{"report_id":"f5ee4835-b8d4-4bfe-8f5c-fdfaeac41f85","version":6,"status":"done","tags":[],"date":"2026-02-11T15:16:27Z","url":{"schema":"https","addr":"www.sg-usdt.cc/","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"104.21.67.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/#/","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"title":"SGX","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.sg-usdt.cc/","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"104.21.67.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T15:16:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.sg-usdt.cc","ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-16","domain_rank":0,"first_seen":"2026-02-11T14:38:57.785555Z","last_seen":"2026-02-11T14:38:57.785555Z","alert_count":0,"request_count":101,"received_data":6696295,"sent_data":89139,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-02-11T15:09:54.260395Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/pages-common-area~pages-common-article~pages-common-login~pages-common-register~pages-copytrade-copy~0160f1a2.3706e39c.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"176ffd15ce557ade01e56c0bfb6de894","sha1":"6fe1f44369f95a5827a9ed38f0f385765cdf21f9","sha256":"467f156f8ad64d2eced2f1e1ee641c7428adde6218a22b1e48fa727aac448c1c","sha512":"b78b8df80d961fc6bd75f3d9fd8b6f1da3f403dcc3a2aee545beb5822d451fe3637605a6101c4d025d3da368adc299a9a1235ba444a2220488805415ae10ce64","ssdeep":"768:n5iUgQnKb6QWm4AmCd0tG8e+W1MAbu7N8ChEAh8sd0Q2Z7wXI0tWNjZYztpptzkf:5iUsYId0FHoMqu7NdEAaM2O3NBbJrDa","tlshash":"aeb3ddd2f6cc2840566fcf4e9341a3fcbbbaba2342697877e4622f244f772d62504558","size":109106,"data":"","first_seen":"2026-02-11T14:39:12.556294Z","last_seen":"2026-06-12T10:35:22.521387Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/pages-common-login~pages-common-register~pages-copytrade-copy~pages-follow-index~pages-fund-fundTran~dfbeb8f8.dbff842f.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ad4e0afb020d62b56c922553c8e7e6f","sha1":"6d2dafce831a43eab77dfd62e8580391a05655bd","sha256":"6d5949ba90ef479bc1fe33007ed144defa4162cb22f1e52053fb932e6e1afff0","sha512":"6bd2f8e3641a852a7650bc199b98452cd6d948a960b827face863fb06aff9c12b8c140168b674501062c16772004f5345d1658d8a6191b31d891767d118b5265","ssdeep":"768:UzE++5FrWF8tQAavoTbD+LGKQgjczZ0jhFJUEuIOMmu8thRrvDXd:lN5FrWF8tQAavoTbD+LGKD4zGT7Fmx","tlshash":"fec319c7f9c82805566bd706914232fe9e2ff9738385aed2ea813b256f271c7270951c","size":121990,"data":"","first_seen":"2026-02-11T14:39:12.670682Z","last_seen":"2026-06-12T10:35:22.420409Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/pages-financial-index~pages-ieo-ieo~pages-index-index~pages-invest-invest.a71515d0.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e704e15de71526278b87407eaf8b876","sha1":"99ab200048255561a5eb3c520eaa2bf55cd0a59a","sha256":"f4659e874d7fbdac5e3a74b30f5cf356b897ebc38bd3060385aee55d8012ccbf","sha512":"444b56ef6092531904fe134e4d10e7aec2f0f1a450408b8e8aaf2f35531af5bcda2665d6e0d559a564839714f00a2551835bbc233b0d153ec84e156b009df69e","ssdeep":"384:yzpPMva2+1oDN6PeFeWkqTATncoCSVlyn:yVjo8qoCWUn","tlshash":"af43b38efddca0844767cf8b914137f89e3abeab42016852e9816b34cf176c66714d1e","size":58534,"data":"","first_seen":"2026-02-11T14:39:12.581541Z","last_seen":"2026-06-12T10:35:22.480153Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/pages-index-index.287da0e9.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"262ae341eb282ac667228b1b4cf3afea","sha1":"1bad373cf76c1cca49b5835b5338e43b68b24d9a","sha256":"a9f412be4d167ab44597aa4a37bc66f8bbd33bd68caf269d8cdef662b91cb439","sha512":"afd4b00746f87b22bc6cb8b52d6183eef51804a70d69fefcc5666737aed0832568344e1349be8004ec536c7c12ab860cc172421d1e8f2b890df80db444238560","ssdeep":"6144:2GuqOGkXmzIBRji7YEqHA5Rgkol6uqgG8l0nLpNm1l2oBhmkeFj4CGSt:mtAPgr6NnLi2oWFj4CGk","tlshash":"1cd407c2f6c830184177d751c04b62fcaa36ae27d105e485f55dff644f29aca3a2aa3d","size":644791,"data":"","first_seen":"2026-02-11T14:39:12.748053Z","last_seen":"2026-06-12T10:35:22.499202Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7c2044589cd6c4afb8f708d8f4929ce","sha1":"0a1a91f258a6b31b5f24008bde88fe949fd00317","sha256":"20217fc70ebe327eee12ece90b2c8ad0e6f760234c316849f05b7e2a7d0ee931","sha512":"50894a9f5d6c19842e74141d8b09cfc2ed951ee4d75dd45343c8c9156064fabc2129acf0c4635cfba00be760064af9293e826d7df958097177d67e364bb11248","ssdeep":"","tlshash":"25c04cb4761959305659a22d7239e7d83dbb501130437547901c158d0cf4e945671ea9","size":159,"data":"","first_seen":"2023-03-07T12:06:42Z","last_seen":"2026-07-27T15:34:16.31276Z","times_seen":1431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e35f3565e98641c0174d284e8ddd26","sha1":"967e8443ce108fe2742f3ec46237a40560c67c35","sha256":"6fc1c4ed09be48bc1d695bba608ad0c9ff9a525edd88b1819bdf413e88960e82","sha512":"7b6ca8aea3dd9c4b83fda1914179c9957606363ee546540bdaa87d0ed099362681da51036c06bb3a8c6641946b69621d72154075f78b02b770ab1bddb3ac8a23","ssdeep":"","tlshash":"576000000000f00c00c0000c003000c000c0f00f000c0c303c0fcc00300000c0f3000c","size":14,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-07-27T14:50:18.138728Z","times_seen":1552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/chunk-vendors.e2c804ea.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a729d1d78e217f384e95576d865ab3e","sha1":"d727d789cc19e5c1b2cd0c2b455d69002df4ab1f","sha256":"6bfc10773adfa149ef95364088d1b9ca1d105895ca65202b106f81ccfd07e169","sha512":"c81226175291dc6c3649ff18c7e47f335ed95421ccea5c5a2128a0820898084e70cadeb5f271722dcbc30d4dd70f77896e88577dc288421ab4b1dff68bf8b740","ssdeep":"6144:DZ9BF+CMKGXzJHrBkahVhCp7lUPZUp8HJsyJ4YMLibmLsq03kESlyo9qmpT/giiV:rBZ4zFx0c6CHBJ0Mb3kvm","tlshash":"67f4099cf285b0fa07e760f5402f220ba23b6868b40ad4d5f275e5d4adb994e1137f78","size":731593,"data":"","first_seen":"2026-02-11T14:39:12.553658Z","last_seen":"2026-06-12T10:35:22.484021Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/index.ea738d31.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85b33d561da6fea9fee97b6bc96773af","sha1":"7f4a5427b802c45eb922716320cc784e90fa3b69","sha256":"f548fd8b1a1c9d6112294a1c86b9ba8d4d02e8c4feb74e18850a0b09ca0b4dc7","sha512":"52edae096e26858dbe8cd904affc3ba36e998d6075393d9beb3f594f93064b18ac0ad385dee020048a4a047e5b611aeb127df82d1bbe35af6c6a52e7bcfe4d39","ssdeep":"24576:BvZdwG1ZAIkKDJ3bys5XrHeg05TBWVucM6WjMp:cWVu1nk","tlshash":"5f255b4ab6c4b23812d72601918f363952fded396147b8e9f3c4a654c797b883322b77","size":973605,"data":"","first_seen":"2026-02-11T14:39:12.745884Z","last_seen":"2026-06-12T10:35:22.425238Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T15:16:02.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/ HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:02 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REUkl1Rwcrgl37yo2e6MirAae9REadxRLyo5b845PV3dEtRuN8uAl6N4OnWUucHhtFDaONcmSVyldjGhZZmOvH9Z1mBvSCiqq7jXMA%3D%3D\"}]}\r\ncf-ray: 9cc4ce1939fd82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":896,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (349), with CRLF line terminators","md5":"bc97a9f0c44712166316195741c7cbee","sha1":"d69514227c9ed65c8453993ee4fe77254b347b8b","sha256":"42329aa431735b774246215ad71da791a6c64c0662a45cfac0320d5628f5a358","sha512":"b588c3ed99ca03258ec170faf964b17a9cb5b9be26a2631fc094afc31356a72b35c831bb0db51c7046a726a27aa4946707f64d92773afcfbff09db32d8053bd5","ssdeep":"","tlshash":"ca1112925c00d53e1b21aa583978f34dc4bb85aa2ca2ac00b8dc1d9c8fe0fc84f3dd55","first_seen":"2026-02-11T14:39:12.609428Z","last_seen":"2026-06-12T10:35:22.429783Z","times_seen":3,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/api/menu?lang=en","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /api/menu?lang=en HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\nset-cookie: angela_session=eyJpdiI6Ik9XRFBBXC9DSW8rVzZtZElZTVBcL3pKZz09IiwidmFsdWUiOiJqaHVOZld0QWtVUHNtbHlseG9MTXFzUGFqRElkVmdBY1ZTWk12YmdDWFFvaER2Smo5VHlkVUlKcHZJZmRTWnJMWmRkcFhNd3RuOUhxa1pTemJ2bnc4dHJtdDZYOGp6ZlBzVGhQVFBNS2dPZU4yOTdOaGliT1NtUmpidmtjSU5FdSIsIm1hYyI6ImIwYWFmOTNhNjkxOWM5NTM3ZjZiMDY0ZjJkNjJlYjY4NzNhMWQxMmM2ZTBmNjYwY2FhZmVkZGVjNTA5ZTI1MTEifQ%3D%3D; expires=Thu, 19-Feb-2026 23:16:03 GMT; Max-Age=720000; path=/; secure; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nicq3lakhjzYoeMFOv4m%2BG%2BCgD8pypDlrH3MaAzEn3XFksynqdbKpkq6t2rVmQN4lV46uZsY%2FroxBcM%2FQPJ1h6ev5Y1voI2doXE4PA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce228bdc82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1345,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"63cbd66639c42f5c6bd66b1914e31924","sha1":"ace85b7829c376d16b73fa091bb5d448fcfe412c","sha256":"d9ca92119b825782966adc53a8f2876df4c681605397c4bbaa3d6961e7e8513e","sha512":"2121bc6bf0b5101c82f155fd0f20dba5d090e452fefa39815dc40bf6a725cfa7b85f8889d5e2ac7779bcbda4af087ac1fe7bb0dee97886a4cbcef6434cec6db4","ssdeep":"","tlshash":"a62139ec5ebc2c2dd2f721f168e3165e208a0507d9e4b59a1beeaddc02e818183db081","first_seen":"2025-11-06T14:47:40.100638Z","last_seen":"2026-06-12T10:35:22.414349Z","times_seen":5,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151022A005.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151022A005.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbff-55b8\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgEnqksBdgYxT4JpRF6kbI8BfHvS0eFJ2%2FCH3IDXmnr5AyF6yeDOcuhmEHAVmdRsCXPHvzz%2FOdgJ63FZl6klawIXX%2BuUDMx1SdVFbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce237c2982b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21944,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 990 x 990, 8-bit/color RGBA, non-interlaced","md5":"8a0bb0417063e742c3fd24f66bd6ecc5","sha1":"1b64516f1f3aeb303f84327646cc4a374ce303a8","sha256":"11bb2f5221d761cb035949a22f768e5fc7b6d6a94a6f51a413a90191570f43c5","sha512":"dd79f62cc6dccf95a4f34d0626ebcfeef2e3e6759d50307e538d7e7ee6965e43818980440be945d947b314c94e7ecfa6f03bcbad8b9f6172c028e05f2c36c136","ssdeep":"384:X+kJr0C8Y7WkLwCjFo5Vuurz2D9q9/Mis03HtrWRwu93qfxmYYN0wvoobHykhGQc:VxJqkLu88yM9/MPQrWDgfxmYYNbvooGz","tlshash":"b7a2d06a461cdcfd1378143489d7320af5be08ac54576f012a6f4a78101d09eedf76a9","first_seen":"2025-11-06T14:47:40.1508Z","last_seen":"2026-07-02T15:23:03.928018Z","times_seen":13,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:05.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 15:16:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 11 Feb 2026 15:46:06 GMT\r\ncache-control: max-age=1800\r\nset-cookie: __uni__uid=rBEQVWmMnTZ5Xb6nAzdxAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-07-28T07:01:18.660956Z","times_seen":17924,"resource_available":false,"data":null}},"time_used":2033,"timings":{"blocked":1054,"dns":2,"connect":294,"send":0,"wait":294,"receive":0,"ssl":386},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151429A019.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151429A019.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc04-7c32\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QbqrUGyL5dBcS8772UWqJmFH3h4arGCXZIK9qbj3sEID6nuk3cfK%2BAGDvthAjZWPJ1IfifPsqSL4MI2disVRve7kPTZ2OGcyo%2FfazA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce233c1882b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"6cf9bb6c633e3c3999de176303450222","sha1":"028468e110d405cbfb4aac232f8088b260795e5a","sha256":"6dc556e0b31d73f6164be17274360a749e421e8145bb62887b7a17ceea9802c5","sha512":"f91be98de02d5e000fa23554c2da039849c5cb8a099a992f767379b3f010ddedc9ff1ae9dd34fc92796b03af1b1a0ee9cd4ee3bed2272566285a96554fb4fa01","ssdeep":"768:bxYUYUTqIbRriuC/dWrExKqtBeh2H4arg:FF+mOuNQgSkh2H4arg","tlshash":"c0e2f11e427bc4c6f10a6c3e26969bd286c72c8d6d9af18a2bfcf404bec875d1d78514","first_seen":"2025-11-06T14:47:40.239377Z","last_seen":"2026-07-02T15:23:03.924343Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151652A030.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151652A030.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfa-57fc\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qanCA4HT26P2uFkLkUXi58Hj8Yb62DtIDcfIJiXcNqOJ6quNAil%2BaMcehXPCVV0BMXLUe5X19fF8KWoFvUtvQ4Iap5MGJ9TspqZEQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce231c0982b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22524,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"f96bd4ebbab846488a43d5009b488d75","sha1":"dee0042e46a1c11061e19bcced6cf45cddf52499","sha256":"1e150397d675c28475e0648bf396bb9a926088d4aa189029eb6dfd720c71942a","sha512":"5de69fe82358463cad7e82246b9a66f6312f566b1a931dca0758a645b8062d792d631c952e83f49f5fb921ddcc8d0c98a5a8698e40f8da0cf6530a406a470a74","ssdeep":"384:mmaVKDWbmwOjCuphljRj0T7w2/MbIEk18GTKkDP2I8ny3POm6cwTEZINHrxZI8:eVQWbmWuNjRjEHkEEiTKKBEwPOmTw2I/","tlshash":"23a2d1379696cd2902397839432b1000724752dedc3b840f2895b397b4fbe563b5399f","first_seen":"2025-11-06T14:47:40.108746Z","last_seen":"2026-07-02T15:23:03.905439Z","times_seen":13,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151317A015.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151317A015.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc03-8215\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUPBOmpjNeCWWtJ2Q9c%2BZVwqYcJoJkoeGQQb6o%2BfubkARyoIVSinaACNrvgpPwmHqFDQM1H6DPUYGMbCflNbABrKRGaurv8pCW14xQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce234c1c82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"35c05ceca8fb205141fe9f76b21ded06","sha1":"1fd22f089de5e73adcdb068be8c09e9005409b52","sha256":"5c104135446aad3f390fcccc3e335f93247ed58182bf92926728771bc8570b94","sha512":"d5d6688ae4aba7b9547bdd4e68387322b8604270d7e98a3ae05624387b335805e9693a0484d749128c6bc3c204ed015518d1ee29600215ae8a35227a5b22cf91","ssdeep":"768:Jz2J5fmkP+BXSbTSCIz9w3VmMxeQ30JGjhD:0yk6XSbuC/32JGF","tlshash":"c3e2f1df9e07ae12b9476a3cf316e718150c7a7348b3076bf1ec87545ae4824683d525","first_seen":"2025-11-06T14:47:40.201836Z","last_seen":"2026-07-02T15:23:03.897844Z","times_seen":13,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/home-active.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/home-active.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-60b\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AlDmcc%2FCuEaY2wPkhIj%2F4aKf2ky3g%2BecMPIYS4EIuQtSsHrI4xqpsrV0gARJ6ikFEhABHFx2WHljqZnuo1ApL69QCYpyM1mwTC8ZKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce249c5882b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1547,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4a16d03c21c47aafbcaf21c76ba377e0","sha1":"88eb80c7255787855f234b74f0e621238482f076","sha256":"c48367a1aa6d330737346969b360fe41d5605ee07be6a29828b03fb7005845f7","sha512":"59002d156fed261a0eefc56d80b073a74322f3b1d98abdb9b6e452e07a7de641b89d615e95db02d8e4f8655191130e47f24a2caf632a92db9feae918e4eed7a3","ssdeep":"","tlshash":"b5310afab0604cf7d8b3d07f4581e0bcdd7d297890a9a24212485f59ab73d02e555225","first_seen":"2025-11-06T14:47:40.167898Z","last_seen":"2026-06-12T10:35:22.44459Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/pages-common-login~pages-common-register~pages-copytrade-copy~pages-follow-index~pages-fund-fundTran~dfbeb8f8.dbff842f.