ce04b292c763afb0321ff17079dbc93e6ab9d7c5ee7e02","sha512":"75c9b9584d035b84fbeb1ec4c3f5ceee26b0171b23f3fe7e038ad46a572ff64e0fe2d3e450552f136a6e2b052fc85af5307e4b7984c96e0733c1a02027cd5dd8","ssdeep":"3072:sGvDusNtFqrZirVK0v0EumyP7EhOh0DvP/r02M0bd5:sA6ItFqrZiU0imyPYhOh0DvP/r02Td5","tlshash":"a6f34a997250b13252eb19e742768111b37909497809d4e8b1ad9ceb2d3f84812ffffe","first_seen":"2025-09-04T08:54:20.541637Z","last_seen":"2026-03-07T13:25:36.574125Z","times_seen":6,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/VN4VW5itfFSZu8rvuy.css","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/VN4VW5itfFSZu8rvuy.css HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmFd4Nq1i7%2BSEy5cZbdF8KXXiX4s2%2FMYudYqGFPWRf1cZS%2FtzkuByGWIbZAfqJX%2BkkfJtINzdWHVJjGa%2FiprIEMa4mT%2Fbvso32KekoMeM0U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a86a53844df09ef27d05c74d83b034f0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61e6c9c7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":490491,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ff6eac4151e384f0fb7c2f9fdc6b5b41","sha1":"32f15477bf2dea4d0e45031d134c9bf6125635e9","sha256":"9ade11017348d7fd62321b5d9525df1231e3493763ce9d2bc4261bae308ac7c6","sha512":"a6cb6372212e368ea0155297c2074acb85c45ee97d1543b07c724f643b2ceaa50953f6f28f7f7cef277b7ac94fa8470d4ee70c7322b01ecf58b71643b071f585","ssdeep":"3072:Sb+bwPtwgBdlIY8VHcaKVLu2XiNitFSyJPw5oCNqPHUjsGAgeWgQ4Kbwbq6OlvWq:hcZItHcj3LVrwAguKwerie","tlshash":"dca43a7c39682a3bb877c525312c2bdc5c26b603e9228a9cea593434cddf6f3152f549","first_seen":"2025-09-04T08:54:20.533993Z","last_seen":"2026-03-07T13:25:36.59738Z","times_seen":4,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/2VTS3rkdJCDpkXQ5T4.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/2VTS3rkdJCDpkXQ5T4.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6eOVDf725i9LWfcsjG4dYWabnuL9tLC4rcxKzHNuSZQ%2BXV3GTiVPAUvRpwxgnCE0aiPRzaus2uRs29yAWxIyNcL%2BJuwsnD5tvpa%2Ft25D2ZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e2531bec3d103458a65f69ecd81063e8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eecbf7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (861)","md5":"034f4936f38bae5b6018a4f3c1f781e8","sha1":"f9877a68e26de4e559af549d54f13b5443440d41","sha256":"062cccbade0e74690ba8f700ae9fe24908319fd85afe84dbd046b45eb6c3bb49","sha512":"5f49d38fb539446b55bf47c0b88860bd24e7131b84d3efee8415f8924582bbc29ecd4acaad509ff4ffa2c70ff94af8f6ce94cffee08c08795e75f8b3d7f2b18b","ssdeep":"","tlshash":"6a1108eb3781c16c0b3d98f8b22bbfa8d393834daee6dcd1845685500724c76802a862","first_seen":"2025-09-04T08:54:20.51445Z","last_seen":"2026-03-07T13:25:36.524384Z","times_seen":4,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/Yz3QkDyttwDM7p_PZI.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/Yz3QkDyttwDM7p_PZI.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BXF064LWCmYNI0HUYLU60rWbvAYAMxKfUMGMcw7bOMqoihroXLWhsoA16Nuh6veqEbrTRtuVj58ox1%2BQhwFIcy8xkK2QJ6CsCUId9qdFFI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b1c4be61704192216f6e571a9197ac3c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623ed537dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4102)","md5":"4b80488f12c0243f3e45234085ded996","sha1":"1338a83ba31aa2011154d3d1ebe0094138605ba7","sha256":"973e51f979eac7a591ce087d152271d955dc2d11d27ab9ea8bfa059429a0ff43","sha512":"9975417d5cd099b62b3d55def4814e626c2047fd52e35b66e7f0445c2b8ca93ee27b7f987ced7d40150b4866adf1e48e8320e523d658b1961bcbd00de60dd7f0","ssdeep":"96:IafdRuMfPzqfcSFuxEV16+4O0/q6Eyehq6i8Ht6JzdY86pd:XfdR7Pz4cSICVq/XOzKmP","tlshash":"5681f088780789bc88ed4624ac1764c065cf2bedd02449a1b1fedd1626d69e0cb96bf8","first_seen":"2025-09-04T08:54:20.517061Z","last_seen":"2026-03-07T13:25:36.547106Z","times_seen":4,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/y7R3FZ8ObQxX5-dKDf.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/y7R3FZ8ObQxX5-dKDf.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BP3RrpPxPzw%2FZRJPIqeqGyje4MTUvLA4wl%2BN8ZjZd2jWI4KBRdTDcPoD1w3NiAP8tMM4YJXmMDLeO1IQ4ylXVPKTGyEbUKN8YoMHqEGa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fca2e3962e1cdc65fa7f9e0e2138fa68\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623ed567dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"0a22fba42cd98a28c4eb3b1ae12aab4c","sha1":"9b98f7af24d8b9d52d52ce66495699aee9472826","sha256":"89119bb67b096c79a75606c9124f83824d8d19b7a227a896c97198a016e04ce6","sha512":"547d5c03c487837c4608de8cc794dda148962cc3cc2bf096c9c8121f4529c1aa5fa27015bfdf9bbf40dffdec93efb24b4f2f39739094a772722ba98115549f47","ssdeep":"","tlshash":"a1c08c1d784560f186590ce8d1220a6b5267fe44336a96f0a5298a1b432a2661206e66","first_seen":"2025-09-04T08:54:20.53248Z","last_seen":"2026-03-07T13:25:36.564509Z","times_seen":4,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=63587626fc27ebd867cd41200d1792cf\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887676160\u0026_lt=\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 