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/js/pages-common-login~pages-common-register~pages-copytrade-copy~pages-follow-index~pages-fund-fundTran~dfbeb8f8.dbff842f.js HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-1dd38\"\r\nexpires: Thu, 12 Feb 2026 02:38:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2251\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Ifoe1Kr9YLFTnyRr4%2FaVewoeAKZeL54iO%2BRVfMaWTd7HKcC6%2BDEKUPLYaX8rkvFw0%2BOh8SC2xEm920m9NIfhJFhNuuoGbGKUQvowA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce1ffb5582b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122168,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65180), with no line terminators","md5":"6ad4e0afb020d62b56c922553c8e7e6f","sha1":"6d2dafce831a43eab77dfd62e8580391a05655bd","sha256":"6d5949ba90ef479bc1fe33007ed144defa4162cb22f1e52053fb932e6e1afff0","sha512":"6bd2f8e3641a852a7650bc199b98452cd6d948a960b827face863fb06aff9c12b8c140168b674501062c16772004f5345d1658d8a6191b31d891767d118b5265","ssdeep":"768:UzE++5FrWF8tQAavoTbD+LGKQgjczZ0jhFJUEuIOMmu8thRrvDXd:lN5FrWF8tQAavoTbD+LGKD4zGT7Fmx","tlshash":"fec319c7f9c82805566bd706914232fe9e2ff9738385aed2ea813b256f271c7270951c","first_seen":"2026-02-11T14:39:12.670682Z","last_seen":"2026-06-12T10:35:22.420409Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/175951372684764.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/175951372684764.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Oct 2025 17:48:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e00c7e-44c\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9o5VKz8bFpkksmW5Nmlvk9e%2FSGiaR1Y1hexfvoLc6uZic5DNxR4WKwRFSu4Ny3Z3cn1jonFzDaytGlADcxIIvU4dmfuTtdreY4IPYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27dd0882b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-07-28T03:14:13.541812Z","times_seen":1820,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151236A013.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151236A013.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc02-505f\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHVayFptC97iZ325n1Lrw7drB8qilG9F6caMNzTtMYPt%2F%2FiqtKAfgisvtJzQNXJP9AbAvFHEgHK6%2BcwGHcOnqXIR5bvofDMrx%2F9FIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce236c1e82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"8c0d175d811b1b96977d405ee4e54c95","sha1":"9fb051259456c907652ddff9fad8d605f973985d","sha256":"d7f8cb1a81e068e12d13f520a0c704c9a1341f041a29395d9ae0f53f7341ae49","sha512":"42b125449cd0ea7b264d456f580c2004af5ae6523e1bd422d307724dd2de0f4c627b5ae30295c4068637e6950c508163d38f3a77f22c3ae9458f51bafc39273d","ssdeep":"384:RYNSxreh/S6LbaWRCBbt2iPOKrfiX72pKWY6i+YXxusDSSA5upQf4K:RYNJhaK90Ft2iGqi3WYkYXxuhp","tlshash":"7592cf57900b4cd49158191b0efdaa1abb2a7e4a8c0f2123950d41deeecd86fa7f055e","first_seen":"2025-11-06T14:47:40.241831Z","last_seen":"2026-07-02T15:23:03.914218Z","times_seen":13,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151010A004.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151010A004.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbff-788f\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tysziHvt%2BoiAM%2F03Dv0OQDCwuZ%2BTzvVpahVOTtKIzVS6sy5VzJ8hShZHXLUO5ZLf27jzWpKpnYeHawTqruKnUascbL6wpSRVtI%2FKvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce237c2a82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 990 x 990, 8-bit/color RGBA, non-interlaced","md5":"27af5ef0e58260422c6d0d27d80c88bc","sha1":"11e1daa08c3acb787145df04835c67fdda3a06fe","sha256":"1a08220eace602410c3d3eb26997ed8bd6b1451ed28915ddc3528351c880499f","sha512":"779c587d3de72b67a00911f911290af837c08ee6acb35bfd9de422ea5c12b8c178791372751a21e7b23878a591da1bcc15394293b57741f1a13dea782a47f826","ssdeep":"384:fpVv/Nl/itgn1ujDCTRbIpIE2vjVxD+H51PhbvXyJwYdRtVEtrhUAdmdhJpyMhxj:fpJTRaB5ZYpVCrhUAdmfD+2IjxTO5P","tlshash":"bdd2e1377ce8e068a203ec53cf43a4119f7c4b131e6406cbb854abf19ab7c4945a0b9b","first_seen":"2025-11-06T14:47:40.147076Z","last_seen":"2026-07-02T15:23:03.933219Z","times_seen":13,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151813A032.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151813A032.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfb-31be\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZftzCnMc3w1DaoNQBRbsaar4Q8OXTkUIfyZqTpT3dERnnSpYMBI7WM%2F%2FTNWYGW8XnakXFeBlyVdYw%2BP%2FBxJ6KA%2F1bm9FRpTK31T%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce231c0582b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced","md5":"f1692a1891eb700714ec7f65a2b97543","sha1":"cea5a54d4a723650e7aca2fb61e198634060c40e","sha256":"f1bb48d7d226caf22e992a908a1514d2e6af50e47b147bd91c56e296d237b23b","sha512":"750d037dc75a58b2cc3648c76a2dd2492506b6ef716ab7340fbab1d52de74b449b2647095fb002d18f0a04bcaa8627a7957c0ade5e4b406199307997efceb566","ssdeep":"384:vJaHmFvFKJs++ZXLiEHVUoa6O3AEW2znrO:vJaGj4sLRLRVUox2znrO","tlshash":"6042cfc1d1706f533385d61e39eb863bae63f79f1d0cf6020b8a7f015ab250a86a04a5","first_seen":"2025-11-06T14:47:40.268215Z","last_seen":"2026-07-02T15:23:03.958749Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151542A025.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151542A025.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc06-82f4\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qU9jnJE5LgXHnDvQ%2Bh6vI93vJ78ZyWUBPmUy7KB1KneIBNkZRe0NI6i6WV21Tkssr7PdVv2e6eGs0HcpSAVao1WM6QVysit%2BpL5K5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce232c1182b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33524,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"372633c3695604c17e4212635475ba95","sha1":"623a208e21830b7a6fb9a945e4a462211f398d3c","sha256":"0bcb93c1104e44943cb5832d40e710cf3eb40275f2ee2852721fbbfbf4176771","sha512":"407f9a505552f0e4eeede463801f189510e1f137a21c5579a53fc2ed8eff7f6e20710bebf809481f460d1ff6cc42b5cb24f8bb6767d7245c8771b98870d14fe3","ssdeep":"768:X40FTz9C8pYLOZ+q+mEeXlEIWsxLkVvFCP8NUtr29:XhTBXYLfq+mvXwJFq0cr29","tlshash":"7ae2e19bad9f029973d95d0ae9b4387f47c0644e67ecbe0dddf13e45081622ac4e68c2","first_seen":"2025-11-06T14:47:40.211862Z","last_seen":"2026-07-02T15:23:03.917782Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1759675045954756.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1759675045954756.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:37:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e282a5-509\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GK3ntMHhOwsIgaLTuVTLs0T3OLPeBfDAyALo0vwUgfuQHa5UqWW7Zmt%2FoVGm3xqSnfl2hjjMDAamYXT1lTbgaHMRLUcQQiXccHM5Cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27fd1082b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"7290ed52436b197f22dec959794a77cf","sha1":"dfbcc5de182c12a8dc3aecce574718835228d8e3","sha256":"eedb605b601d24286034b55b362387e5627b346a0ef69e2afd92177968e1e755","sha512":"d51b24f577360a4c430ffb8e6559e53e0664c35601daca1a6aef27f48521fee3f172b95e23a9fde17f53659f65c4b80a3f8dd9d25f2df9379e8e7c0a171d4a7d","ssdeep":"","tlshash":"bd21c5782b9a422ec24dc9762e7a03001d2d8131a04c5cf8db69096b6e80d7e426cfa1","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-24T23:32:32.674652Z","times_seen":236,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151336A016.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151336A016.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc03-772a\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZ5jmI1cfVRH4O0B33zbd8fKCD9vAt9L81uhG6ltdTNU9q7V6UEUxH%2FEhC9Q5LGp%2Fg%2FbOB%2BIwWqQhidiewRFyLszkX%2BVVW0uG0kEjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce234c1b82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"766ae6518f910af388382e2011917adf","sha1":"c10faa60b0588c3b1b742585ec43230d5f885623","sha256":"f21b0b77b995a19345fc9c31756aba8c7b4e720b4a3b3a4a5b8f975fc92137db","sha512":"a0c1ce2c8e059268af25b227edcb4419c89d0928b0cec62b1dd9b47e7a342f67336570e8291ae3b7ba188d469e3155552d07556173af519260a582072a2d8a8c","ssdeep":"384:tLYvoNju/sqaYrd346SCZDO2VBkS2BsfPb7KFB0bDZqBqE1B5j44SVDbOUX6TGa7:tLYAziOeD37ktccybUL1BtEDbOgg9XL","tlshash":"ffd2e1f612672fdbb9400e0774cb848045696ddaa0d63dbc42b2225afd9654c3cc79bb","first_seen":"2025-11-06T14:47:40.161304Z","last_seen":"2026-07-02T15:23:03.972735Z","times_seen":13,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151150A010.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151150A010.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc01-92a8\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9OcfX%2FmLgWreYljhktXC%2FPiJqSzdncPAz5RGV8jPk7Onagb5yhlvnRedezvdQPHPZ2TduCuQbC4UkvGb6PuELCJwBhQWzqF1uvMslw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce237c2282b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"4c8c0db68d8e53854123280c8b2158a0","sha1":"3ce01e39ff93eee48235c1e0a8137af91d6d73ec","sha256":"c189d2a35fae07934fffdf736191ea80917f77155218ba5fea3d17f4ebe42d9b","sha512":"21157b1791985895aaf1c918f311ed6d16abef76926b4fe0122da45167410e398949f40e9fda831515c9fbde47d151d59d69cf1f9f1526327e33e1c4c288dca2","ssdeep":"768:xAcd23CEk9WaaQ9h3AOIYcMYIR6xcuClj0JlaJ7bI4cQezZ3:xr2RLaaQ9hQOIZIYAJwUn83","tlshash":"bff2f15923de6e85eef2b39db47b4544a6a1fb610854f07f466e78a1af8e803e10180d","first_seen":"2025-11-06T14:47:40.177038Z","last_seen":"2026-07-02T15:23:03.92889Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/MP4/video.mp4","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/MP4/video.mp4 HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 20688115\r\nlast-modified: Sun, 16 Nov 2025 21:17:14 GMT\r\netag: \"691a3f5a-13bacf3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2250\r\ncontent-range: bytes 0-20688114/20688115\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3YdXVULhcwO7ImQdPH45F78hs0BmqQ48dhu0aEXw76%2Bm07%2BXV77EGh5c1jpDdr5haHYqRDvUK%2FIfTDyqJWqGNqkzZs%2FJ9fWjNkU59Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc4ce24cc6582b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4827f4e4928d6b07563c0ac881b24404","sha1":"76982f9ffcb8a94b27fdab39572e2828493b49c5","sha256":"c0b2184332d6d730b6317448fd935012505b60f7d0b02848de2530009cb74c62","sha512":"c5a04e3228c4a3d80f3a6aea6d18e33eb9e16a32e3f657b7cc61cea7a89164aff1fd9ee85da3243093eca41544629711626344bd873aee6ce0021957c7554a7e","ssdeep":"24576:qmFyymbNjyRp6cGn5PahWQm4OtPA7/vBk9fTt0E0s:zoHBiKn5PWq4OtPAjvu9B0q","tlshash":"38253381eed1f86cd70cceb068c90ef421fa0911516a949a7fc39161cafeb556b0787e","first_seen":"2026-02-11T15:16:33.142879Z","last_seen":"2026-02-11T15:16:33.142879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1759932269345824.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1759932269345824.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 958\r\nlast-modified: Wed, 08 Oct 2025 14:04:29 GMT\r\netag: \"68e66f6d-3be\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 2249\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVEYAtvF2krZar5TEW%2Bc%2B1AzEuRtGQfn2Le%2FGRoTevoKtK5TqAb1H%2BGcghwQOVNx5wvO9%2BYLZD2LPu3cnfTkMvYrCT4LywCeOmp3GA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc4ce280d1682b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":958,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"62985640a39f50ded14c58dd56e0e88e","sha1":"015e293e2f9e52ce5a40b8e891dc3e69f7aa4826","sha256":"01db02bc42536f5fb3fa49403c3abdbfdeac57e65bc0d79e76c87c0f4026ed88","sha512":"ed7e93480962cc427ac3eeb28d6d58a36eb9d76ce491434d3cc727e6cc74a38c962aba3a3066b3d9d7cc55f55e6e9c673ccedf462061126c2b67bdcb06561804","ssdeep":"","tlshash":"9211b7719949b638cc760ee5e1b961f5af5f3c018185fa5f0f0a798be03e0b882d6129","first_seen":"2023-05-20T13:08:31Z","last_seen":"2026-07-22T02:29:07.455427Z","times_seen":90,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/api/news/list","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://www.sg-usdt.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=4\u0026lang=en"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\nset-cookie: angela_session=eyJpdiI6ImVyQytmaWdyMlFBR3VxMGd6eENFVmc9PSIsInZhbHVlIjoibldHK1JuQTRUanRER1lzRXlmMDVUWjJ4bUFzVE1Zbm1GMFwvNXI0MkJtemNqQ3c3cVFKZU1xb1wvWjJtbXpvdlkrcHVPamRRU1Qrb1wvQitWTjRrME5qeENONVV6dk9QaGVBU1phU1FMOXNXVTRJMmRBZlIwTzMyMFc5V0lrNmdibEoiLCJtYWMiOiI1NDI5NWY1ZTViZTRiOGI3OGQzZDA0ZWQ0YTE3Y2RjOWQxMGM0NTE4MGQ3N2IzMDMzNjU4MTI3ZWU5N2VhZmYwIn0%3D; expires=Thu, 19-Feb-2026 23:16:03 GMT; Max-Age=720000; path=/; secure; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ibcM2KIOMK1NcBRYBy4I22jGQykdfxdhwj08BLd8JY5BgfyI1SNKtCkFfhjk82gB9uSVC7Z4ZHUeXWNu0zgyFmToYs4ddl1FFNugw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce228be082b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"45b46ab1b8e7c8c41c1abbd1c5d1b2f5","sha1":"701d5af09e99d8460d3c41a3b8d3f73731b0aa89","sha256":"48eda4d2e40b657e15bee34486ac598770401595951778e31337816f8629a8e4","sha512":"6cc639811dac5126eda1477bcbc8b50158f04d419283547a87b42d231a22b7134080a1a61b897faf6ec5d9d8006d8c24bf85b8240ea402a426bda622ba75a64f","ssdeep":"","tlshash":"8be07df92a805cfba24c53d23cc97a46d5ce2151cd10476905686dbdc76c5982417197","first_seen":"2025-11-06T14:47:40.130686Z","last_seen":"2026-06-12T10:35:22.466041Z","times_seen":4,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151931A038.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151931A038.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfd-5acf\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2ar2qPGr7llItUwY9Snf4VSSgJcjbu5%2FezmVhSDz2SwEbmgU5dzFgN8lUMkkMepJBQXrU7CQOZOqXLnokBqXQFxBEhMEOyv%2B3toQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce22ebf582b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"bf5e4b61f4faade26f05d75ee76ae9c1","sha1":"bee9a263020882db802fa3c73ad58552e8da4f46","sha256":"8d9d4da30f673be41c3526ea74b852e041d6ed908235036e0fec60ccd81c5775","sha512":"84fa931daa8b256ed85d75d20aac8cc2088888188c3e0b1775c407101fe13a0e85706b9e878ff8c370abdb08ffbf5b0feb3963a3bc0c7637121889fa0945a7d0","ssdeep":"384:1bUMJgTCB7CVHZukguJAergtPFH+88jNvL0sAGvhqiDCmUHOCfPFWnWWFrAZl9Rf:1bR+VTgHYIaZL0xGfcOiP8PluBx","tlshash":"7ea2e18379793aced67b6b6f273358c031487a6c073261ab6d96c39a0e4e607590347f","first_seen":"2025-11-06T14:47:40.127538Z","last_seen":"2026-07-02T15:23:03.937743Z","times_seen":13,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/funds.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/funds.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-402\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jEfOfCpi1z6hbyjG169llrUVd1A%2B8FEhR%2FYY6AK7F6CzkcEAUep7SIn8IhBgmZf7K0WZ%2FzP0LuyZa9CxRSibQR%2Brp9ME%2B1ny1YBiaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce24ac5c82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"b9d4c5cef6a6fa8d7d2a97917f86d756","sha1":"6c77a25fd8a82f3bee7b1ec1b4355960d568ced8","sha256":"40dcee3d090463dc54fd60a32c76b5873597a6cfa184933df23c75b5c922bdcb","sha512":"4a36008c6a35458dfc7d78c020833ca0fd2d2429715038a9dd0ae79ecf23049864ba9f3652423976d79faf5e281aeca7f8fd6fa67796cc3cb6f6d617227a39cd","ssdeep":"","tlshash":"f511a8f300cf6c3ae1dde2b54635c985c97d81842a550f2675aaa3ab88410a065dd1e6","first_seen":"2025-11-06T14:47:40.110995Z","last_seen":"2026-06-12T10:35:22.475142Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151922A037.