11:26:24 GMT","end":"Thu, 16 Apr 2026 12:26:22 GMT"},"fingerprint":{"sha1":"54:5C:60:E0:01:FF:74:D3:4F:29:AE:80:35:AE:CF:1A:7F:3C:FA:A9","sha256":"AB:32:8E:4E:39:30:DF:C2:53:A9:C9:73:29:0C:08:52:88:14:B9:FB:90:B2:75:3C:79:35:B9:60:72:3B:0A:70"}}},"request":{"raw":"POST /client/station/log?plugin_sign=63587626fc27ebd867cd41200d1792cf\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887676160\u0026_lt=\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 411\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nCookie: ss_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":411,"data":"data=0qHafQ8hMhHKtTc8f5KWB9HEPQu%2Fs9DwtNIvtdmWfQfWyqFhBdHvP9a%2B1nkhMhHh1nm%2BPQIVBNX5rTo%2FPSHGyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2FldypyGHVrhyiyhypyQj%2BPQfhMhHVPhaXDqypyGYptntEPVzErdyiyQsjMnIAM2vhBdH%2BsScEP9khMhH8sntVXQVVtqypyGcW19X%2FyAKhyh8htnVvyAKhMeRkr2l5l5v8InoaM2OkIQHVM2O4rAR5r2YQl2XQs2vhbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b6283c5d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1a5bafddb1b780e469ed45563f5e871e","sha1":"64699528e3e3606250ac0b3305f48f8e978660f2","sha256":"c1041e9ac008f4b7672e9583ed2ac04cf69cd071057108e00c00ba9d91e57448","sha512":"89e721c0e39cabeb905e2f22eb037202548359a375840d7627abb588f099694bf93b35f8a62cadd55ae1813597cb4eab6a651e1c3ac48404b79a8a33f8bb1a8f","ssdeep":"","tlshash":"f8b01251242833c30d11101e9011360852a47180ca104710c8784e0002480b42206191","first_seen":"2026-03-07T12:48:29.242761Z","last_seen":"2026-03-07T12:48:29.242761Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=dbf644ebe31b44219fbf19de5ec417a6\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887676549\u0026_lt=af04994b276730a73c76ed16408a18e9\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 11:26:24 GMT","end":"Thu, 16 Apr 2026 12:26:22 GMT"},"fingerprint":{"sha1":"54:5C:60:E0:01:FF:74:D3:4F:29:AE:80:35:AE:CF:1A:7F:3C:FA:A9","sha256":"AB:32:8E:4E:39:30:DF:C2:53:A9:C9:73:29:0C:08:52:88:14:B9:FB:90:B2:75:3C:79:35:B9:60:72:3B:0A:70"}}},"request":{"raw":"POST /client/log/log?plugin_sign=dbf644ebe31b44219fbf19de5ec417a6\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887676549\u0026_lt=af04994b276730a73c76ed16408a18e9\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 861\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nCookie: ss_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":861,"data":"log_type=CHAT_MSG\u0026data=0qH8PTXG1nmb1nohMhHQl2VAs5vmyh8htTV8rCyiyQV%2F1Ncb1nmvrN%2BvsVzVfGHWfhypyGcW19X%2FyAKhsns8IevmI3yqI5sSl5Y%2BI5IAI5rVreO9Ie6ks2Okr2vhBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCkqMCk9BAYbl2fSlelaI5oml2f4lCypyQj%2BPQtasntVyAKhrnkwXXlhBdHafQ8hMhHKtTc8f5KWB9HEPQu%2Fs9DwtNIvtdmWfQfWyqFhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8ydypyGX5rNHb1nohMhy9MetVIQoqs5Hhr2cVl5smsQcArnXVl9u%2BM2R9rnuVsCypyQjWrazvsNc%2ByAEgyQchXQXqf9VWPhyilC8hrN%2BEfScEPQtnrNH51nz%2FyAKhyh8hrNHqPSyhMhHgNdHwrNI5sntVNdyiNdHYy3aat3u41nz%2Fy3z8rNH%2Bt3VWPhYSsNlRsNc4rna8t3Xvy3z%2Fy3ORr3u4snH%2Bf9DRt3%2B%2BtdYv1noRPQz4y3upP3zSy3aat3u41nz%2FfqmfyG4hBdH5t3zqrDm%2BPnX5yAEP0qH%2FsnaVyAKhf9uprNIwsNH4PTVbfuzQl2VAs5vmN9jEfSohBdHZrNVosNcKyAKh1nohbXazbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b62ab8025a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-06-07T05:53:03.797303Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/Oiw60Q12YfC5yxZXX6.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/Oiw60Q12YfC5yxZXX6.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c31RPWeYnps%2FRxv1IBRpR87UF0d65Cj4CoKq35zPaQh3Moa11GT8CEJJpVs%2Fp5qR9pfvhw4rgBKYBRayw4Mbw8bn4%2BVniHKTbnDH16Sshyk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"76a2dc6c7b91076e4a0bce0241a582d6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623fd577dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":746,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"e1975b3cb359841195e8da35eead5aa4","sha1":"1f59338410f141dd5229aaf282eeafe01cc0abd7","sha256":"7f567c7068112a03bfea9f9e08e292c34220556136c86e3f813058471068a001","sha512":"613907542d41fc80c531f79feee955b439905da753013624f54dc75a875fff74cc1a9c700d37a881ffbc2851774d1742be9f6cf03aba74075fb008f7359ea858","ssdeep":"","tlshash":"b10189647eccf6e2d16f046855e26349db3063ac58c000166e6783700fadbf3c46bb00","first_seen":"2025-09-04T08:54:20.480085Z","last_seen":"2026-03-07T13:25:36.55455Z","times_seen":4,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ip.ddnspod.com/timestamp","fqdn":"ip.ddnspod.com","domain":"ddnspod.