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151922A037.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfd-5561\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljhLQkw1A11AuWMR5wxmrkodDgbrpdc%2Fc2OORJetm3v7hKcT%2F58s9u2ooiPBK1RSQe2r9HwObNJxk5QhSnsglOXILBe%2BHmHSk3hOmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce22ebf682b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"ca997dcd9e2202b89b4cec75a46cc47a","sha1":"2f61bc6fd53047a18383cb7b9f182d8f6b40b00c","sha256":"9c6f6e30781fcee64aa07c8476c54ea73e2e7afa1d254095154cdf8d53aedb29","sha512":"0a7cde9b3c1310c30a865a5506ac3ae78eb7bce33f8ed2da3c8c1906ba17f767d3d68ce6e6c527da8d5c6f1716d398ddef85cf1b20e663d16a5044ab097dd2e3","ssdeep":"384:wOGF2ZwesqcQaU1RVWvNzUSzECeKoj20JeL7/RFf/VOEY2k40+CvJLf4FtQU5lYI:wOg2ZwD6wJnEH60Je//LwEYM0+4uFjjr","tlshash":"37a2e04304068eaa201b58258e7c5c343321a6acf63c095b51cab7c5b5df8bfb5ef1a3","first_seen":"2025-11-06T14:47:40.129568Z","last_seen":"2026-07-02T15:23:03.926234Z","times_seen":13,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151900A036.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151900A036.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfc-6e4b\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQ4YrRxCNx3QWCQaDcHuG3iB0Wzn36toCipNqoJc2lxEbKawdrMbeuIGCimFU%2FjV6QzyMRQ3%2Bh6PLkg9z8vVGvGV8wcpwUZEkFas1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce22ebf882b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28235,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"7e985da941873ec45a0d094ca6897a0e","sha1":"0482413094d774c52e4ac0d037bfd84187bfb512","sha256":"8f6facd5aa0b3908ab200731af9031f7bcd9f4f69d38fd0b95652fcb7ed796c2","sha512":"4967a3d630cbfeee3bbd971a07083b4777236acae632b9322cd905f039d430437bcbb39a3fa4c401d2464a151bdfb01e59565ec4fc79795eddeed5b0b7eee9b9","ssdeep":"768:QrnQ7BH2QN7G1H4b2T1DtY9HdeSVEGZL/UNKAf6CNAg:QrQ7BHn02b2L8Hdza6AKAj","tlshash":"dbc2e0a31d43dad4e17f291799647f5021a4d2f5588a07c13efe6cc1ee0608e7eea254","first_seen":"2025-11-06T14:47:40.256667Z","last_seen":"2026-07-02T15:23:03.966675Z","times_seen":13,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151806A031.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151806A031.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfb-69c6\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kYoiiGwk8cjHJiGmLDh%2BVG9LqJ2yRGZ8BWMK3DgDhPr39zjNYYECFzkYrZgzmSTU39Ygsgs1UKeLtA1qr1TPqMkEhBTpG%2BiDbU1JBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce231c0782b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"ccad247a92eaa813236fe5844470647c","sha1":"b5226165346205bf6e400689c6336378294f6a1e","sha256":"ac6023d04e12da8f7ce02d5937b08cc70943022056246dbd532cc54986da4b89","sha512":"b039f6e6824a69d1e50ec379f1db8dabd33e3e1546b32e411c8f008c9534c658ece27b2974c7445924e5f414337c88084d04138268308296880a0a36bf6b3752","ssdeep":"384:7N+7vs7GJDvmnkszHxCTG7taprfWRKwgstGAazJe26bKKitxY/wJ1WD0W2Q0BYg1:7kRFmnkYHxL7t+WPcH4UNJ1rq0Og8Y","tlshash":"1dc2c05e0e92cd0922775cf9aac248dcf354f82352398f0b75869ede5a8e4012fb74b1","first_seen":"2025-11-06T14:47:40.17998Z","last_seen":"2026-07-02T15:23:03.918291Z","times_seen":13,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151603A026.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151603A026.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc06-6064\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qyXGhidi2ppskdRNLb1MjVN75%2FK8zvPqhhY5TPcN72RBMVgS6wARb1bPM9x2fAnnjpaJUaSdOl6sd0WTeadFJB7L59WKFjNwxJrNSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce232c1082b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"48c3d3ac80e7653bfe09ccb33745a5cc","sha1":"2107a4daaad32e0d2dcf647deec1a3b1e35aa679","sha256":"c865e1add1ccb85f9ca6bcb6b6b78a9d30ae5dccb419286212627d1d17da9158","sha512":"718c7458e26f075ae311114b4eca04aaf6d7af60701cb68785072cc3f4b78d7d08837548784322f0c1188b848168136516e44b6964c332110abe603c4bdc2560","ssdeep":"768:bBxIBH6YRn6p+UuuBLtv9hkUx99RNDYrDxYCZM9e:HCXl6QUuSlhkUX9HUMA","tlshash":"79b2d0d37f889a2e5f7895b0487b636eef4338059f0fda278f3519600260f546d8d658","first_seen":"2025-11-06T14:47:40.258593Z","last_seen":"2026-07-02T15:23:03.949601Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/center-4373983c.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/center-4373983c.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-366c\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWszF25B%2BUqGBxszGZj65clOwug2fbR7ec7f%2B4BYIxyJp2i4UCWVbwlM%2FER3PnZ4kJvnFISWKgJxC%2Fl5h47ni7dwM32VyXnMJERe5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce24ac5b82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"17a4424adcb1c539952b65562a56088a","sha1":"8ae83a7b50e22d40c6b9804eb5d4c24165599eaa","sha256":"4373983cd23d17de8883f1ef879a73cd28364534509601679c30e1ac269f67ae","sha512":"9d8b6da1d07ea73afdb76a0cd668c1ca9d5cfcfc0b2c7d5689a90e6c6bdffb056d7d583fb7854e2f4ba43ffc91c870b6e28198a047e6d20ce20f4e208137bcc1","ssdeep":"384:ZQXxR0T41EdusVjZ3Gm1QWxBZz3SW8PolIDH32hH:+XxmldLF1QWxX7X8waL3EH","tlshash":"cd52c0b65a6c8cb8ea4adfbe2446c90265981c397f3939476c9f9703332864f45cd258","first_seen":"2025-09-12T09:05:26.542136Z","last_seen":"2026-07-11T08:46:18.324351Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1763283727333067.jpg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1763283727333067.jpg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 16 Nov 2025 09:02:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6919930f-18bfb\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTb7jHASm%2FCvCrkk64h7x5nqPYSv4RNFGJjcAjcCt8yF%2B9653uRKuqJ1AN%2BUDNtUWMRJAd%2FXXvhHCpyowcyXH3FuDcuUI6W3jksgPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce273ce382b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101371,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x786, components 3","md5":"f243e30e98b42893fd74177bf36ee5f6","sha1":"9baa01dde968a2c5cf332cda642ca1c4252ad4e5","sha256":"e7a7b247d94a4e3d1c6ddd06d99cde259f175070369d389b9ca33ec401b81059","sha512":"6e1996d3f171f7ab81bf2f152a82826f35574d4b22b7ae8f9681c1dcc768f3613520a2b124b1c0c7fb8bceae4a354e928e77d2aa5bf56a952c912df90702319e","ssdeep":"1536:VJrnU9yDy1Xl/a/SS0aQeV0rEwD1DUdRwgc1mcy4O7lPqcPkero/Q3FG4VS:DryyDK1C/ShaD64wDlUGKlPnMCooQ4g","tlshash":"47a31253bf382c0feb97696936ef89e2021c97cf180d4be845d705e5d5c152b8ea38a4","first_seen":"2026-02-11T14:39:12.71961Z","last_seen":"2026-06-12T10:35:22.467179Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcoin-logo/ADA.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcoin-logo/ADA.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 06 Oct 2025 10:27:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 2250\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68e3999c-157\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BfrXCnzwklLKjQlSX3AvMJrshqpQKzrPIrCnU%2FyRTpKdUvb%2BegZzSjMI6xg9yq8DGnYWEkzmU9ZSAH67fy%2FyrESSsrrd71%2BKTTIt5w%3D%3D\"}]}\r\ncf-ray: 9cc4ce27cd0382b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"532ddfc951f404aff3147c0c2f80cf48","sha1":"53abbe3850d55982a0fba9a3e11310a06b2da07b","sha256":"aacc1626f8db2cc18a8e59a16e8d62c0c1beaa087150d10e6a053bf928e3b0ce","sha512":"348e0c244195274a095b158f1d1484ff27b856e799631426d9bde2f1b0084b09cefb98b70f3f2103554eacc2e55e252034b18938364ef1b744a3121dc32913ea","ssdeep":"","tlshash":"b8e0c07cde601430c004c710bb3c9c7530ae31c8c16a078df98c130162419cf2a507cc","first_seen":"2025-11-06T14:47:40.136253Z","last_seen":"2026-06-12T10:35:22.428447Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/pages-common-area~pages-common-article~pages-common-login~pages-common-register~pages-copytrade-copy~0160f1a2.3706e39c.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/js/pages-common-area~pages-common-article~pages-common-login~pages-common-register~pages-copytrade-copy~0160f1a2.3706e39c.js HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-1ab3a\"\r\nexpires: Thu, 12 Feb 2026 02:38:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2251\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zPXWSxI%2BYKVdOBBR5wno6v8SZynKlYq6ZMii18aB8%2BJBpkkQB34LzHmzW%2BRlt3Kd8EAIeZFb1010J2NHz9eQuiX%2FekNcpuTVpO28QA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce1ffb5482b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109370,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65272), with no line terminators","md5":"176ffd15ce557ade01e56c0bfb6de894","sha1":"6fe1f44369f95a5827a9ed38f0f385765cdf21f9","sha256":"467f156f8ad64d2eced2f1e1ee641c7428adde6218a22b1e48fa727aac448c1c","sha512":"b78b8df80d961fc6bd75f3d9fd8b6f1da3f403dcc3a2aee545beb5822d451fe3637605a6101c4d025d3da368adc299a9a1235ba444a2220488805415ae10ce64","ssdeep":"768:n5iUgQnKb6QWm4AmCd0tG8e+W1MAbu7N8ChEAh8sd0Q2Z7wXI0tWNjZYztpptzkf:5iUsYId0FHoMqu7NdEAaM2O3NBbJrDa","tlshash":"aeb3ddd2f6cc2840566fcf4e9341a3fcbbbaba2342697877e4622f244f772d62504558","first_seen":"2026-02-11T14:39:12.556294Z","last_seen":"2026-06-12T10:35:22.521387Z","times_seen":3,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcoin-logo/XAUT.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcoin-logo/XAUT.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Oct 2025 10:03:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e393d8-1b51\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SeQEKcXVDiY1GvAGzu%2BygzKd0vN5QdMQKG3mJAoI6IPiqGkSNN6alVS%2F3QC%2BSWkazSh0JHIFFkMtzVOwQ6V%2BWXf8dpGjHXwaiNxYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27bcfa82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6993,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"294d718349e801467ae6e5e46ab38039","sha1":"adc54eade0254557ac239bcbe560530a798764c7","sha256":"7fe1f6072ddbac1d8294f6c75181fa928b7f105a32732427af32b7cbb462e3ce","sha512":"7c7bfb79a192526a45695096fd5e68bc8e2b9a0b7aadd21c0686cbeae09efd7be26e7219565188ffddcb532b664b991916ccf4d8e8f209cc9977c35d152167cc","ssdeep":"96:NYL0xq0CrBKyEUJZgtTVOMsBNioZw/skNgTAGFI88NnFbK+S6snM:XeTEUJ+GQJyA","tlshash":"69e1ce81b16470bb310ad7e02a3dba71306724eb7b186097634743ddd28faff61ac994","first_seen":"2025-11-06T14:47:40.204312Z","last_seen":"2026-06-12T10:35:22.485326Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151837A034.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151837A034.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfc-6efd\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SsBP4JvAGQHBADIVoD%2Btf%2FNgQGfDCUU2RTI5wQfOlL6b5xlLav2JSgAFQcANtjg4hzkzl2wsu%2BLlLEYOauogpFEZwc9EJiIy0K4XMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce22fbfc82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"e12c4fe97323a97693343ac2fb6ac270","sha1":"2e0d7b2537b03544048fd56821da6e461a536545","sha256":"507bf2912f01e540d2e6cea8b4a0cde5cc9c0588d96573849a44478d80983a77","sha512":"c06f9ac2ff3f772d78787980902e970171de7aa4b320090b07d7a7bf40b048b3ff198c5f645c22d0ab0561971e79bedf7e980c43ed04bafd651acaedf19ff370","ssdeep":"768:CbVCsESUsEaYyMMZBgni7LWVup6+uPvu609e:CbVTESqaYDniXWcHuP2w","tlshash":"abd2e1ed95796cbad5ace450777526cc6d2b9c37824108a71680fd00e25fb76f88fb20","first_seen":"2025-11-06T14:47:40.195606Z","last_seen":"2026-07-02T15:23:03.915186Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151825A033.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151825A033.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfb-92de\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XBAMEw%2BqMeo9fyxADoS40FtwNApIeyBNcrPyeFGlSnc21XIXHPIf1dtvOAUCa9LGzPfRaxh5byzSMf7n7t8zl32kME%2FwZ8nlr%2B8eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce231c0682b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"353a881990416aea6ab8cc8520f68c82","sha1":"32812d0178f4758b280b37b191578b0b47f7cb98","sha256":"930350e1f7672e8252183b062ffae8f4e7aa036443fa62a2b5f5e15685d98677","sha512":"6429043397702bd2956e2a03b55deca6b49b38f3066d22291e54b8fbdf312102a21c989f5a06b6f3521afc1bcc211f8b865bafaac655e766ac2e17b46b3f9673","ssdeep":"768:EaIQ9WWZjzbWoIJZ9uu9ZKadBso8TfMaUGL3+:EaIpqb+JK2ZDdzO/d+","tlshash":"4ff2f216b3de7945b30494eb92a306a1efac22d65633008f0be7ef9ad5428851563780","first_seen":"2025-11-06T14:47:40.116584Z","last_seen":"2026-07-02T15:23:03.945147Z","times_seen":13,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/api/lh/deposit/config?lang=en","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /api/lh/deposit/config?lang=en HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxHHYiYYNLztpCWGkDAubzjT6511BFbuO1zuykGIqPacszod4wR9w%2FxWQKIyOqhJ6bYLoHeigzWtX8N4tQIKmJfqdEaCes05X2W%2F8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce229be382b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d3a1aaeb849236e72f20af437327bbb0","sha1":"3d5cb78cb7d1b362947a96d04ce90835d4fe44e1","sha256":"6664cfaa8eeeb95fe92c7f23ba865e386d76539c8a53a16a8f5e2b24010c05a8","sha512":"525e8a4ed3be886d9f1423faaf24d47aedae84ff0cbf742b7fc8b42e3457bc7b577ab45f6c3b970b2beacfc5481dcb68a8b6ec28970d2598f4558662dd0a1618","ssdeep":"","tlshash":"4a1196adf2198ff4c529198241e2b25c6199374e3cc349c463dcac6cd6e6212e01ddb2","first_seen":"2025-11-06T14:47:40.263856Z","last_seen":"2026-06-12T10:35:22.484857Z","times_seen":4,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151847A035.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151847A035.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfc-d89f\"\r\nexpires: Fri, 13 Mar 2026 14:38:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPjhIcOysIBov40m%2Fep3GBM8JmwDoxOJdmVz8bATKw1bso6Gnbbn84IvKfmNb6xX6ZLaf4uKfNtF0mZU8Shh8sn6Ca0W1zz3Rq%2F%2B4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce22fbfa82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"c4ec2c53d8b257179ceaad131191ca87","sha1":"26e46323aaad6e48b317eb9a33735e983a990e22","sha256":"4f93e9977ba1ce0950e9c4df27fe5a3041a94a821ba0060e67cb2accf05ba2da","sha512":"d5708f1b5b17a8602b78f22833d572ce3ed4372c6f60b945e72c72a814e86d71bf95330c3bf694b3a3aeb171809a4ea0a10395d0bc772e9b803297103718a28d","ssdeep":"1536:6D+damb5Vyjyjvqo7NarJbSp9gFiWksGFSB79ixe:6Oa05VxTTatup9gFOsJF9ixe","tlshash":"11430109d322664cc9025d81adb0e78316e59fadc6cdebf5e80c4cbf588e34d79691ac","first_seen":"2025-11-06T14:47:40.188045Z","last_seen":"2026-07-02T15:23:03.900507Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151418A018.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151418A018.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc04-5c82\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgfwQ6cV%2FE4viePSE4F3zIhV00WmzJStR1RMtEbbtlwP4U4NXyqXCiJCeSx44wgXI78AudystZY61Tx6q258j0KtGD3Pwh2dt4JbIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce234c1982b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23682,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"85f4102715da70042ecb9bb730a37dbb","sha1":"9b9fb4b215dc1c8711efdf0938afd38153a22c1c","sha256":"e5742735ec8a87141cda7708dc8ff2b372ac94555dad87a88e85645f69728b67","sha512":"6eedb6d679beb27433324cdaf9d824c53a2d6f42b2ec18299aa9ec3af187231ae60e700594961d2ed88e4fd8809e097f1c5b3aaa534742d891aa5706b59ce7a6","ssdeep":"384:1FdhxwW3cbVEMlD4OgmEb2vheCv958V9Fkh/mhVeKPLXeNvxCQ:1FFweGVL4Oob2vgI958bHPLu/z","tlshash":"21b2d053dc29cbfc5cf7bc6ee683a340be86923509f38e98ddb1b547564b04118095b2","first_seen":"2025-11-06T14:47:40.104499Z","last_seen":"2026-07-02T15:23:03.960519Z","times_seen":13,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/middle.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/middle.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-210a\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPMXjnd5gp8siNfu5wjYeM3ESiqxyLmkngnt%2FCMrsoSXpISdrsqm8JEN2fO7ME1cG8UKSMj4kpnnavEmj4rB42nWvrzsHjfMVeY92Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce24ec6e82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 668 x 10, 8-bit/color RGBA, non-interlaced","md5":"9788dff89299ecbe5d6ddef16dad029f","sha1":"6ec281dd603143adadb92959c8b234b782022b96","sha256":"5efbd5ee9a6acf8389f13923a5053cac49b70079a5235029ea8681d2c801963d","sha512":"9d01cf4e30291b43e1fbb3a47e1ee70e46d9636054d358f18c550a03b5dec0477ca697845d7eca468a501d7028392f82bb6621d79d60a729c3810605fbceaa91","ssdeep":"192:CaiLc9C5Inu4qWhZhV8FomhGFRCxFvIDPSuudRjoBF6:8g5NqmOFomh0RqvIEdpy6","tlshash":"7402b1e186e144bff58edbc6b14ad9a90ceb4e6038adc8c244fa0c0d45de1bd9e15951","first_seen":"2025-11-06T14:47:40.182894Z","last_seen":"2026-06-12T10:35:22.423044Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/175993217726300.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/175993217726300.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Oct 2025 14:02:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e66f11-129b\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MmuPYvqxR6Tx42fNk3KqK9pxuY037mp6xSQfjDRLz8%2BRyZ5A8N%2F9hhUWP3YSq1taz%2FYt5q3IlQJzd23XJeclOsRe0p25Qz6MAgfAPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce280d1382b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4763,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"0223ea20ba66967b82972c017767ebce","sha1":"9cdf6fe0f782188b21f537647f7966559d7a3987","sha256":"7a9a4ee07d531759a57473a0b59e3b2229dad63e89596ab6f47389e3791db2c5","sha512":"9dc189adc16761e90f3ed547f9f5062c9771435394c7e2bffd9f8634ebbf7f1bf0bb15cf890f0aabe9132707cf7d449f298d7438bb23da1c4e17fa727a50bd58","ssdeep":"96:CSFmxW5VkDRpSpglSU84Glz1EPQXpX6KH32XbGR:CSFmI5ERgpUGNiYMKHGXyR","tlshash":"93a18dc3fab90d22b266446b4352637e65be632d4b9345ee38904c4c0bb9ce5f5ce125","first_seen":"2023-09-17T16:55:07Z","last_seen":"2026-07-19T23:38:55.960696Z","times_seen":49,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151507A022.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151507A022.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc05-47f8\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xqOg1xB4%2Bt8xmMWa8QEkfjMInZY8n8vM%2F4wePc2ipzIOmToByXPnlCEhBG5oTXaBDkQhDn9iPfzlbpZQmONfLzBlZxcTITuOl3wkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce233c1582b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"6f377f1c46b6324041d96136ca8cf769","sha1":"88412a8c4d3f6ed220cb0e4a082e21442d77cb72","sha256":"1c006a80098b75913a3b74620b96a546bb1f5ede3e1ae7d93f3e052e1bafb04b","sha512":"071391d1c8b8d297ba6e41fa2bf3b6af4c5fbf5e100ef478f98a0c95e88df84e6a048b03dafccc4a7a7d7d6d8eb98e4ed617486fcee973de806523277b28a187","ssdeep":"384:dS1Yor1Bp8idwKgnq4IXJPgib7P4D27vLSLjh0rqTzMPper1:dg1BHXgBIqifZLLSJ0CMPper1","tlshash":"e382bf9701908d03a8cf28ae5116dd2571b477d2b1fadf316cf1198a5a4fc0b26e8eb5","first_seen":"2025-11-06T14:47:40.23684Z","last_seen":"2026-07-02T15:23:03.961149Z","times_seen":13,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151226A012.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151226A012.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc02-617e\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvcQ2tvfMFK59SpBC%2BIMmKqCriCDyPZpI9BotkzUvQo9WGHLnlOcUHe15O6ecgZ1IQXu95Zn0crkvksd6ioHLZnJND9GWuANMhvvqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce236c1f82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24958,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"d12733c5fdf7390d6e111dfb656f0421","sha1":"f00f4180410e969eb9f7d74733e379ec624f9a00","sha256":"6489cd9f0f503af126467ce461320f6609dc0a16212bdd89ad1e0963ca60f123","sha512":"a1dbe4e01c8a8d729cad2449c54815f42cd5ed8e06dc4f94002a42bcb4f23f54c084ccd53318ba150bf1caf2d3f7af01d8f8c408d686a9b607645ca878b640d1","ssdeep":"384:kwOeyyd/Ht/dzl2s0msW6V7WS9xnnfx2oFuCdEmgFm6Ec0sUt4d3nDdWDfJNnfU:cyd/Ht/dzlx0mF6JHn52dDF0CnBis","tlshash":"70b2e16fd8f0c941f06a3140ceb4644a721a7c6e63170b4a90edca6d59abd1546e3c7f","first_seen":"2025-11-06T14:47:40.14108Z","last_seen":"2026-07-02T15:23:03.91318Z","times_seen":13,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151057A006.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151057A006.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc00-9226\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PfpFhNP5rf95G2yu6hvLVS6eTarNZYOqFuN3mQP4lHTItroHq5yijfLiej47%2FVvqpiftzlbFlq9vdrVvc8wq5PazO2VK0WYfQawQ7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce237c2782b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37414,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"7fc95ef07342504d8e0b5a7fe0daa39b","sha1":"caf3faca336107fad2746a302274171413f3b1a7","sha256":"5b0620e9e07419f3e72a707818efdb6c936db2ee58782db8385070d322c643a3","sha512":"542a2030138719b450dd9811abc9cf721668a159ad0a3f802cb1a2a17d281251a6b82de8547282c75f94b10fbf91e7d503c3bdf8c3794d09587d997ebf1b2652","ssdeep":"768:MxrGLypDIKreKXSu2jpshVpNbe6ZFrAXqnUAX+ae5S0N9887:arGLyFBDspshVpfFrAXqUARe1Nz7","tlshash":"e6f2e16b5e8966fc0529c56c27b3e10e1f7b7236a67820771d087cb20e58486df77788","first_seen":"2025-11-06T14:47:40.149416Z","last_seen":"2026-07-02T15:23:03.934106Z","times_seen":13,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151952A039.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151952A039.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfd-6df5\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JYrthP0EvDY6iD%2FEkb%2F%2B2G2nrRyVt5ZVIGnXjWuo80uKYGXKsan7fW9EmhH74YyLzQJztcZuIsmYD2DqbtQertBwA0Me%2Bq42FoyKsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce22ebf382b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"a3fb6bba7e2a94826c6a8bfaf80f3d69","sha1":"a4e5b631deb688ddc467a1e9447f4b9b256cc8d8","sha256":"eab7535921f1dfdc9ef667f146ecad357958ba679925a89136c4ac6055f21a15","sha512":"27381c7f327d5109348f2b50f0c3f3d9716fe9807d855491058cdd93eb9e722193d428b6b1623a19a0b93d07c78e392f061487277ec64d9df31780eaf55dea64","ssdeep":"384:EBZM6WEkuxMQ3EGgsyXfzgRGacTT1lxMU6Kk5grsPdpLRMGOFXG+IwDYNvC+jx:cZWyENsEzHa4T14zTMGiuLx","tlshash":"99c2d073dc98201df9619756f06b3dc2706335a22afb227166ece21e83675a50e2f077","first_seen":"2025-11-06T14:47:40.209355Z","last_seen":"2026-07-02T15:23:03.93061Z","times_seen":13,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151141A009.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151141A009.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc01-72aa\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UahJOQLqo%2B4koN88bz2%2Bq8d5gpHQkV%2BTACZGshvEz8VklZ0HTTUIqzoDOrC6ABSIrGUKSs9I86s%2BT5LVzZGeLJ6E9VvoACqTcfr5Iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce237c2382b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 990 x 990, 8-bit/color RGBA, non-interlaced","md5":"710d0222e04e9f61b2a50ef2902b5e83","sha1":"f3f8e911d2d4d6d519dfe335b608dbb7e03d4295","sha256":"a5ab86711ede81a057f8ba01807d0626c677858e73743fd822121fd3213d0e8e","sha512":"7bafcd5bd004d5a9a1eeefef5771b5bb2c495e32da923b25d67506b77eb01b3318a51b3120710db6f03793024241375b82f6cf0151044aa38930ff303ae4984a","ssdeep":"768:t0Cgaxs/EsAZgQCoFZTLmNng+u4KrbINazIQD:tvq/AZPDmHulrbINenD","tlshash":"19d2d08f13213c8dde3685a986992faeb8d61d2da505c203527bc59caaec38bb574305","first_seen":"2025-11-06T14:47:40.1784Z","last_seen":"2026-07-02T15:23:03.948712Z","times_seen":13,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcoin-logo/SNT.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcoin-logo/SNT.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Oct 2025 10:03:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e393d7-1de8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OORnAZFpoPgpKhY0JGX3%2BwoFiHScerGUL9Ag%2BnelGAXfxv09fYMiYydfFGU2KPFBdS8AN6d0aIxKPFxzY0GJm0E3yj4lYqjaa5sYLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27ccff82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7656,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"333e6a3427460d02c68139a2f4b1e02b","sha1":"7c11ac1fc50e853d247c47ecff58167bd9d4394f","sha256":"665d4341cf6cf7502c6e6db060ff14e4c5f49c2fc7b2baa5e3f5b03fbc41654b","sha512":"a1b2b174d9000b7a6432cb4bf2d75db94fc3b1cb0473f2a9502e2aee96d874cf06e2acffea5ee645e1b7f51b7eff59aeba314519821b89696b54e447d52a02ea","ssdeep":"96:qOJ3mJLGF4O5OQxV+iHIPFFSH1QbV+vUDvS6KcSmVs9UzdyUNmlcw8KNo:1J3Aq3j2Vf5/SmquzdFex8mo","tlshash":"e4f122427265b0f7350a8ba05e7dff6030a220f7671d3097634a468dd28bffb66589d0","first_seen":"2025-11-06T14:47:40.112672Z","last_seen":"2026-06-12T10:35:22.468091Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcoin-logo/DQQ.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcoin-logo/DQQ.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Oct 2025 10:03:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e393d8-1ec7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIEt6P%2BX4o0cOkfxx9%2BzHFBWw5%2FwBmm9s9BKvNkLYuZkM%2Br4fwxoWSktq1T7K4uUg74mcgd%2FUXAgyKTfsJpb9Ygog4kSBsyLAN%2FBeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27cd0482b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7879,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"627abb74caaeb7bb38c4a421b1d7ee8a","sha1":"e41bd0b88eeeec6fc3fa3018524f795d153e7af2","sha256":"68c260c66425c1fc35fb3666c74964846e2de4ddbaef4c7a86dbe30e402ae2d0","sha512":"97aac25aa56b0069beb2e0fd928a8780876ec2b870908043b3b6689d6e11a1da9926fc7942e9837ece9aafa4b193be1bb23b503359f0404f9153678930d9c31e","ssdeep":"192:AUZ0ctYxSal6v2InsHnzWUCv7YohdqjGAXJBEDYGotVX:AUbYxl6vPnsHzWUCvEohdqqAXzmQDX","tlshash":"d0f14266b34c73362a4643f52e68f4b2d15f509c8a6e46cd38c70b84974deee1d489ec","first_seen":"2025-11-06T14:47:40.135193Z","last_seen":"2026-06-12T10:35:22.489259Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1759674997813807.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1759674997813807.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:36:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e28275-5d5\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BqBKQgaVoszdxR4mlZeqiUUK49O7KL194uM2rm03l%2B3izo9OnrmFFeJZlb90FZPr9fJfXr8QOSB5aN2UQfGE%2BxODfthSew3z8hQqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce281d2082b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1493,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"ed07f6029bf0a1c3a23807c8c584cf1a","sha1":"c4b319ce81032f615b2e3c41ed15d437eef8c708","sha256":"c9f8f330098924d66839ea621329988bcefc4f157fc28469a18b138994ff27ea","sha512":"a4b87ba6dbfe56303510cfba8a4b4d01d51fd78c8f2691c907df34d117b41b226ea59dd1e4724a8c6dfb05bafddb78b0cd0da1c6e929401822e536eeb5fbcb18","ssdeep":"","tlshash":"ce31e980bf2489fad6a0d135064a1622808027be4921e36b1ee09c3d271a5ac40f0f2a","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-07-18T23:53:19.438409Z","times_seen":147,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1759675034260220.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1759675034260220.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 14:37:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e2829a-4c2\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9jDM5UND3ZlkX%2B%2B%2FDTVVxpSqb9KbvxETok5GR5cjTd1JMB8GePOBLFDgOqfR%2F583EuBsEn%2BBrtvKkm6EF%2BKuSkc9Fyia5HhOpBe%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce282d2382b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d34183db66626408066857b67f7900d4","sha1":"83c65e97df3ff99ddc360cbb4f00e0aab9b46157","sha256":"c62e4c60cffc895ab8c244858fe3e536c8951cdfe3424e5af1cd6d92dd796c8b","sha512":"7ee53dd7c95dd200c67ef1a94d0a658cc28e6681bb7e9b80f25eda71cd907a57f11cba0074b512f7c554ac84364439cba30d0b0706b1d2e0b0d102fe045b5d05","ssdeep":"","tlshash":"6421e7a0a34da662fa3b2945e79700f0712a5431a90659974af74124c21c9462ac057a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-24T23:32:32.710735Z","times_seen":292,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151615A027.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151615A027.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbf9-70de\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJq3d%2Fb8gocgcN57JZ48cIIpttFjoyUYx80B03zc0DcM%2BmdxKIpC7Xg6g6AApSrl0T8Oa0QFLAtfIBgugL8Q3e85cQZiG64wYS7cdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce232c0d82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"81169c8789522dd40c62ae39c353616e","sha1":"ef9cc789c9b3e05578c0766cfd1054d94245080c","sha256":"60fdc2c6f992fc52cf50f01a08f21965b016631b3eca83328ef2309a5ac4be38","sha512":"714d636ea6b818e6f4bdd132df3647c4248c39816935f58f0e10489b20b65eb0cdcfe1134b984fb5bff44f84c06b4748f0ee85705a268acb5127c1e2b16c878a","ssdeep":"768:IMJN43cD/gDc0gauHG4p5pxi3sdXwEP+6zRQk:IeN4sD/Oga0G4p5Di8dXwz5k","tlshash":"91d2d1179ac62ab2ee2c6e17053ad16e09cf1c677737f401a3fc9a7101ac716bab54d0","first_seen":"2025-11-06T14:47:40.27055Z","last_seen":"2026-07-02T15:23:03.973825Z","times_seen":13,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151404A017.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151404A017.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc03-630c\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3d2rOti%2FchLPo%2BPC6qc39h9qUIqWHPqpHS1khHLL0WQfyfIiSJhSY9qGbvswe73cYq5L5fn34cJZjPZif9U2nVB%2BpqkT8miunniQAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce234c1a82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"2b82c897aca3fbae7730a5496d6a70bb","sha1":"e7f2e95754e25729a8219fa8dd3e972c424544ed","sha256":"421084e2873c79efb9ab2a871e39b7b12b4ac1865aedf7f82534a3e6692655e1","sha512":"1148c1d546bfa6e64ef78cca6a8c96c7c6b058ad121225e855918bdb49e351ba0db7d64aa1fec2b4ecb94e3910a3fa7392c0cb9b7132823ec39948db6bb90aa5","ssdeep":"768:GEiCuD7weqJ1XRWbbcLAkeOOkYki7PbQbdPS5Bm:WCu4ey1XobqjOkhi7bQVS5g","tlshash":"56b2e19083924e2d687b5e790163ed95345d3be9e9b11c07ebc3e539608f1b281d2737","first_seen":"2025-11-06T14:47:40.173637Z","last_seen":"2026-07-02T15:23:03.944654Z","times_seen":13,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"www.sg-usdt.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.sg-usdt.