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:53.341Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /timestamp HTTP/1.1\r\nHost: ip.ddnspod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":222,"connect":1,"send":0,"wait":0,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/eXbqw4YyAWCH4RhJbn.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/eXbqw4YyAWCH4RhJbn.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPwCj5ZBpURv5IaHfuEUyKUdQ6v55gceP2iYJA3f4uZL18DLDnfn0IlBNbzAhq57oJ8Fu2l2PMlVfWQ0oo9%2FMkN45hVrnXRk89fGymlb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"baab2491a98060eb90daeadb30239b36\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623fd597dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (706)","md5":"4dda62432449705b6e0882b8adc6a100","sha1":"cec4a61c756f4a67f5a4ac90270052e17ff1675b","sha256":"671d68c40183f5c9efd91cf1ec7219c66e20d74d995feb0bdb4e9f0929e5cad4","sha512":"e6bb8556a43a976ad8299c63d14f8419d018b485d5b56d2062873d3509070513095ee84a78740167855890d5ecb52c94967885f8f28a3c138d0180f169b51f98","ssdeep":"","tlshash":"1d01446fbd5dddb5759244f455c31859321a8f2cbb3a84c0e1b11a3015d2850f027748","first_seen":"2025-09-04T08:54:20.548543Z","last_seen":"2026-03-07T13:25:36.549926Z","times_seen":4,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/news?rts=1772887675614","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /api/news?rts=1772887675614 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nst-lang: en\r\nst-ctime: 1772887674576\r\nst-ttgn: c79738eeee59ff105c8d8774bf79bd21\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V2%2FVqOJsVUdf4uCDQJtLCrYLLJWq3XP7pdR%2FS9kLd9EuKim714FrPKX7vr1MLRL4ZjaYUSxMXCDNz4KMmvenYiTClpAIQyvSiY10l7j7VdY5Dw8i\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d89b6268bbbbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"975803d82c2c42022732c6a6fc067b07","sha1":"b40fcc4f39eaff8caf21c2a101f0521d2c5383b1","sha256":"659c324cad111582af08b21893749c40d58bfa5babbb8749dd006102f5785d46","sha512":"7829512a980db2741b763041e0701690952218e2ca172217cdf2aa9c75204e404c578fb37a87a3880563aabd022886e367279318e49a6c882c4765a5211fb806","ssdeep":"","tlshash":"87b012d4441d8e07c45db6dd617030d4d1149cd9c8403d1e1846d044027e0474360030","first_seen":"2026-03-07T12:48:29.272617Z","last_seen":"2026-03-07T12:48:29.272617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/74.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/74.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4251\r\nage: 38427\r\nlast-modified: Tue, 19 Oct 2021 05:36:06 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 02:07:32 GMT\r\ncache-control: max-age=86400\r\netag: \"ae64499c8825452f6262177ee6dd525b\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Gas_sdm2_nruwnpqvxVdFjEd8uhUYeD_H55hh85t9OaTJVDqqjv4Tw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ae64499c8825452f6262177ee6dd525b","sha1":"92a35e0817cefb5befbb18422fb4c9d220f6754c","sha256":"47fb417f6b72c4edc08dfb90a376b2c88b3b51992bf3c83dd14e011edba2f339","sha512":"1a776374f3c20d16bf0c84dbb28a6ca3d0a110ca928aa87f56d79d09b898091b84f4d3ea164a6c79db0c9fedeb66167bd83b854267c2870394f70dc536117441","ssdeep":"96:IqQDUBKTuBVrN2Dc4tR/HAwaHEIkVZdBrc2nPatF:IL4cTIB8c4n/HbIegdF","tlshash":"00918ede37594349986e152b32ca7f282c32b7db00753e35ad4946c327b4063e5d6714","first_seen":"2023-05-04T14:40:12Z","last_seen":"2026-06-07T07:20:53.732229Z","times_seen":13693,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=af04994b276730a73c76ed16408a18e9\u0026chat_user_id=687e6d2c2be4e369bdceee3aa986eaea\u0026direction_type=1\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887676511\u0026_lt=af04994b276730a73c76ed16408a18e9\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 03:37:55 GMT","end":"Tue, 21 Apr 2026 04:37:52 GMT"},"fingerprint":{"sha1":"57:4B:24:A1:1A:1A:75:7D:DC:F3:2B:85:E7:4F:DC:59:C0:C0:0D:94","sha256":"84:AF:36:E1:EE:AD:88:CE:42:68:8F:E8:65:A6:07:34:D1:28:BC:9B:49:15:48:D2:2C:CD:C9:E6:81:30:BE:B0"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=af04994b276730a73c76ed16408a18e9\u0026chat_user_id=687e6d2c2be4e369bdceee3aa986eaea\u0026direction_type=1\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1772887676511\u0026_lt=af04994b276730a73c76ed16408a18e9\u0026_u=888e333905d59186be914f83e0f15fa9\u0026_xma_=51582 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nexternal-sign: e360c56797260bdd77bfa380ee6d6a07\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://binance-usdt.org/\r\nCookie: ss_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:56 GMT\r\ncontent-type: application/json\r\ncf-ray: 9d89b62aeb1a4e4c-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://binance-usdt.org\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: d2e55399-6a12-42d2-b281-23898f4da86a\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"48016efe262190df0ad5b1d7340a60c4","sha1":"1cd9c973630bf59e2c479cada9105bbfad39dec3","sha256":"6e59b9f826a2a9b503fb05fd33448a0583d30552aed790dfea6cb19e74bb409c","sha512":"274e846e9ad5c7fdbff3fb665809347f229260b2b2eb491f386a5d1084a7fd7526a4e0eb331c71c4eeb14a98143925c29e2702869c11883176eb14ffbba9993b","ssdeep":"","tlshash":"4ca002562c2c1e4b0f0fe489780d1b17d6e911445a252712cdcc915c870da5eb5c7521","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-06-07T05:53:03.799411Z","times_seen":1697,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/70.