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: GZ314cimVMoKFUWg1dzG/Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 11 Feb 2026 15:16:04 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: NqrSYHGhptazEOu0qWXzJqttpFE=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ojWG%2FfqvK83IS25AisJhtzzrasawReEPKvEU2hT3uHGI9B4gH9yv5zI19t%2BRoullttJlhNZzbLSMJeyUCpWefpngtsJ9CZsPVPJKtjAwgDHYddBE11zxFyypEcymlAFWgw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9cc4ce209c042d9b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7727\u0026min_rtt=7614\u0026rtt_var=1778\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3105\u0026recv_bytes=1607\u0026delivery_rate=545386\u0026cwnd=233\u0026unsent_bytes=0\u0026cid=e9c41e86d7dfacab\u0026ts=847\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T06:56:15.033742Z","times_seen":17575295,"resource_available":true,"data":null}},"time_used":952,"timings":{"blocked":-1,"dns":43,"connect":50,"send":0,"wait":829,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1763283693433143.jpg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1763283693433143.jpg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 16 Nov 2025 09:01:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691992ed-1f695\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BA2jz4QVY%2FE7PmqplBTKSr6OgFTf8ssqmbPqjodoOiVrj95CYir4z6WxUTCUUQwXcchaqHEgNPpfGK%2B6j8My8q9V9oYya3gdCC7%2B%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce273cde82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128661,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x785, components 3","md5":"dcc09d79dd9936a4986f7e083e58cb13","sha1":"629d930958acaacc4aa0f5e26b3f5ec7fa02729f","sha256":"4a208de50a96639252ec8f2b06f346134a1d09564a093aaf689b521dda9ea86b","sha512":"5e9e8c4407ce35a2809803c99ac40cddb3a63fb2d4f64de3a01f759bbf8edae9df36f9013ef2a2b04e2fad8bf94c83bcc4a5ff946fc212ec5ada34bec251c4f3","ssdeep":"3072:O/NBA1DmTUHOppr/SFUHGzTuiT0pqkm9x2Di4yzaL0nfgFmIh:MBAJmskkU2uiT0p1mYDhyuc4FD","tlshash":"4bc312336f67d80fc057d939a70525a65c8288b90712a1be845da5f0b78cef2fa497f0","first_seen":"2026-02-11T14:39:12.70766Z","last_seen":"2026-06-12T10:35:22.424339Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcoin-logo/ELA.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcoin-logo/ELA.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Oct 2025 10:15:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e396de-dde\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=45OqVnOIqtSN%2BRIREf%2BdP%2BlV8a61ndVnxmVX%2BvF5cxyOsPaSgL4oByKOXyPRelYVw5K30a5vgk%2FsjHcjc1NXPQhCKP9itkTds6%2B3bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27ccfe82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47395eae29803acc2d3d0d75361e8fe3","sha1":"f7493bec26c2e133a6fc434307717b124bcfec4e","sha256":"8fda9587244932f66fc9269cbe6df9688016fbe1551b6bbb6d6d14b83afe93ae","sha512":"076aac321ecd7a09af4ee1c6d84b087ee3b000250e742e5963b37f6da4b7df45732fa44774b5ee3f89fda8b911f03326a7a0bafeb9ae8183e6e45bb0d56d1d1d","ssdeep":"","tlshash":"dc71108e73b871f68d4f53889f685d70146a11fe579926cc348883485225aeefe98e8c","first_seen":"2025-11-06T14:47:40.262654Z","last_seen":"2026-06-12T10:35:22.486238Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/icon/kf1.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/icon/kf1.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-6350\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mx0vRs6F32DahMTDc8NPZEswRUaeKVGSANlaF2xvbPlaFg1pDCNHPB7028c0jqXlh2dMdH2ovGuBEVd1cCSPWCjLA6C6cZgQoBSerw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce249c5682b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit colormap, non-interlaced","md5":"b96ece1ef18d5a2107610f23e9021bf1","sha1":"44dee507c64bcc28bdab2fc7b8b54cdc12162396","sha256":"c3a1e269c428a326a0a9513171aa018b2f252c79274d1f07216b9a0e7a0a8cae","sha512":"30f836bf5d033a384cc42cec1b78ee1c31fac7293362b453e2df3ad3a1df7096bafcc719cb627aa0f8432fd128fba1b5d6597b9d50ccf37254783e1c5b7b245d","ssdeep":"384:fLCxfETPhIuwZjumxm9on+tYWQ2l1nIpyyPGKvvMlXyFt8LZwsjc1ccBdNF3DNHY:jCBEt1wZqqn+ZDk5eYpiLZTjgUb","tlshash":"d2b2e14c07c94acbf54503f6ca98c5e2ea73293cb278dbcd14c59d1bb6d7218b391a05","first_seen":"2025-11-06T14:47:40.134001Z","last_seen":"2026-06-12T10:35:22.412943Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/chunk-vendors.e2c804ea.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:02.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/js/chunk-vendors.e2c804ea.js HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-b29c9\"\r\nexpires: Thu, 12 Feb 2026 02:38:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2253\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HYlFrP9rJJmkWRVCDj5h4YozIFXUbMpBGBwJLLxcTFiakDl3%2FhYuQ%2FPiK9zk95ZnJ9UqP%2B1WziBnYhYbJcctf%2FNQSH7R9VzhJ3Lpdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce1c6ab382b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":731593,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65525), with no line terminators","md5":"2a729d1d78e217f384e95576d865ab3e","sha1":"d727d789cc19e5c1b2cd0c2b455d69002df4ab1f","sha256":"6bfc10773adfa149ef95364088d1b9ca1d105895ca65202b106f81ccfd07e169","sha512":"c81226175291dc6c3649ff18c7e47f335ed95421ccea5c5a2128a0820898084e70cadeb5f271722dcbc30d4dd70f77896e88577dc288421ab4b1dff68bf8b740","ssdeep":"6144:DZ9BF+CMKGXzJHrBkahVhCp7lUPZUp8HJsyJ4YMLibmLsq03kESlyo9qmpT/giiV:rBZ4zFx0c6CHBJ0Mb3kvm","tlshash":"67f4099cf285b0fa07e760f5402f220ba23b6868b40ad4d5f275e5d4adb994e1137f78","first_seen":"2026-02-11T14:39:12.553658Z","last_seen":"2026-06-12T10:35:22.484021Z","times_seen":3,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117152003A040.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117152003A040.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfe-5898\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmC%2FTfsRgJqRf2%2BN%2FfXXPIjlPpA9maj1fvtPAVOGdLPpEOxhkCLFOUhztpym%2FPm7t4K%2BUV7b5y0A%2BHd0ugkSu9SiJTBiGu%2FrKwDzIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce22dbf082b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"59a377445ae2d4a7c3ed2f9fcfcd47a5","sha1":"d56e5a7bb5c1a6e41c6b0df9e921ab898280580f","sha256":"e743b443d369ed455df7b32964305b345a86fcf86d879756876d8d18f3e5ec26","sha512":"738fb8f83a22e14dbc8af6967e67864bc7343e95ee934ca9850d2b23aec1748ffca58167c94f50a6146e635b8d978ad8641342d2ab759f0d549ce46cfb52b7e3","ssdeep":"384:m0OhjcwZQuYDv1WB+7LYEcRvkmE/QI2x9OQp/ZaFYE+Ad4kRj7oGiv:f+XF4NWMP3c5Y2x9naQAjRj0t","tlshash":"e8a2c083ce68eacc506d5f79cc3d59c4a186de6e5cb5810cbc0a36a79003e1a74db265","first_seen":"2025-11-06T14:47:40.254353Z","last_seen":"2026-07-02T15:23:03.911421Z","times_seen":13,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1759932250439553.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1759932250439553.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Oct 2025 14:04:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e66f59-b62\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xROvegeuBDjfuq2ZJENKB%2BBWf8aEPWTvLWC0J4F%2Bh0OEWkX9VwnePk7PvdPbvR3F9K1T9hxOLLw52Ln%2B%2BLoSuBTRD%2Bc8gpbz6t54zA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce280d1482b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"150fc19967e29cfda0d1b5836f76f1b3","sha1":"0088ce665650444c491cf3bf41fba64bbbbe2d46","sha256":"ac3d84c72d5064e161825d01cfd478b2b7e88b47b910e0edc950d3514c2bbcfc","sha512":"0d3a5bcec49c4aee7f8062e77a4e9590ae9ccb2b9ce275cadef966435a033f8b373445f38ec8c7790f1341d96188e48bdfe76a0e8a442f56ba9c689df8b724b8","ssdeep":"","tlshash":"66516eec3bb9782e5a4a8af14dc49ada1b64039b511c3c0f53323ec95d65088d651bc8","first_seen":"2023-05-20T13:08:31Z","last_seen":"2026-07-07T03:51:37.778636Z","times_seen":75,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/MP4/video.mp4","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/MP4/video.mp4 HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=20611072-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 77043\r\nlast-modified: Sun, 16 Nov 2025 21:17:14 GMT\r\netag: \"691a3f5a-13bacf3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2250\r\ncontent-range: bytes 20611072-20688114/20688115\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7xviyrVjR7mf9Cab%2BizrYuy%2FapPIY%2BHR5NSHxbsS6kBPXME0oajpLm909OOLL7QooLh%2Bqy4IlnchH5NVgj1Ttbk8vzzdnFAzreCMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc4ce260cb282b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77043,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"01a95cfe52d877e176881af4f050323a","sha1":"044772d872a249ad7243c1d2b19c2e83d2aca9b5","sha256":"b83f7cad0d92ee4f0856b5e548f6cbef65dbdfa15dd1bad6029aa923dd6755ec","sha512":"3884df8c77fa45c13bbc116a983a5434e56bae703df51db26cbb8526030e0c0b146d472427b84c05cd4d9c699e877ecf573b07a77a2e5145d5a93db283fe2e99","ssdeep":"1536:kyrLy/ktRIcPQZNts0wMOujBvmOXuXJxw6HY6VLShs6wscGSO1a2G4:kyvDxPAN60wMOO3+jFY6ZqExca2G4","tlshash":"7d738e56bb306323c12127b8c4f623817370eaf5ab4b875b5958a7992dcb3c02f566d8","first_seen":"2026-02-11T15:16:33.189497Z","last_seen":"2026-06-12T10:35:22.42387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcoin-logo/HT.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcoin-logo/HT.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Oct 2025 10:03:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e393d9-1b27\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=adYZfJVKsJE%2BB4Qc9P6I8DXpsJ%2FCNweSPrvI5u6L1Nh0Acd0FK3%2FewDx9G0zgzsAqlH7onbyBAG0WPJA8AXU2w%2FqkCzLxkzHdcEReQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27bcfc82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6951,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6cdb9a360036af20d3be5736feab7844","sha1":"a7c6c493bd1b30794d50e0204258e0b5fda70713","sha256":"f890c857679607a97de44927e7946fdee5a17e2716348b1e4041b395ea9dd2c8","sha512":"fdccfb9938dbefddc2412293aa122cc367b44a035a777c4049a71577032deb5650231d8120c715bfe6631eb164115836426c8db584b45b97a851af7d31224bdf","ssdeep":"96:FPdBm9hq+icpTFYrFLV+dUoJSQH1B5NwmDtr/bIEm+Oc/:Fe9YjVf2H1BkmDtLbQ3c/","tlshash":"56e1ee42726470b7790a87a05f7dffb030a214f7571d3157a34a568ec28beff2a68894","first_seen":"2025-11-06T14:47:40.220635Z","last_seen":"2026-06-12T10:35:22.432487Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcoin-logo/TRX.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcoin-logo/TRX.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Oct 2025 10:03:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e393d8-1cec\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bxclu4qwZm%2Fp3hRcL9ENH%2FahO7i4at7mLMZlDbEijs7YB21%2F%2BChujjxOg78jbDRXZlSaVOxwVU8muPBbOWXr37JL%2FyZJ0FwW60O1zQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27cd0182b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7404,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6aa5ab4c21946f9ff4698bcb87b34d3d","sha1":"9a6d81185955c31ce893533b3be1d689e3f9b53b","sha256":"af6f51a5a1364fcb88dffcd813e6d7a276b20094f84c285e56215402de2979c4","sha512":"aae8c1927a483042c71cc173723e6c40a894bb6fc376513a4c70759fbe47f119a4890601bbb0ac00c27e7aab7d93c31d6ed3166e2c9348464ad1eb952fc57b8f","ssdeep":"96:u6DhKfWXWKqCumoVQ7egX2uWokcYwslQJUUfpkfYC4a1nyIgo+4C:rs4q8XSgX2uDkZwUQJlfphunyTo+4C","tlshash":"2de197c66304f3a5594bc2e07f7aa5b0123fa0ddab5e20cd60d55b44d20baeeb94ce94","first_seen":"2025-11-06T14:47:40.125222Z","last_seen":"2026-06-12T10:35:22.464144Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/api/news/list","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://www.sg-usdt.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=4\u0026lang=en"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\nset-cookie: angela_session=eyJpdiI6IitSV0hUUUJcL21kYW9VdzFrUHlNaXJnPT0iLCJ2YWx1ZSI6Ijk0KzZvQ1JLOCtEVzlOSDFaVm5ySU1RZDZQNUFnMmRGcW9CRFB5bXBLbGQydUxZTkE2Y1FqdVA3MWIrdHF1ejU2WVhUbVlQcXdjR3ZFdFowQmVmUVFqaEc0N2FcLzY4bEFUR3l6WE1pbWRhSStzaTVlTE90QW9tZFB0NUwydU4xSiIsIm1hYyI6ImUzODdiYzAwNWY3NTA1NDgwNmVhYmM2ZDBkZTQ1N2I5NWI5NTZmYjU1MGNlMTIyMTQwMWRjODU2ODYwY2E3MzMifQ%3D%3D; expires=Thu, 19-Feb-2026 23:16:03 GMT; Max-Age=720000; path=/; secure; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90Okq2AuvI1yPNKurN31Fx67LG39bgADBp2GqVd37tbVacNdmtTb5Q7F9va6OG0FzQXE%2BYxQscw8mueQDL6JyJ3rhSoc%2BnTDGIC91A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce226bd382b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"45b46ab1b8e7c8c41c1abbd1c5d1b2f5","sha1":"701d5af09e99d8460d3c41a3b8d3f73731b0aa89","sha256":"48eda4d2e40b657e15bee34486ac598770401595951778e31337816f8629a8e4","sha512":"6cc639811dac5126eda1477bcbc8b50158f04d419283547a87b42d231a22b7134080a1a61b897faf6ec5d9d8006d8c24bf85b8240ea402a426bda622ba75a64f","ssdeep":"","tlshash":"8be07df92a805cfba24c53d23cc97a46d5ce2151cd10476905686dbdc76c5982417197","first_seen":"2025-11-06T14:47:40.130686Z","last_seen":"2026-06-12T10:35:22.466041Z","times_seen":4,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151212A011.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151212A011.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc01-5440\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BIZyjbNv8S8X%2Fs%2FgvYg2sWQarNpJyQBp%2FrBR5bBWFl83aVYieD%2B%2BgCtqnicdE8Wg%2Fc9Xcsr3bgLT9UcD9xoC9IaxsmWembcv14Mcfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce236c2082b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"a12ef016adbed85ce408bf1d59c68fc9","sha1":"c062dc94e2fe71003a6b6a51247c4c14285449b5","sha256":"b01b5f60dce282a039462bfbc0b9860f3d458acc6e61d520a96a9301556e840a","sha512":"26d380d50e8506e829a127689bc78a61e5524d5e3edead8ff68e5badd06e09d2d7dccff36352454cd2658bd22fde8f60f83b3d177e8a54a85a31ef73afa277c0","ssdeep":"384:4++1a9VFR2XkAeMjcJ5jkRRxu86h9DK7OiMCVEPU8m9fNXST0x:7+g/R2Xk+jcJVgu86hpKXZE49fZST0x","tlshash":"e0a2d05742116cf66ba938344afa084320232573271b4b96847c2ee95d4ba0ad7fa9ed","first_seen":"2025-11-06T14:47:40.165981Z","last_seen":"2026-07-02T15:23:03.922092Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151118A007.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151118A007.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc00-97ea\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMtrhWltvEcwE9nqeDd5rVcOYdlE%2B%2BfeBHnL8236gxlseiOwVKV7%2FbP3pW2qv27OECven3PEUviBtoVoZZU4dHxXZ791JfdiClSl0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce237c2682b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"5f82809ada06f91b7e2d868f6eac6035","sha1":"47cf2deb06506682a26755242c47ee08d17cea40","sha256":"2577c30c822dddae9c78eb981fd16fdf8de14692990188fcc9ca98b96c299b9b","sha512":"601e47f013c9e0dd8522329186388f2a153cba115659141b6ccf93de05f6c2b339a9066ef210888128148628d6021c620b7fad92a9b822501f10d4b49476681a","ssdeep":"768:0SZWFGgDuB1PgdF2oRjYPfP5uuyf2LmiK1blYxnzptcCF1ld+iNBjS:dZWFvDujPgj0guyeKgxnzptcm1v+iNFS","tlshash":"1e03f1eb63c17cdbe08074ba88f244e25de5f7afdb62dc3f9b005b02485b551b4a1618","first_seen":"2025-11-06T14:47:40.272831Z","last_seen":"2026-07-02T15:23:03.907164Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1759674968727814.