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/70.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 526\r\nlast-modified: Wed, 15 Oct 2025 12:11:08 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 05:53:40 GMT\r\ncache-control: public, max-age=86400\r\netag: \"75f8e5881ffe062da2aa68ece0074dda\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: yPUX_7RS00PQgKvD-Wl4aelUVEd3lD6DzoxCOfVFnzwXZ9AWsmflfA==\r\nage: 28193\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"75f8e5881ffe062da2aa68ece0074dda","sha1":"ead3b7157194368b5d4afa175e1875af6c67add6","sha256":"9e3dbe43cf502a93590fd1b829e874f3d6e26bf37ea689853ec66e9d6a38ea26","sha512":"6c421d3cf2305e838b8f38f94d491ad78fb7eabe151bb016efeebaed6b5722d1982524424e1c527b860448d0cd99432d9e9b7cfbc9aad971cfca55f597bcca3f","ssdeep":"","tlshash":"dbf0c0c683896cf4ca34b9e66ce2d493e1b28627a114522110178d2c22dd3d0564e94b","first_seen":"2025-10-29T01:37:08.832161Z","last_seen":"2026-06-04T11:53:58.806725Z","times_seen":37,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":74,"dns":29,"connect":3,"send":0,"wait":7,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/chunk-common.c89c8366.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-common.c89c8366.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 06 Feb 2026 07:06:43 GMT\r\nx-oss-server-time: 20\r\ncontent-encoding: gzip\r\nx-oss-request-id: 698593030189C73333BBBA57\r\nlast-modified: Fri, 06 Feb 2026 05:58:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13098974095763120917\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: nV/JYYHW5G0Bnwm00ndSUg==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee6fa75e712f6cdc2fa03f92f2cfbde0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: sLZWci0mmSbWB3u43ZKIVq9lmYrgGx6dfBZor88N4di8UDkvGm358g==\r\nage: 2526071\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26864), with no line terminators","md5":"9d5fc96181d6e46d019f09b4d2775252","sha1":"29727e3f3b0e59145e0f1ff25eeb28576a7bee6f","sha256":"05504a45064a116015be9b0eb83817af7c1b1042aae80c871726036ca0035436","sha512":"3a7a1401983a0b00d25c2baf14e98b2a6a4e0eeb9288b38108a9b2c7b3e2c1587fb3e00677f7b73bbed0954e8c63325ef8ade3b1c0ecb91ab44e7050668e3727","ssdeep":"384:kF9kWEuK2U72UecAvTbDPnPuTc2YejErqSqcDRVE1eDTaR5HJrCiKMcJHI7jW:q9mZ72UecAvrPuSqSpEPIMoyW","tlshash":"dbc222ccf2d7f0650b9a38a481bf110ae23e7d99b44e9196d261e0c17c3454da273f9b","first_seen":"2026-02-18T21:57:56.580919Z","last_seen":"2026-04-15T20:10:01.085959Z","times_seen":330,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/LQIglDmTnE9RKFU9Wo.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/LQIglDmTnE9RKFU9Wo.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYi3GAw9Eyj0%2F%2F2yk%2BS8MEUWSYkEcocmUiNRUXHZBerCNp67a0rEo0Uf7AdJlPQuVpRmjl9kstZMLSfWMF80heQWchpsm94IO60duZQ%2FTLE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ba1a17b0cb97afd90bc49cd8d1d50db3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eaca87dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (542)","md5":"508c2a054ef5401ee27ea21e05ba66e0","sha1":"3f925e6aa4ca411e8c72f84257575398a19104cd","sha256":"f51bdcb2cf6092f5e821a828542e7228f3a3d323866d98f835c87a3eef59eee6","sha512":"e179cf761be30db8950ff6c694f64e6a77da4e6a64656af01bdb874f281c5fc5eb5c569059ac1571ad8d66ecd0fbac0cb40bb5e702542967ac3d1fe24be16e61","ssdeep":"","tlshash":"61f0200fd801d6fd64b71c48395330512184afacc72098c4e6e52170e783875b06ef14","first_seen":"2025-09-04T08:54:20.551904Z","last_seen":"2026-03-07T13:25:36.48904Z","times_seen":5,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/JZCjnbBqBsDBreQACu.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/JZCjnbBqBsDBreQACu.