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1759674968727814.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 953\r\nlast-modified: Sun, 05 Oct 2025 14:36:08 GMT\r\netag: \"68e28258-3b9\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 2249\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3vaX7ujyTmY%2BQxrxYbImYepMUvmx0tDWSkQmywe0fPRbf%2F4VzdaxQ3N%2BhyejD0%2F%2BS2dfw7pucuPevI1PNAueLfQAmrC5NnE1HqU0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc4ce27ed0c82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-27T05:12:15.127846Z","times_seen":1590,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1759674981758038.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1759674981758038.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 957\r\nlast-modified: Sun, 05 Oct 2025 14:36:21 GMT\r\netag: \"68e28265-3bd\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 2249\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBCWxWQAe1kznYKMS5%2BeYof6s3JE1d6bwVZd5%2BCGddYVC8jm2%2BpH2At62fkqnmXj2l1wMDNTpL07emLnWx4z5cGgsPfVDGcSYdo%2Bag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc4ce281d1d82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 96, 8-bit colormap, non-interlaced","md5":"db1f13e46508474023e51dac9b924272","sha1":"976aea7b350c3d301a1bcc9350fa9b54bff9c8af","sha256":"50b7635088e72a9f004283284a8d63488fa127afa53e157393ca38bb55db1ff2","sha512":"08f80512e3edb58c31435f259a6d27f0ce55186594e94b3d5883245788edf4b503cae6f5361876896658070c159de7d4ea5457b0bdda11df6673f02e7c598181","ssdeep":"","tlshash":"c511b7abf5cceccad1b1414f118a4490e550cdb0147da74eea127e1bb839ab02d04f1a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-24T23:32:32.433229Z","times_seen":547,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1759513697285786.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1759513697285786.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Oct 2025 17:48:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e00c61-465\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIsuUgEZBIv9rIX%2F8RGBovy8IAnpVWFBW00hQgV95cQ2eTyxRl0oTRmbajPEkYJR5M4I69OBXaj5BhO7opPrjwamVoXZsrzOBYn%2B%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce283d2a82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-07-28T03:14:13.55127Z","times_seen":1802,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/api/news/list","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://www.sg-usdt.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=5\u0026lang=en"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\nset-cookie: angela_session=eyJpdiI6IitiNjJZRnhRZHlZU0NtblZIMnVqR2c9PSIsInZhbHVlIjoieEFiZ3lscnBPTUdrdFpxeWh2YUJEclQ4ZGp0VmUzUUdUMkR0dmp0SG9UYUpZdHQ5QmlLTU1veUg4cGxhWWVTVlwvWHIwcVo2blEwXC84cEE2QWhOeDJ5cWlEeFF3TlBCTUhVT0c0UllNNzh5dk1VR05UZEV5NnFyVjh5ZHNBcXBjQyIsIm1hYyI6IjI2OGNhMGViNzc1NjlmMDg0YWI2NmMzN2ZlM2QxYTc4ZDg1ODE4MGNlOWVmOTU0N2ZlZDRhMGZkNmYzOGEyZDgifQ%3D%3D; expires=Thu, 19-Feb-2026 23:16:03 GMT; Max-Age=720000; path=/; secure; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVVykFdR4kfDRR9C8Qo1mbFk3omPhH%2F06ZvwXxIsxuxfL3m1wA8hgdpso4bgG75%2FKFxHlCvY5UsVtEDibolMYAbsesuTnP07BTi2RQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce227bd682b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fef09ebb9d670318133727f0786e9b6","sha1":"c42900658b23863bf605716123eee546c53d0574","sha256":"f293bbf65fe12b61314af7f6cbcb7f08771ad8d4877fa17c65c36ebaf3a57120","sha512":"f7f63b511243a3e7983670db2b42551739849a58bcb19176f3e9ed679c26572981ebef01fb3648f58d0b730656f6e7f66ea3c90d14c27a86eec9405ac7eea1ae","ssdeep":"","tlshash":"d6f02b7f19c4d4bfd59987c59842b4c877df76534b920a041be19cccca6c789045f867","first_seen":"2026-02-11T14:39:12.523137Z","last_seen":"2026-06-12T10:35:22.430577Z","times_seen":3,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117152041A042.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117152041A042.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfe-b1f4\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1vBjHfVL%2FieqqlMS4kHxCLpkBKy7JcGt3gfFWXxo0fHY3rkVrtQPf%2BHKUHP4CBmwp0FYa8TmNFcWhHQYykHbU1Wp6%2Bnkc1j0ebzcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce22dbed82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 980 x 981, 8-bit/color RGBA, non-interlaced","md5":"3636fbc8f58610e648159d88bf3ee6bf","sha1":"d1f00a26e54b1a53b057784d53bc64a437216c91","sha256":"5fa8373c2901f181f032b277935bb3ea7fe2740516f68345c8ca299b1dfd40a6","sha512":"b4233f93eee414363115993eed20f74068edd604ac8e065c0077c8d550a6c8d2803c28760a3431d3e5e7a66b6380767e024a4bd9e3a25640f1551b9e429a3209","ssdeep":"768:ZDf6Yuu+yG1/mllg05XW/fvjy3ubaSZCXBALnT9DuhLBL5Fg/4IVinhCMWezlu:ZDyru+V1OllgWQXjy3ubagnxmfugXlu","tlshash":"e51301cb9056b91816754907fca3a36537a303d4f9f029d3dd20a6f1c92b763222b6e1","first_seen":"2025-11-06T14:47:40.142793Z","last_seen":"2026-07-02T15:23:03.945717Z","times_seen":13,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151630A028.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151630A028.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfa-53ef\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QbTg0Ba8nJEOKjjUgPYItXvmxVFTdlrol7PYTXz8qDtpr92rkJpaDIVYDc7xhUXYTR8a9DcV6GnuhAv%2B%2Fl%2FLdxpCIHP4GrUYIJSFKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce232c0c82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"3de52afcbc7410fd6e6c4d5a8d934cb9","sha1":"27c21924d2fcb19443d7756102c119a3492b066a","sha256":"09fe57c5d885b35ebbab0552b076b3854e2e49dce04d1515ee8dc54933c85e19","sha512":"97a7023c142c40cd0720a9eeaaa58a45d5d488a75887e1d0316af22aed7435bcefb25ae75b10f818c444b345fefbabcd03e7b2f13fa6902e5f64ebf6cf1223de","ssdeep":"384:MkRyuFT/1K7VAVtHDBAxhw2QXVSHj5BZAa2OGNjRxoWtObz/B3E:DYYTdqAjHNAxhxGVMx2Njvlobz/5E","tlshash":"8fa2d072c803df508d08dc51818a24c273d4b5620b7e0fc18b991e698edf9f5b35b66a","first_seen":"2025-11-06T14:47:40.233933Z","last_seen":"2026-07-02T15:23:03.92968Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151535A024.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151535A024.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc06-6b0a\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PYjIAShxExqH3Zr0Frkc2fKvh6pRdFpCMXMq7fAJs9QO%2BQ9Rf69IgRTkt6QbnoFTbsyVUaBA7H4uEBT6FUpwcNUmPE4qjQad9paanQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce233c1382b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"2a49ad961ac441580835f9ab86fa7d5e","sha1":"2794ed952f02dfa51572883edb245139d64e65ef","sha256":"9fef536d25a9ca248ea2e6c3eff1c3cd649981b03d4b0db85e0afcd7e6903637","sha512":"53771acbb095d7e0764823448deb7ee37a2a02bde76a0a058404e2efbd25da3430fbe504200236069e19f82f9de21ca7325f4b684c459111e24030e2b58c1ae2","ssdeep":"384:0eXs2rR7clIAGiSGDFoOnJLEdFCCRCUpvLITRXfR1QcxtEJm02UcjgwgoYWBQKzW:0j217mqGhEdLv0ZfRtvkrw/w8l929BWo","tlshash":"d7c2d139920bc7c179038b6ecb87b0f66167f0c108f525531337a9aa24a97d4e94d57d","first_seen":"2025-11-06T14:47:40.144081Z","last_seen":"2026-07-02T15:23:03.925308Z","times_seen":13,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T15:16:01.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 15:16:02 GMT\r\ncontent-type: text/html\r\nlocation: https://www.sg-usdt.cc/user/\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkPOZtqN8HEhoTTnLKsmpREcES56xsTC3lDBEFnnzGrchsb7jp6w%2FSjegcvbmFypRdT8zpBtOtgpXwETsogcBdovTcmBfVVbFRsufQ%3D%3D\"}]}\r\ncf-ray: 9cc4ce177a1398f4-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":896,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T06:56:15.033742Z","times_seen":17575295,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/api/menu?lang=en","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /api/menu?lang=en HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\nset-cookie: angela_session=eyJpdiI6Ik9hZ0E5em1iZ3FUVlhWdWt0bkVnZ1E9PSIsInZhbHVlIjoicGc0SUNHYUtLb2haN0F6RlBTeXJ2eHBcL09TQXBjbHRJS2dBVmtLbnVvRXlHeUxkTWVZYXhEYk4xbWFybklycTFyZks1YjJBb3RLRWdmWUxFbEJGdmVWTjkrcUl1N1o4cVwvVm5Xb21UekRzY2hWS1wvenh2QnhvdzFNSE42aVFcLzl0IiwibWFjIjoiOTEwZWNlYzBhNGI4Mzg4OGRkMjExYzVjNjhhZGViMjU2MGE0OWZhMjc5MDZkMjMwNjMyNzI4MTExMjIwYjQ0YyJ9; expires=Thu, 19-Feb-2026 23:16:03 GMT; Max-Age=720000; path=/; secure; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yC6DHfkhTJHuzQrAvvUeZHIPJxQRMUYbu5wOXHhD5J%2BE9yjyXJf9OCivM9YiJ36wNTlsV9ddDfVM%2BqVJjHa5zIvAXIE9yOpnrhRY%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce228bdf82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1345,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"63cbd66639c42f5c6bd66b1914e31924","sha1":"ace85b7829c376d16b73fa091bb5d448fcfe412c","sha256":"d9ca92119b825782966adc53a8f2876df4c681605397c4bbaa3d6961e7e8513e","sha512":"2121bc6bf0b5101c82f155fd0f20dba5d090e452fefa39815dc40bf6a725cfa7b85f8889d5e2ac7779bcbda4af087ac1fe7bb0dee97886a4cbcef6434cec6db4","ssdeep":"","tlshash":"a62139ec5ebc2c2dd2f721f168e3165e208a0507d9e4b59a1beeaddc02e818183db081","first_seen":"2025-11-06T14:47:40.100638Z","last_seen":"2026-06-12T10:35:22.414349Z","times_seen":5,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151456A021.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151456A021.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc05-b9d9\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRvw4PTu8ixfVKE2riSInGXpvNFhRvJU4Y1aO2PRHa1PJ4%2FeSRxdMzRq9mOz0XH96u25mAbCxBv8m34NxUmhzqnCnJ1B%2FWBDZn8EIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce233c1682b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"7dbd404fefcec57efe6a183cbbf32536","sha1":"ea1ec3eec7ba800a2df5611c369138a3916ab464","sha256":"73036d2d09ccd5b2a04b1561b7f5f2f58691f883078d8c7480ad7bf97fade5d9","sha512":"7fed246cfe2c14d7a9e248b33be1a38dd90b159575a50732fcb3944ebdeef2f7686a8d100189adeab793a11c1df34d1375abcf572bb75709337162da4744957d","ssdeep":"768:PXtwt8W0QMPdv+HUbeeVW4D5a1dWDwtF1xzud6IJVxys59GvGGsQF:VwiW0QMFv1B81oDwtF1JGJaO9i3F","tlshash":"fb23f1ea53dfb443d47c296219aac614d57fa7710230bc78e467f0f82819b8687cb61b","first_seen":"2025-11-06T14:47:40.102399Z","last_seen":"2026-07-02T15:23:03.898428Z","times_seen":13,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/api/news/list","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 14\r\nOrigin: https://www.sg-usdt.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=5\u0026lang=en"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\nset-cookie: angela_session=eyJpdiI6Im56SFlXdXlDaThjcU01Y0dEbnY3RkE9PSIsInZhbHVlIjoiMFlJaEJJZkc2RTZDRjlcL3JmQk5RTlgwUFYzeTFPYkZBZG83S1R6NW92YXh4T2Jkb0loR2lEUXI0SllmNGZsOGZDbmpBTFM1R0c1Nk4yUVNybWlRN2EzSXJVbERMb25uT1lrTUhwVEMxMlRScjNMUjBDQll6RGx1WEZZTTNLbFR1IiwibWFjIjoiOTkwMTFjYmMyMzNhZTc4N2U1YWIxNmQ0MWQ0OTA5NzkzZmZkMzFiNGMzMmQ5OTQ0NDMwNTYxYjViZDY3NGZlNCJ9; expires=Thu, 19-Feb-2026 23:16:03 GMT; Max-Age=720000; path=/; secure; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4iaQ7AqC3Dk6hIrtbWGzdQhZw9qCJkyQqPPJ%2FFwS%2FJb5WEI8k3XlLSYM8U%2F%2B4CFS3GWcTmOrdiY%2BPJYFQWaO6Hnaa1XIgCYipG2fQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce229be182b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":563,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fef09ebb9d670318133727f0786e9b6","sha1":"c42900658b23863bf605716123eee546c53d0574","sha256":"f293bbf65fe12b61314af7f6cbcb7f08771ad8d4877fa17c65c36ebaf3a57120","sha512":"f7f63b511243a3e7983670db2b42551739849a58bcb19176f3e9ed679c26572981ebef01fb3648f58d0b730656f6e7f66ea3c90d14c27a86eec9405ac7eea1ae","ssdeep":"","tlshash":"d6f02b7f19c4d4bfd59987c59842b4c877df76534b920a041be19cccca6c789045f867","first_seen":"2026-02-11T14:39:12.523137Z","last_seen":"2026-06-12T10:35:22.430577Z","times_seen":3,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151639A029.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151639A029.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfa-b948\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDfkntAzUSlZMjeiBt%2F6kqkIKTX1ZrI14TRddoBZz2AAEo%2Bn%2B7Kevyfr%2FTHNgYovvDudhQjQoJhI1pmDL3ytC0WjGrmRUR3%2BPov85g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce232c0b82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"f6db16d40cec62ebd07fc6a3e687b053","sha1":"ad135fd00c4adb55aab606479d29ca441587bf1c","sha256":"075d18c5bf7b180b0b461d369f0e2221f60c9b0fa5ecf87d7e1186f01a89b256","sha512":"d96979a0e2fed0b43cc9d77e872e44301369b961c9b79590077c39600c5199eb0be6980a7455cf3cb610e9951fcfe384f61d80706218bc494809dafbaa1c83a1","ssdeep":"768:ZgJB1jmEboAJOHpOWmadeIAdfRizwKWd9MA2DP8LRwYIPSuBYIaWr9fOlFoKhy:iJB85EWpOWmSeBLilWVq+uBYotKFo9","tlshash":"de2302e1f5cc1106bbf249c679000fe95ebbcde59937cd97791904e0c38e951cba912a","first_seen":"2025-11-06T14:47:40.119249Z","last_seen":"2026-07-02T15:23:03.961969Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/quode.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/quode.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-453\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxjpE40ICJX7d78MP%2BAiOzJpRksB4EWYN3oraAllYvQPxIm9De4kh0D%2FMZnebH2c25nv3FnmYJhqR%2F30Wp46im3ukExyTmrNxmWR3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce249c5a82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1107,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"cc721cfd3a3ce004bb993d15b022a2c4","sha1":"65a61de1eea7a4a28c36cb8414de238e7298ae41","sha256":"935021328b2e442e9a88dc2be42ffba6bd45d492a88ff76ead247a89439f7bc7","sha512":"ebb0b0cb3a713b69a61c6bb6d8f8eabddb8f42454684da9de56e7befaeebe78d62654c564b6bb3538cf8f6454a0d582c2cba3fa73929175c247c6ad11c53c96d","ssdeep":"","tlshash":"ad11b917b35cba5cc1be12127e59557750117161471d8638b481c0473809c91fd70283","first_seen":"2025-11-06T14:47:40.261436Z","last_seen":"2026-06-12T10:35:22.506419Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117152053A043.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117152053A043.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbff-4d62\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TTuJNVis9DQzjyVwoH61pusAHA3TSinAUT1Wo3lvSZRC6XjO%2FImDPKbCeU3vEtJ%2BKYTqch%2F1RblwwcqHTCz8b1YI1eNWUSEHB6zDEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce22cbec82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"7c6f7be44b132378b59671f5797335c6","sha1":"e21562a60cbba61dc60ec9afd053b03b15217129","sha256":"64c530172b754057263d2bbcd87b5e53a0a874766e1fac44e28658e0f4a751bb","sha512":"d3d7bddfc16693924decaa16a54bb5dd5d5952de6aec2cf08600fb71d819daec1bda59cec5ad897ebcf84654f839cd8f666eb2f12bb23d0e478f5fe710ff8b29","ssdeep":"384:zfUBnkHK9CZgxVAx3fZEUNMNoBzu7O9HgFsex3cPYaIoDSgYEsqtaccWPak2QmBl:zepCZgTkfHMWBl9AFsexMsr7qAflk2QA","tlshash":"a992c0b2fc298ceed9b35ab9d96f9110368190b2c81b185f575dc84b3c9041773a3ab9","first_seen":"2025-11-06T14:47:40.138902Z","last_seen":"2026-07-02T15:23:03.918813Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/my.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/my.