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FGfo%2Bd359b%2FXpft1vmNcTPkAOkuA0sdTk1G9Z6LYuLVRXqLEm8xpwcbRFKfzsPSzlDQYsxY%2Fgh5vWTcdvudHWwNx1E4btoLmOa9RC848Ck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9f054937d2257ff060a3f5ac25b2ef46\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61ebcb07dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":717,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (716)","md5":"2b9dd3b2974a0d9b2a04f5de6af75e9c","sha1":"e5307bf5e522804691609c131f304de38bcf2610","sha256":"2562f0490a5208c596d86d76aafd394cc6fa3f3e7091de41c617c6d4dbb71b15","sha512":"afa064c45a601825a3fb1bc6d8f6f880149ea4285a944f63b1a046f2ab03ca1fcb53e1ca4412ec63e26f9622d6c29bcd2b643907f2b0c62fe41a141f914a3740","ssdeep":"","tlshash":"580128437574b2a0e3785c52d015568226f6475a3a42c4f0b90c5f426e3fe6354fdf55","first_seen":"2025-09-04T08:54:20.547538Z","last_seen":"2026-03-07T13:25:36.502396Z","times_seen":4,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/aLo8GSggTsDGeW5QJW.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/aLo8GSggTsDGeW5QJW.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wq0N5xgsQX4cAE6rjCUrio%2FzvYKg5sjbJ2%2BPRbT2VIKF5JtfYY5mIg1v7HWMNxYz84eZ74f%2Biplg04qEOAUvIsqOuqpoetC28jSrselFqNQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ed7ae534c9983c8afcc80a982605ba48\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61edcba7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1245)","md5":"afe9d833f070134c59337104ecb279f5","sha1":"97a04e022be252dd94774d9d97fa3d5180f291ea","sha256":"96345bc02de21a6c590cb15fdf8c57d687d3ab638251a68e65c845c097902462","sha512":"d5eb99130399e92c9a0592f7a6484eef47d37cd6b3f8c3e1ee787359ee3dcbd6da1eb19b4af15dcf6c3d69bf1e4911724a48c70fedca13c429a2d43d952381eb","ssdeep":"","tlshash":"0e212491b08cf17d42ff39b5f86b1016c35157e0236045cd6bbb058e4b269d1967ba1f","first_seen":"2025-09-04T08:54:20.53585Z","last_seen":"2026-03-07T13:25:36.497947Z","times_seen":4,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/MnvIXyVG7ECZzeMOD5.png","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/MnvIXyVG7ECZzeMOD5.png HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/assets/y0Cjo9nVNhB0SrEjPM.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 492237\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"55ae4a4c7253997f3497336f85ca5d92\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5fuUHD9j5IommNFzNgPUMc5dweGqBCTQZrFbAB1phcavhYpK97r52O1ajVjowQWaARjyFnJkR8MQZtywUOHPs2ZB5tF17rkp5I8dGPWcOc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9d89b61f0cc97dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":492237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 1984, 8-bit colormap, non-interlaced","md5":"42725fe5273dcd4c3f84dd555e7e14a3","sha1":"8d810283e279759504b8d2452d6b1df14883bf81","sha256":"6b7f1e9802cff479529429e6ddfbafb4e53a66cdfe719841bae54c9cc0b3f1d7","sha512":"e3f7af4ee9de127ee85c57e49a964a00082e6bd1f8b3b26527f5727baf91445944f8cabad52e8bf626974a6f1fec6a85e5776de55705a887092a1b8b29575589","ssdeep":"12288:L+EbmbzFC1J9aycAzw/vOgDwamywPW87nRepaFGHANm:L1bmbzFQ4dcwXOHzPWuReUFQ3","tlshash":"2ba423fda6018e0d189af4f0bb80ad54506977d46e11c1afda94ea81cc390c6bbd4f9e","first_seen":"2025-03-06T09:19:26.974353Z","last_seen":"2026-03-13T19:58:57.048475Z","times_seen":14,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/hTk5dpiK0KaZ2SayRG.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/hTk5dpiK0KaZ2SayRG.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PHKrE7j26tgJbWgmIBUnudfNBgym6VeZVQnLGbFhlusXazfqdZSfWVKjkKFAc08QZRgXyuoNtKDKd2jLlaDcikePfNOYcW1sOdqJMA9f8A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a62464d8ce78710c6362a1d3ba4352cb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623dd4a7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (502)","md5":"cf925c27bc8bd77f6d3e06ebfdeb522e","sha1":"2c13f1326cf4ebc593bb162dc1246bdbf66ea6a7","sha256":"8bc73a3eded7ee1fd3e200146637cc8cc99719442c86f8e328bbbbb535342856","sha512":"d020d6bff0ea48a5a0da147c5323fb5d8ace64d4700c7dd17f0d7cc87ba960c78cab2cd051295be5f7af8b1f43d4d29e08be188a142b041b0442f0c91c06e822","ssdeep":"","tlshash":"f1f00ea5c0c8dc30022ffa8892287591031cceb8c32141d4ec8a6658f3dd8a5d66cf20","first_seen":"2025-09-04T08:54:20.522848Z","last_seen":"2026-03-07T13:25:36.58038Z","times_seen":4,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/2010.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/2010.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 854\r\nage: 44304\r\nlast-modified: Wed, 30 Jul 2025 12:26:03 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 07:44:40 GMT\r\ncache-control: public, max-age=86400\r\netag: \"8a5e9b87a7c053bb9d65cd8bcbc4b171\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: M6EzvNcA4zvK66nEJmGzPVoKyGv_KAcmbKmd6LZazKGqdNK4XVO-Qg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8a5e9b87a7c053bb9d65cd8bcbc4b171","sha1":"2168aa11330c0401cfc5e0974b7ca94093c9d48b","sha256":"0b1d6af59fc52f5e8f88909ae09fdd4ee303dbcd00004c210b8e375759893cb4","sha512":"47a77cb24f98b7862798354660849992762cf9b9df17cdd872793f36467addba4fa78b7751c167297120010aa62e36fcf2b27c5d46f1fdc2270ae62665872e86","ssdeep":"","tlshash":"af011a7a5f05106ffe733a7083576661d745826711081e4880b3907c36b9c405d4bd03","first_seen":"2025-08-01T01:41:04.546261Z","last_seen":"2026-06-07T07:20:53.799134Z","times_seen":368,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/chTAP4dexlCqVHK7WU.