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-5c6\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yvvgUPy1JV3NFs3xXUut2eCTT5d6ArVcSryisJaEyKzRth7fBOqaHKtMS0mQMoqLcD7ywpGvXOnq98wCj9XCu3qNOE8xnWLo3SoZew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce24ac5f82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1478,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"7f4ede9ea09e786b1c3323cd8c82b8fd","sha1":"ab2f13e76087f6c72e9f8024757fcbd2bdd08c71","sha256":"8dea9cd107ef7c62e4c2ede19163173cda42dd2461f491ec0d917916f4777b48","sha512":"67b60cba3e5eec29b2a942f52a4c18d24972d776ae3aa8994d7573994710a7fcb22652d60ecf59c2ae105f6c9452aa783d15972343bf797c81b9a54f14e88b69","ssdeep":"","tlshash":"8431e9946bf46f8a8d273f264fa1140ae895dc8027a402754fa00ade369addf065770b","first_seen":"2025-11-06T14:47:40.18946Z","last_seen":"2026-06-12T10:35:22.41833Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/DIN-Regular.ttf","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/DIN-Regular.ttf HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 24676\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\netag: \"69194707-6064\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 2251\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kK8vzIahQ%2BWZhqEASu9Ig5anTAF%2BoAynJneZhkLjq4Ivg%2F%2BTpWKqX6nA6B752qTkuicrQULHJMlOHg1bGrEntdq6m%2Bb1gDtxNCocww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc4ce201b5d82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24676,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"1e0b91dcb4ed262d0c603006919a1fd8","sha1":"aa0cecebc344f5a3bbd614ab97a42ff8f8637d46","sha256":"4749fb5068ba31c2cba31bf6c7340977fc21cf0e9339bdf155dd57457cfc9e0d","sha512":"dc5635a9a7a8f0b3b454de6c1cd56bd22d16310a18b874f153a38bdecaf41dad5eea2405f3e092d9040f9278d37cc5163dba32f3478f91d7a6a348f4ee708bd8","ssdeep":"384:9iJk3F9sakdL5E5P/y5QJ0FNpmuJqJgkJhBZ5JeJMz1vHJb90KILamCKwL/plOLz:9JmdlAn2/pm6cBpJX2sdX4","tlshash":"9db27c0957424b0fc7277e308e2642a2d725fcb427fa9bdb9d44d8f7606d2e34c68a45","first_seen":"2023-04-17T17:59:29Z","last_seen":"2026-07-27T14:50:18.132951Z","times_seen":540,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151257A014.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151257A014.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc02-61c8\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMps02e8pJxi1%2FpI1j%2FIBGW5imGGENHvjgc2rVP4WUn370tz3bP8LtRN%2BUY0vtb1Vzb9h3%2FJBMhy1Lwz5MYhNnU7OkEtwEPUjnRPaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce234c1d82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25032,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"111555c612ed22d659f9d6ea720335cb","sha1":"3412fcec4daaffe18791fdd425bc742388a10cc1","sha256":"2f601a99e514d3097d4b9b5ab97e15c863d0319a32452d3cc12b33d45e04bcec","sha512":"4955aa8160388afd098b17223b660cc8c539a29b8226443e01b2941f68d00ebd211f0ba896021f6da251707a602961e6d31d4fe0a71c7b93548d4347d86da2e1","ssdeep":"768:p9bN8/oomvnhwPIJvgZp6YLJq6oG0sNzXiNrdqA:RdpwPG4rrgrVIy0A","tlshash":"62b2d16ab2685a7b6278ea24fbe7cdbe46d45473dc30fcbd1cd2940103121b982e9270","first_seen":"2025-11-06T14:47:40.145072Z","last_seen":"2026-07-02T15:23:03.937239Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/top.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/top.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-3c86\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MCD%2Bze53QHnUrUTY4%2FUo9dVFWMX5xeLRskpT%2FT%2BjZ5Xn6qw1keepNBolzz526tzgqLopje9U7KHipmMcgSsBM2kTyz9rxTFM1n93Zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce24ec6f82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15494,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 668 x 20, 8-bit/color RGBA, non-interlaced","md5":"b63d9ed446108e58bc4435e1cb69d50b","sha1":"04987b18dd3597275c25b05d4fc9085f04756e1c","sha256":"045d144869f43c9c72d7e224ed39815f441b24f9b5d064149053afb8b5c932ef","sha512":"c1ebe40e6baca3cef9fab44b3bf0cc1748538561f3aed5124a1540c00a7676a9d6f166d66635d3bfe3b0dfc10d10d433b3812eb998174547431c37ee532d6b07","ssdeep":"384:hXQ4K90VQCRl3hvZ11oOFnHgAd8Ak7VppXNLfMiKHCUF00:xQ4rVQCRl3hhosnHgAeL7VppdLfMiKi+","tlshash":"1c62d0b665b2d100dfad16a7e08654f57adce068e3527e4995cbf0701382a9814fc0e0","first_seen":"2025-11-06T14:47:40.217498Z","last_seen":"2026-06-12T10:35:22.456258Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1763283711254796.jpg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1763283711254796.jpg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 16 Nov 2025 09:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691992ff-1f627\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlwckxvQfmSqLotq%2FY7XtlYz1esHsloYhbSmNOlpz2YDT%2F9c%2BoUQeOPuQOe%2BmMfS95uMjyNWN9%2BJ5lCH9X35YGt4upLRp5TUsuUyhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce273cdf82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128551,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x672, components 3","md5":"1e9bea54e6fa7706e7cb4fd26c423a58","sha1":"e60eb3a93cdc9481ffe348b4da80defb54863c79","sha256":"0722119f119c932394aa717eaf21b01299c9336797cc7bfc9741f3eb106827ad","sha512":"0d8ba344998f7c0ecbbc1fb859a4461012d8191839c79dd94d38e3b278b32b9721250e738f2f44e37bfe210b2e4735003651a72188c734defdf12a62699c0ff3","ssdeep":"3072:RCjE13SUKlZcJP2/SJHjA9YaIY28Duwwo/pI2RCimvDzAivUj:RCjHtlZcJ+/cDArILIxhRCiZ","tlshash":"86c31282f7f5ecd0f980c7e5d8ab7f716b65a005cd2340bbe6a097d4b8ba5a5091c0c6","first_seen":"2026-02-11T14:39:12.667291Z","last_seen":"2026-06-12T10:35:22.514203Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T15:16:00.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 11 Feb 2026 15:16:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.sg-usdt.cc/user\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; expires=Thu, 19-Feb-2026 23:16:01 GMT; Max-Age=720000; path=/; secure; httponly\nserver_name_session=65467543910cd240d9abf189ef7da430; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnBdA9mPk4bXVlTNk5uSOxug9hpM3CTK2uWkXRt6Gt9QNY%2FIeaUv0kdoFl96dJ8RRp56i1JJQvZfqd0I%2BofCsa89vs9fPHw9ijoNqQ%3D%3D\"}]}\r\ncf-ray: 9cc4ce11fb7b98f4-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":896,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T06:56:15.033742Z","times_seen":17575295,"resource_available":true,"data":null}},"time_used":1049,"timings":{"blocked":88,"dns":46,"connect":8,"send":0,"wait":868,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/index.css","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:02.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/index.css HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-178f9\"\r\nexpires: Thu, 12 Feb 2026 02:38:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2253\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hqSLgvpiZ%2BpKwJ6DjB0PUZRkbcpHEemmO3JgCJ0RAEBcPfdj8QIm%2BncHrOorMFi4Dgti7rxRRTfLC%2Bmtt4e1BdJBCAKvhKMBitEzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce1c6ab282b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73ae6c583d02d78f81e3f18860a2899a","sha1":"07df9233fc11dddc34fbf519b891d40b2ac29c0f","sha256":"e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83","sha512":"da54ba9dbe06d8d763f3cfd64cf5babb54e761e3208c7a2f23e845290c48db8c115bb86c24262cd6c9a96ff2e51674c6d86439e1814baf2de7980f5c06349921","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nKhlvbc:VApuK7hmVrS1Wu3iG41nKPI","tlshash":"1893f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2024-01-02T00:07:11Z","last_seen":"2026-07-27T17:52:10.533708Z","times_seen":6383,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/pages-financial-index~pages-ieo-ieo~pages-index-index~pages-invest-invest.a71515d0.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/js/pages-financial-index~pages-ieo-ieo~pages-index-index~pages-invest-invest.a71515d0.js HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-e4a6\"\r\nexpires: Thu, 12 Feb 2026 02:38:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2251\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91PlxP95TY1134Z4nqTGLHAS1Gt8NPaByA3vGPAjkS%2BhFkmr3HFFgVFg5IVys%2FspOSsrINpEVH3GoKM4qRcH9c3gPP1iBDWrfivZDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce1ffb5782b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58534,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58356), with no line terminators","md5":"9e704e15de71526278b87407eaf8b876","sha1":"99ab200048255561a5eb3c520eaa2bf55cd0a59a","sha256":"f4659e874d7fbdac5e3a74b30f5cf356b897ebc38bd3060385aee55d8012ccbf","sha512":"444b56ef6092531904fe134e4d10e7aec2f0f1a450408b8e8aaf2f35531af5bcda2665d6e0d559a564839714f00a2551835bbc233b0d153ec84e156b009df69e","ssdeep":"384:yzpPMva2+1oDN6PeFeWkqTATncoCSVlyn:yVjo8qoCWUn","tlshash":"af43b38efddca0844767cf8b914137f89e3abeab42016852e9816b34cf176c66714d1e","first_seen":"2026-02-11T14:39:12.581541Z","last_seen":"2026-06-12T10:35:22.480153Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151518A023.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151518A023.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc05-74c2\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ER7wBc3U50PfazPJeQRJoCBz2JdB1CvwI%2FVtmLZ2SmlrYYM%2FZfZcPI5sjRC1BdC5Uzw0wN5K29idVJYKnu8Z4h0o9HYNVbWw1j3OBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce233c1482b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 986 x 986, 8-bit/color RGBA, non-interlaced","md5":"89bb02d9be4509f37ae89b9fc4df99ea","sha1":"5905ca426374387c60be859eb9e4c3fe2d96f783","sha256":"980e5b6f91bab800719977796261247d46350d51dfae69174fc676855385ecf1","sha512":"c05dcc4b28cc86e0355ad9b19b052489d98ef3b1d0c482c9715eedffd0314b7080f1aaa77a15c8ee30f3623210bca84b2f47a7c151b168bfbe06f1ce6382da48","ssdeep":"768:KopCsr+X4JfdPvHJ4jjAjBZ6YHqiP83Va:7Csr+X47xKjANZrKzVa","tlshash":"17d2e1e6b14005e0a0d10700f9ff9599fb1b1129671c896e5c26a7cbe066fd87d2c1fb","first_seen":"2025-11-06T14:47:40.214563Z","last_seen":"2026-07-02T15:23:03.899867Z","times_seen":13,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcoin-logo/NAS.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcoin-logo/NAS.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 08 Oct 2025 09:48:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e63362-1776\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5sQU%2BZyvnh6pRzy9OaMldiGfayoLL8LqFUmBPpXz4FRRAfwGPzcLEJuxOZ7y92yV%2FSsVdK7%2FCUQx%2BFpr09ObpV4ePkiuUap%2FreDWHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27ccfd82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6006,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"61a5206093c6998b1e94eb9cc082830d","sha1":"91e033fab0c496bf8044f67d4d9484be5a7a0dc7","sha256":"3b59d00e91a6040664a25202c669cd006ab35893022124935aa3957d0f946979","sha512":"0cadcebf00092d1f66fc7ff7d01a095cc5dd3ab87f223a79f3c1c71e612bfb2893bd8d60856c5d97c564c225f1626c8aeaca2097bf2ffbbed32746605b864510","ssdeep":"96:uCpJvvYdCumoVzIaguWokT3HGzWEZ2kvP7tdfX3fBE7MfgYGoOGVJd:DpVY8mguDkTWzWEZ2itdfXvBEDYGotVX","tlshash":"32c1c7d2d380f3f5098ac2e42f39f5b4212fb1eaab9720dc56da5a54d1079ec790cd94","first_seen":"2025-11-06T14:47:40.198769Z","last_seen":"2026-06-12T10:35:22.457709Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcoin-logo/WICC.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcoin-logo/WICC.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Oct 2025 10:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e39a28-465\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2248\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVTYZ1Hh8LUKyNoeH9mXi9tvV4c2DMXUgPWdQuDAEZ7E6PAFm19BvmFkxidzvgk1E36JfQ9jgVGyPXRPvbe7h6T21AmGzgcIBSc7dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27dd0582b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95477002e97ff9d0accc87c529f387ac","sha1":"59ce1fc3083ad7d81a6f954df24dbbf9dfeced36","sha256":"7277c68997603276c4b49301e73fdcc2cb4b831a004d48550264ec9b36a526c4","sha512":"caffe76994366627a3fb7fb7afbfa82ccc45f895a1899043c1792ad82c8b7450cc8ed9ed77ceb99e098ed592fc546c8525f47ded59d942b847acafacfc602849","ssdeep":"","tlshash":"c12111ff42718690a0ca420fff3dadd8050e75ec817a00ce9d9e875850575c1fa04d44","first_seen":"2025-11-06T14:47:40.171232Z","last_seen":"2026-06-12T10:35:22.46933Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/icon/market-bg.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/icon/market-bg.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-5567b\"\r\nexpires: Fri, 13 Mar 2026 14:38:31 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2251\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RP3xIvx%2Fhz9mB3z%2FA5mQi06H6IONdjlRe1kEnOygOU%2FgELeN4S9fX834cZZf3CNVQnNf3%2FmX0N1PGO6qyaJeRBonV61rCF9RXmfY8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce200b5c82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":349819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 523, 8-bit/color RGBA, non-interlaced","md5":"8fb1c6faa98f99ce023a9aeab0100fb7","sha1":"c0cd69c2d1adb3e8688bc388295156381a958b07","sha256":"1ea9b0057fad5c8ca7965443dd9136b232bad41252eef79a3402a632b3c5f758","sha512":"0b6f3e202937d9701d73e89985ad2aef7737b1f224aa27cb558cc078a3d6c9101b9c80720fb8e7c98e9b09842be5a9b21b3f9057e5cadb52ff02e41f2599c778","ssdeep":"6144:kNGlZp4bWpM+PPoGXdxVSh69z2t+7idgzm6xjBMR/R7ODlQiOaCbR:SuvXoGdSaz2k3zZw/EDlRrCt","tlshash":"1b7423e4e2bd7579605e84c7138866108d7760aa737c63208ff67b6b0ebc32906e175e","first_seen":"2025-11-01T17:12:28.383529Z","last_seen":"2026-06-12T10:35:22.5225Z","times_seen":8,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/icon/legal_card.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/icon/legal_card.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-dea\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f7%2FLhUQlxEfTtWJBeOUP3LhMpdxVKR%2BbAkXqxfJiSjtThxX7JnHKIzpX%2BMfIIjqGFkaxIGYKxZQu47lxJtvXP9eFJw8DWIIQMJh99Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce248c5382b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 77, 8-bit/color RGBA, non-interlaced","md5":"dc5c5ef1ed04b3547563fb87b04e071b","sha1":"b06904c5dd8a276d1de99f92c2a17a28adc61ad1","sha256":"33ab657d3951cf30513d739794db93480937d83825e12869a812626b9f5c0cf1","sha512":"41ab4f522f1f0a264757fc41bf45ce1eecbdadeb1bd3871e81e4c7cfe65855db2a1c2ec5d7fb8c2c4d7a588bf69319911d82b30eab8aacddd9d7930c859d6e9a","ssdeep":"","tlshash":"ce713d8af7d1e982d937da005c7d9127a61b44c0a5e1d0b9d5df80a2c6e6abb191a0c2","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-07-15T09:10:18.178492Z","times_seen":177,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/icon/home-nav-2.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/icon/home-nav-2.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-fda\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ihbc30RGvjGXLf0Mt9JEIaMH2Yj0dvjtT%2F%2BdEiD6EKlKkhYI34x5lsHfQsZiVDh%2B9cWkaSlCWMOtKlY6PwZSYFus%2B0nws0fI2T25nQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce248c5482b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4058,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"474bac16188e59791091077722edd8e7","sha1":"b15ee37c7d692605e567fcf01fb7f0d712634735","sha256":"a38073c4238a44acd506f7db4c00b36095a13ace3cb54fd6bc45224695b54935","sha512":"f10b66ff38e3efa4aaaca5527146aeed16beef43542b9c06e2819b5f5ca24c0bf418c92e998f4297d39a37c6beb6c9c3cbfa6b36f9ebeabfca94fed3e040b5cc","ssdeep":"","tlshash":"7481459a4368c5e8385912346d3e2bc333b5ecead992949cc3af7c05d846d6b1b2ce50","first_seen":"2025-11-06T14:47:40.181573Z","last_seen":"2026-06-12T10:35:22.441013Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/nav-bottom.