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/chTAP4dexlCqVHK7WU.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tl5YC9TSXmPvBwNWp8zkPwuNe6dTHqhsWo7mOscUuxCDLklagdewI8Hc%2F6Q41g7F0dMba51%2BN2UsFWWJyRIMAexjF05Fzv%2BJAdmGCZiF494%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fb03dd949080b35c766115b608c00ce9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61eecc37dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"22a6013ba21e9dcc09d8f7c6154d9d49","sha1":"4bfbc5b97d857da48bc73b1518d1798e85eac112","sha256":"ace5d935c70ceb968dc23a079ac87463e0165bf8fb246ad093c35a1d6dce78bc","sha512":"04c366c49e5b9f23bd98883e85c02c1e1a9e401d367119b60bfbe42d1eecdd21c5a09f90e63f68ad6327dac2a9a540c52c46e2d516c05e4a311403126e6927d3","ssdeep":"","tlshash":"a901758c48e6cbf9c09702543d8a20a1d091a74cab35c8a2f05cad22634fcf095ce338","first_seen":"2025-09-04T08:54:20.526718Z","last_seen":"2026-03-07T13:25:36.541327Z","times_seen":5,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/cus?rts=1772887674536","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /api/cus?rts=1772887674536 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nst-lang: en\r\nst-ctime: 1772887673576\r\nst-ttgn: 5f9cd912cdf31c89d8d43d4141e68528\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3fO3XuSik1OFl8kQpxBkD37k3HTy9VL5Q4lF7IhTpFu5ZoLlymWk23jQoB4E6y%2FO%2FjUM5%2Fohd6890VxRAQzjw96jDr4UHFjQHV8cYx9XhY4cc6w\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d89b61f4a9cbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"0814636cbdabf23ce93802b6269d8740","sha1":"84d6c816cd5d97735d74dc2fb7740a2b30ee0df2","sha256":"c9cc9ab2b6ea2390fc17a8923f5c2a10ad85f7e888b2497dcdfa8e887eda1dd2","sha512":"8aee16ea73f41587e50f2d11301464bfe8d73c30e14ee89ca03a2dd322b0eb15d2aaa4fb6d8c41e12bee93d62b35a737daa87187f85bc5c95a2a762019f07008","ssdeep":"","tlshash":"d3b012551d73c76886500914ffee62edc4945025c191394e44131d42cd051900001311","first_seen":"2026-03-07T12:48:29.278576Z","last_seen":"2026-03-07T12:48:29.278576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/Gwk2yi9gRyBBsFa_A8.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/Gwk2yi9gRyBBsFa_A8.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhxW7KkpI2nVyDXBrGvo4oCxShpT6HefKw656JC1WxstOiS53dYIRG6pEr0DxQzfnNLgQ1QDJvgPGhmYsIDS1CkzpF16EFv9IvLF3e%2F%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0e1143b0929f7b5a44b8d139cb627739\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623dd4b7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1941,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1940)","md5":"fbaff07f77aaf4ee408995dca1a6c7db","sha1":"eaa4aee1bbe91be3b45ff47d9f10615d01963ba4","sha256":"cdf26c5f8167936ed11704e8e65122a35966a20eaa10cd18ff5fc12c70974484","sha512":"28e66d9a1411bf5500c6f2ad56a9b32e60726c1e14f516ef4a084b2f72db45c7d86264f4941094584dfd4c855ff96e80e73c5c493aeb2a150f29b71637bad1ee","ssdeep":"","tlshash":"a5415588f66651358f777ce062a4308d4b1a07e0ebd624ee201d1f408b1bd027afd92e","first_seen":"2025-09-04T08:54:20.501682Z","last_seen":"2026-03-07T13:25:36.581257Z","times_seen":4,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/js/chTAP4dexlCqVHK7WU.js","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /js/chTAP4dexlCqVHK7WU.js HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/js/w7LNKNSb61CL-iCuXR.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ss_s_uid=888e333905d59186be914f83e0f15fa9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tl5YC9TSXmPvBwNWp8zkPwuNe6dTHqhsWo7mOscUuxCDLklagdewI8Hc%2F6Q41g7F0dMba51%2BN2UsFWWJyRIMAexjF05Fzv%2BJAdmGCZiF494%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fb03dd949080b35c766115b608c00ce9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b623ed547dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"22a6013ba21e9dcc09d8f7c6154d9d49","sha1":"4bfbc5b97d857da48bc73b1518d1798e85eac112","sha256":"ace5d935c70ceb968dc23a079ac87463e0165bf8fb246ad093c35a1d6dce78bc","sha512":"04c366c49e5b9f23bd98883e85c02c1e1a9e401d367119b60bfbe42d1eecdd21c5a09f90e63f68ad6327dac2a9a540c52c46e2d516c05e4a311403126e6927d3","ssdeep":"","tlshash":"a901758c48e6cbf9c09702543d8a20a1d091a74cab35c8a2f05cad22634fcf095ce338","first_seen":"2025-09-04T08:54:20.526718Z","last_seen":"2026-03-07T13:25:36.541327Z","times_seen":5,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/302.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/302.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2212\r\nlast-modified: Thu, 02 Jun 2022 08:08:38 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 04:08:39 GMT\r\netag: \"0882512e22b690e42e4388b0682ff467\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Tq4imes3RVSj93YpHHb7JQP2rV3couWQr4pvuWZRrDiFWMVMjBLk3Q==\r\nage: 31852\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0882512e22b690e42e4388b0682ff467","sha1":"0deb14dede2ad285744af0787bfdef543e19b2c2","sha256":"cdad06c8c46a37fbc2f3cd77dd13f04b0d9deddcf77beb54ae1df069d6f64f0a","sha512":"e8ae58cbb1ab28b4c71d53e663c5ceca82e8a4cb16fc0add2b3ac73a49a8a1620f066b106fe768390c38387b2660598945eaad84905ddf89dbcb861f87c589a4","ssdeep":"","tlshash":"8f413cfd54a95d837cf85a2a1b3bb5c3489753a6fef21c04058a7caf4975504dc44417","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-06-04T11:53:58.778762Z","times_seen":73,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/home?rts=1772887675614","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:55.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"OPTIONS /api/home?rts=1772887675614 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://binance-usdt.org/\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:55 GMT\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rwP%2B%2Bbf08xJkN20HdeYmVUJiYgmZnL6PdVIVYNZBHBnLNIrfeOwTCP%2F4NaUFIj49Xgq0Q40r3TMPMP5e7Om%2BDOgWyZUetoM1Hefz3uXbXImrg%2Bps\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d89b6252bc5527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1958.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:56.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1958.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2699\r\nage: 40828\r\nlast-modified: Tue, 19 Oct 2021 05:33:52 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 07 Mar 2026 01:27:30 GMT\r\ncache-control: max-age=86400\r\netag: \"739797800c1ad83ba9a3cdddb9824693\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Xed_RFHuSXxdj23Q6wzYeLC8Wnd1KEBpZQf0AMrflXgCecHz9LSs_w==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"739797800c1ad83ba9a3cdddb9824693","sha1":"8fa44745cb0a87a781317153ffebcca127e4c498","sha256":"6de001279f8561ebcd5da21d426f25f0f554b5f665638e84b33876a079c56c52","sha512":"25ec9a6e68a3024e7054c566336ca457a8116c6d29c5b2a901c98ef4d1f14c0adeb8ef16f56bd8d2e07466ee81c0146adc992289efce6a9fa8c2796edd4c0fe8","ssdeep":"","tlshash":"a7511a5335d2fada77c981c3f942215cc720d62d4306a2e7b535078feb06861dba520b","first_seen":"2023-05-17T08:55:45Z","last_seen":"2026-06-07T07:20:53.821352Z","times_seen":1890,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/upload/files/69683b3dcda4.mp4","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:58.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /upload/files/69683b3dcda4.mp4 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://binance-usdt.org/\r\nRange: bytes=32768-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 12:47:58 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 20763498\r\nlast-modified: Thu, 15 Jan 2026 00:56:29 GMT\r\netag: \"69683b3d-13d536a\"\r\nstrict-transport-security: max-age=31536000\r\nage: 1\r\ncontent-range: bytes 32768-20796265/20796266\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnzg6X6wQsW1ZiGswlVnCQ0vfu6yZZCA710Bm33K%2Fl27D3N%2Bj4DTVoXbdisEhrrlgHO7zBKOgNZjWvhhn%2FbpeDnksD6Y2EbZimrnlHbqt6%2Ff3IRW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d89b6363d30be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71771,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"f8e28d9bd004ba2148739584fac7a9c8","sha1":"b808c17785f2647f4285604ced6a3e615d3b1b63","sha256":"edf30b7c671219e85a0527933521d46cf7d7f2970a9c827c78d68665dd1ec4d1","sha512":"91258a602eff401c03041ede93468bc3ece5016a85dc502b94ef71679eea1c6a6fb91435641a76e5f407c1f3c4f8bb9826dfe22de15fdfe4610c9ca101e8d84f","ssdeep":"1536:TU7mFPn7URrOEWG5h7iVdapLsJxpkVP1EPlk6jBbEjtpcTwcY:TUOOLWauapLCxpkzE9L2wEJ","tlshash":"62639cf3ab70c25f313716db4e2508f9928991660276b72b007b1beb6d5b823e707653","first_seen":"2026-03-07T12:48:29.280511Z","last_seen":"2026-03-07T12:48:29.280511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance-usdt.org/api/init?rts=1772887673591","fqdn":"api.binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 13:28:26 GMT","end":"Tue, 02 Jun 2026 13:28:25 GMT"},"fingerprint":{"sha1":"AA:3C:53:28:AF:8A:A8:46:9E:65:8B:10:58:DC:9B:6B:D1:E4:60:35","sha256":"E9:B5:08:14:FB:3C:3B:59:26:74:6F:E9:EB:51:23:98:0B:1F:02:A3:E4:F5:FA:DE:06:C3:BF:79:1E:8A:49:79"}}},"request":{"raw":"GET /api/init?rts=1772887673591 HTTP/1.1\r\nHost: api.binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nst-ctime: 1772887673576\r\nst-ttgn: 5f9cd912cdf31c89d8d43d4141e68528\r\nOrigin: https://binance-usdt.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://binance-usdt.org\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DjTEWWnVuK6SiHDKbYYDbfoZcRInVVkDJamh%2FrTJvnWzUvJBC3mSZ0V71qVLZUjoFPvlw6zK%2F6y694xdk71rQge20OzUa53ypjJlMMOvu5ciK1fB\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d89b61adf7fd42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9528,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (9528), with no line terminators","md5":"5af1923193cb55c5c4829eca7171540c","sha1":"142089031eacaa687b5c4fd4a41e248a36c93eb8","sha256":"0848a5eec6c2d54b5c73bf10ad5dd878655048930e8458ceddf20ba00632386a","sha512":"5e251efb2c5d0412d5311ccb2e155557167603fbacaa31d31a8801980e253c4baabf60edf691573447b6422764cd7558491229f648ae586f0f91e1b7655b76d3","ssdeep":"192:YCzCrqBJJNNTAjvqMnoau2ocUlj+osmWDXkM7nbViC:YCOCNNTAjjn7osrjkGnhiC","tlshash":"2512b0aa5b443b7efe5d5a3a08fc9cb0291509373c45e8bf874685401b0472f022c7bc","first_seen":"2026-03-07T12:48:29.281234Z","last_seen":"2026-03-07T12:48:29.281234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":9,"connect":8,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"api.binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"api.binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/js/project_51582_53936_1712669264.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"18.239.69.75","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/project_51582_53936_1712669264.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 671\r\nserver: AliyunOSS\r\ndate: Tue, 03 Mar 2026 07:20:50 GMT\r\nx-oss-server-time: 5\r\nx-oss-request-id: 69A68BD272154E3630084B7E\r\naccept-ranges: bytes\r\netag: \"41A80CBB017CAFDD431D6487FBBA106B\"\r\nlast-modified: Tue, 09 Apr 2024 13:27:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13347271079859621045\r\nx-oss-storage-class: Standard\r\ncontent-md5: QagMuwF8r91DHWSH+7oQaw==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee6fa75e712f6cdc2fa03f92f2cfbde0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: -G15A4HNbzMgLXTX_v7J8jyKjqreEcXcUw4n6QH7J07mRe7n9LPGFA==\r\nage: 365224\r\nvary: Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"41a80cbb017cafdd431d6487fbba106b","sha1":"b4252f9c765e2e2c97c686402c41e2f06f7a54e9","sha256":"a47457730e5ece9bfc39d067174effafa4ef9e8f8560234e3dad3b47483e37d6","sha512":"047bb1dce86aa5f7ddcd0d435cb2968c6ffeb77cc9e4daded7a1f05957b6405c96baa9fe2bb3fa2502778d9a76e2723a38ae951aacd2d99cea4469bd845f0eb5","ssdeep":"","tlshash":"60018b471c5330ba1be9717f0b3b5ce93a9962071180ca21bd4cc4692f908915a6aea8","first_seen":"2026-02-24T14:10:04.452661Z","last_seen":"2026-06-04T11:53:58.785069Z","times_seen":10,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":80,"dns":39,"connect":16,"send":0,"wait":20,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance-usdt.org/assets/LnGg9spvpKBBGxtG58.css","fqdn":"binance-usdt.org","domain":"binance-usdt.org","tld":"org"},"ip":{"addr":"172.67.222.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://binance-usdt.org/","date":"2026-03-07T12:47:54.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 14:21:17 GMT","end":"Tue, 02 Jun 2026 15:21:16 GMT"},"fingerprint":{"sha1":"A5:70:23:32:94:F5:F1:E9:67:57:06:4E:E2:EE:C2:E5:94:C3:CD:5F","sha256":"A5:8F:64:04:24:44:EE:E8:24:26:70:42:B5:73:F9:F0:2D:EA:99:F6:39:58:51:CC:63:BB:31:AA:6E:10:86:0B"}}},"request":{"raw":"GET /assets/LnGg9spvpKBBGxtG58.css HTTP/1.1\r\nHost: binance-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://binance-usdt.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 07 Mar 2026 12:47:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3joxEwK6RC9J%2FNFoB40k1Ac48KXcvqa8VhhhoKrQrPsatSE16yOqafNyTN8zQb%2FOjyi9cXfJCA8aUq0fLpkcZxv6VhWId8GHAZ%2B41A80K8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4aa9240271c8fea5a20e95cfc78ba467\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d89b61e2c907dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a9fadc4adb941b49dba4057ed5892a8a","sha1":"97ef5525981dbd1ea4d8b3717a4ed1ec47f487ad","sha256":"3b1bb70e6f7bfe6da705495af851998d936ecccd16a2f898321f83febb45a2e6","sha512":"ef44b98d8614ff9ceb690a44fd6e7db3f869f33fe6ca2658de616b6d074922c8ae0aaa9fb8ddeeaa267ec5b5ddedd13801271df5cd6f0e579f87a38a44cdbd1e","ssdeep":"","tlshash":"c0b09b1516013b1c705d7441de5416d75141d437946175558a81572f448e4b72d747a4","first_seen":"2025-04-17T13:49:08.687019Z","last_seen":"2026-06-06T23:51:55.916921Z","times_seen":120,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"binance-usdt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"binance-usdt.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}