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/nav-bottom.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-18191\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NPrUegDmzgZnuZnvT2Y62wk%2BqnCwsy55SHJC6PBx0kw2a5VKkIRKnPPBfnOi7VHPu8t1zeO385XtOZnCcsjPrd0wZZ7jJTf6BdKJWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce24fc7182b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98705,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 201, 8-bit/color RGBA, non-interlaced","md5":"19ad84f0a523c43f40ed6a62eb3c012c","sha1":"0162a28bf43a8bff241c9c411d09e5ca82231399","sha256":"885cb4399952a7b72fa9901303324c7d6039351fe21634024a6299c900f8de96","sha512":"83a9b516cb89698a309473ebb2edeeaf13e333bd4a3c2170c78c83c79f1b45a4e98cf2dfe8f4a672201bd84a5cde9f6237a840b4dead665c0f8a1ece1bf2ad4b","ssdeep":"1536:DZ9LSWRDbHKEq0PtGiOqfK0EhGMfRcBDjr74xi4u4+bbMHdXZCVjvCb8r6JkEQP8:DZZJj1yEEUM5ctvquVbkwXPKZ3","tlshash":"e9a3127a519dabadff77a17dc28088c92c5d9180cb39653c0c34d137d9763a0aa3db89","first_seen":"2025-11-06T14:47:40.197061Z","last_seen":"2026-06-12T10:35:22.507376Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/1759932097799291.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/1759932097799291.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Oct 2025 14:01:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e66ec1-21c6\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cqBr%2FsnI81TUIac%2FAZjxKqQ97vSQQ7mE9tXVcV3UwgOlFIOI%2BTdM4zluAKCA0I1%2BWoiXP4PPL0ZfpYBJVbCW4WWpPxekw%2FRpahmtlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27fd0e82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8646,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6d5b4d5fa1076fd069c299e6269e337a","sha1":"9bd71d1472ff39ec523711f4ba39e15dae78105e","sha256":"d934caba25d66b415f679f6b08a8ece3e10d1ce9c4a324216594493cfd42692f","sha512":"dc8f9c4e0c3cddd31befe0fdcadfaca7f4e17bcf42c5b7c9dc0e4cb990ad96e015d33a3e17b7aaa5a08af23219ec155d89bb3fcd081836426360a4c996429dfa","ssdeep":"192:eH4TtYPopn/FNZPyTxOwUVRjIt9HzSJqQ9rKtm0cB81vtw9/p:eH4Ttii92xUSKX9051vtw9R","tlshash":"d102af82b77257b19523927cc716f2cbaa6e43c1e5d250ff0341a0b997ced24c0426f9","first_seen":"2025-07-06T22:01:43.154442Z","last_seen":"2026-07-24T23:32:32.632553Z","times_seen":51,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/api/currency/quotation_new?lang=en","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /api/currency/quotation_new?lang=en HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: \r\nContent-Type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\nset-cookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; expires=Thu, 19-Feb-2026 23:16:03 GMT; Max-Age=720000; path=/; secure; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zhrNE9VUh2lR6iCUbn3HmU31o6HFQpXAOsakXes%2FlUfufvS98iHvWlLqngRTirVwFE262w55Clc%2FyYC6uxuJ9tQwTX2EJNPmmfn0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce227bd982b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17782,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a47afa3f4a750c27fd0f266b315557dd","sha1":"2d61ebabdc8a5ae0e72d3648a542fd4c4f885249","sha256":"0bf1811d4bdbfe847a513b0c47a43700b0e75e0ba52bef6862f8cbd69690ba56","sha512":"e0912905b43e5938445490a1f06ceb9fb1444b9842a4817e6ac0b216c1f5810cf43d51be2cfa21e654a18f1ff2e45c9e19bc0a184cf105398d562276da3d85b7","ssdeep":"192:1f8Xp6BCpUp+BA8ep8BPB7fp1BwujpZB6fnpkBgyapCBERqpuBTaEpuBeb2puBF1:mbP31962GMYsfKZzvu9fLHpalH","tlshash":"9b82f25d262dceb8d2f6aac2dede319e36907403adc28fc1e7dc5f8846c4566e607502","first_seen":"2026-02-11T15:16:33.208223Z","last_seen":"2026-02-11T15:16:33.208223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117152031A041.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117152031A041.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacbfe-8234\"\r\nexpires: Fri, 13 Mar 2026 14:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2249\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nxlSMNUh4NNSA%2F0DiOMWma9qMizoT8N7Db0g0%2Bv2yN%2F0big%2FWGyaqfDUlg%2BEfgc9T2jzD0sEsCJf7uAY2r0Lk6j566gO2UNb2A73NA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce22dbee82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"13783ff09473cda812434eb2196f951f","sha1":"e10bcd155ea7f71853029d7d82b9522d8b552120","sha256":"0318dad72528488fb6b6300708400b6809aabcdda9502f8a4e8d37c6ea178738","sha512":"3d3a4dff92c535cc46ada35d5b20de309c88cf697ed7384fa75e0b7e8bc3df6f7090300d42acdfdb1c7b38ae002e61361d98c0f54960b3debd38768e372d84c7","ssdeep":"768:sHl8MF4yNntJRPjdNLUiKX/TuhgPb185C:o/nbzNtKvTuhgjK5C","tlshash":"c9e2e1414bd24cfecab124639a9a6bf13b43630867f461397b2331bb05499fe0525f6e","first_seen":"2025-11-06T14:47:40.260134Z","last_seen":"2026-07-02T15:23:03.950693Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151126A008.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151126A008.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc00-55aa\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UzwEVoWTe2DYTSyxufm3QBo4RPtRI46WhhcuEWPq9%2FH40AplYH36zZUCQ1JzIcXPB8UJkSCeCEOsT6jOygtwY5phXh%2BOL6uNqVGsqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce237c2482b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"252e1fce1b90f122ac13a68518570e44","sha1":"f2f069cf400550b2565a96e6afd3e4a5bfb5f65d","sha256":"3c548d965cfc74226c6faf2ceef1be836abef8f25b73a48ebddb84cee3d0f54c","sha512":"4aba85d077fe3c847eeebb20c298bd0bf5c0dec7be4327a457a96a5f72254baa7bafbdacd19837b4ebe6613097bc79db90e3e854e50f1da178d0d6594daa6606","ssdeep":"384:TZbJQqhnRrQH8udpAzPAq8rhEi7cnogyVDZfons3ADzvZpOr9KSlwZaI2:LQqhRscudp3qAEifgxCA/ZpOJ5lwZaI2","tlshash":"a4a2c0eb6a85ceb0195640f534bf52d2f16eec72562269462affe0d780031593a3f4dc","first_seen":"2025-11-06T14:47:40.224966Z","last_seen":"2026-07-02T15:23:03.909576Z","times_seen":13,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/icon/home-nav-3.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/icon/home-nav-3.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-d8e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fj8Cx%2BkrZ520E2DCCjFZT6SLYKWl92zaPipwBkFpCSu7Kt3ckaPfL%2FMNB7wN6MBnzaYB5pV2A62ntFIyyCl73KNIaWFfwQxjOHCjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce249c5582b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3470,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5802a3b7bd73f5d21dac67055065116","sha1":"0a400ff2a6473feeadd63f1b800c6a6fd0dfa16d","sha256":"e9b593075f3ea162e0f9090be67554ff69b4debb93c7196f62d2a9a816d2a9c1","sha512":"03a76f98bc59ff07f5bff136ddeec5774395b74b25effb39474a8e0241e7516f08f8db00aa918d20aa238cb12194a726ed64c889a606b04c4e211ae7200a42fb","ssdeep":"","tlshash":"c5616469c33486d438880328ed782ed337a5788e4972d19c975f3c16a287d6f2b1dd64","first_seen":"2025-11-06T14:47:40.140049Z","last_seen":"2026-06-12T10:35:22.497944Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/image/bottom.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/image/bottom.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-2280\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pMlu4w%2B5VFeiET1YIFmzuKdhbUda%2FQYZDRA4ssXILRK3xyrs9u3eTnjwdTegSMoSQZzFobZoP2X0qJf0nQMiO2Q7Njpyg64axOYMwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce24ec7082b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8832,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 668 x 20, 8-bit/color RGBA, non-interlaced","md5":"8fed852d00a1c6f65e9914017fb2720a","sha1":"82e50ae93c57e252e7bb1d82aa499cf377b54d11","sha256":"a7327755835fd8aa934c6a52df394559d09537037c27268692e1169e24fd8673","sha512":"511436dfd62ad7c118ece667dc56fbbe78b50b53f5f6d0aaa2303c42f2917d8137496f6ed184ad5eecd8bb1386fa54c58d5abb1506aa6c82b6f57ee981af08c2","ssdeep":"192:DPMtK72A+/y5XduJEk+oZUcl0Gia8Fj8/8RyN3kqy+l:ot4+qxduJZ+OlfWjbqyM","tlshash":"7f029f64881b023f8a5c14d2c9c1ea41e9d6197d7cae636425d39ce90d5a82c585ff8e","first_seen":"2025-11-06T14:47:40.184515Z","last_seen":"2026-06-12T10:35:22.482227Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/iconfont/iconfont.woff2","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/iconfont/iconfont.woff2 HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32744\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\netag: \"69194707-7fe8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 2249\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=idOjSw3htyF6XQIboosoYwZy4O9r7N2UmoKc%2BQou8Yyuq6391rPAQKimGI%2FtBNgvHpIwgfmW2lftcHZoUuGDHSWkyuaAmcejNR91Ew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc4ce250c7982b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32744, version 1.0","md5":"5b8f35b173333c5161098c675e902401","sha1":"c33837d28eff55458d49ef00e68ae9a04da46f05","sha256":"912327f77b1b2d3092e0cda25efdd0c5045ef17d018864d1cefba33db7727fce","sha512":"38a8b9a82c69376f1664e4e76f31605a6ad31e611e2f282c46a40044624072a48ed8f9fd49735136afbd21ba61cc9ac9795828e6fcb33ad4b662bd41cf6b4084","ssdeep":"768:9P1NcXcebJOUlU8WQKAfiDvCcj+IWL3OJ:9dNcXceNOUSD3AfmCcfJ","tlshash":"cee2f1303175ab40c3e6ef396e7b1c46d8724a3892785ee1e3d16e4d142bccd19d5a2b","first_seen":"2023-05-20T12:09:29Z","last_seen":"2026-07-27T14:50:18.089646Z","times_seen":440,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/index.ea738d31.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:02.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/js/index.ea738d31.js HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-edb25\"\r\nexpires: Thu, 12 Feb 2026 02:38:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2253\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlnf7WKmJyR0kCoV1%2Be2K3DGYcefH0KsvLgXqX%2B0%2Farga4c%2Bz8gybukfW6YLswDFLMWWvTIe7DGIQG7hNADbsDVjnMZgDGbm21G%2Bcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce1c6ab682b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":973605,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27960), with NEL line terminators","md5":"3b994b4e55897bc40071206b3d05f94e","sha1":"c83d0ecb0679f593d774d9b7294e0ea76a0e0221","sha256":"c798b2c3a03cf6afb23d11b40b6b2f178eb6ce491b620967ac4700688aca0fd7","sha512":"c942abf6ac56e500f046aafd8a26157a352d3fc8f899a8378df4e432b9160f1ffb961f522aa0b1214ab5c7b2d15969e54020e56e07c884d5f4ca5b96a0e9c9c0","ssdeep":"24576:x7ZdwG1ZAIkKDJ3bys5XrHeg05TtWVucM6WjMp:KWVu1nk","tlshash":"8825398ab6c4a33412d73601a18b363953bded356147b4eef3c4aa54c797a883321b77","first_seen":"2026-02-11T15:16:33.212393Z","last_seen":"2026-02-11T15:16:33.212393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/user/static/js/pages-index-index.287da0e9.js","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /user/static/js/pages-index-index.287da0e9.js HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 16 Nov 2025 03:37:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69194707-9d6b7\"\r\nexpires: Thu, 12 Feb 2026 02:38:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2251\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZGnIPfp4BL1sMkfEyWouMaBmDPacrxQCquY7q1rHELnnGzN3L2iDCNhTTwMINoKDGQzA32unWuYQRYpYuGncMsBGom7yL7ejWJfiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce200b5982b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":644791,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65180), with no line terminators","md5":"262ae341eb282ac667228b1b4cf3afea","sha1":"1bad373cf76c1cca49b5835b5338e43b68b24d9a","sha256":"a9f412be4d167ab44597aa4a37bc66f8bbd33bd68caf269d8cdef662b91cb439","sha512":"afd4b00746f87b22bc6cb8b52d6183eef51804a70d69fefcc5666737aed0832568344e1349be8004ec536c7c12ab860cc172421d1e8f2b890df80db444238560","ssdeep":"6144:2GuqOGkXmzIBRji7YEqHA5Rgkol6uqgG8l0nLpNm1l2oBhmkeFj4CGSt:mtAPgr6NnLi2oWFj4CGk","tlshash":"1cd407c2f6c830184177d751c04b62fcaa36ae27d105e485f55dff644f29aca3a2aa3d","first_seen":"2026-02-11T14:39:12.748053Z","last_seen":"2026-06-12T10:35:22.499202Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcion-coin/20231117151440A020.png","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:03.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcion-coin/20231117151440A020.png HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IjJER3k1UDBtazhcL2dhSk1OSEtFSEhBPT0iLCJ2YWx1ZSI6ImtFbmxpZDgyOHh5Y3pMTXZOSXhhemozYWdaODRVMTJMdzB5VTltak1ZMEhlcGhrZHBPSGxUTTdaWmkreCthOXpoXC9KY1VNRXVhQlRnREJ0U3piTFJLM25wWlNFQkJLZU5za0RMUUZjeFZBMCs2YWdVVkJGR25nQ0YyNURQWDZWTyIsIm1hYyI6IjIwZjU0MzEwODFhYzU3ZjY0NjdjYTEwNjAxNzdhYzBjMjViYzc2MzM3Y2YwZjk3YjVjOWY4MTA2YjhkMzMwOWEifQ%3D%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Oct 2025 21:28:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68eacc04-6bf1\"\r\nexpires: Fri, 13 Mar 2026 14:38:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iieQPpkQiLa4iaVbIN5%2FlRBHv6UeSwA7%2Boepjmj9OiYbAnriwRH%2B4ETpVd2xutzTkLzk6fo9a6ecfbcjBNWMfhfIiSx4kgCNM2o6gA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce233c1782b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 991, 8-bit/color RGBA, non-interlaced","md5":"92db89c063d5605bbc4485025cb2c851","sha1":"9cc5a8d01f576f8e1fcbf609bebde8db87c29234","sha256":"3c75c97b54fc2c729ceaa92fe452a9588f557166581e3bf3d86b41fde0378916","sha512":"810080f1efa65b0a94c5f5cc7aa95187165a468e7dea12662da7365e10bee9868559ee13368858f343954fd70c9de7c215fda0280c14c8d40ab6055a1c535b40","ssdeep":"768:scYbTGDnEl4rjAkD3J4sa6qu+yX/O8LTeK1SW+Y3IwaK1wEx65:svbTGDn4e8MJfaLymcHuwaKKEA","tlshash":"f0c2e031a17b0cbee103103fe0674bdca1af0f39961a4765ba69d8275f441af52d89e3","first_seen":"2025-11-06T14:47:40.123325Z","last_seen":"2026-07-02T15:23:03.904788Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sg-usdt.cc/upload/bcoin-logo/HASH.svg","fqdn":"www.sg-usdt.cc","domain":"sg-usdt.cc","tld":"cc"},"ip":{"addr":"172.67.214.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sg-usdt.cc/user/","date":"2026-02-11T15:16:04.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sg-usdt.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 06:30:28 GMT","end":"Tue, 14 Apr 2026 07:29:09 GMT"},"fingerprint":{"sha1":"EE:0E:D2:FB:37:E4:E7:E4:58:22:58:15:BC:37:E8:61:2A:85:88:CA","sha256":"C9:01:E1:C3:2C:AB:0D:40:9E:71:7E:E7:A4:19:94:53:23:A4:12:59:33:96:74:21:89:D2:6F:39:10:30:31:01"}}},"request":{"raw":"GET /upload/bcoin-logo/HASH.svg HTTP/1.1\r\nHost: www.sg-usdt.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sg-usdt.cc/user/\r\nCookie: angela_session=eyJpdiI6IklIWmJ6QUxOaHJxcGV1OTIycVZNdlE9PSIsInZhbHVlIjoiTExuY1pKV3VvUkRTUHhEUENiXC9raGZVM2NCMnlLWlQrWHI3VXpsRGd2YzNMU2lTdEdFQWg1aTI1QnFpYmJCbE1FU2JraDB0a0JpZ3JtOGhsQmQ4V2hYRElvbHNKYkRGQTJRM0IweHV5TXBub2xoXC96d0hwMDhIZys1dFwvNmhqclciLCJtYWMiOiI4OTY1YWJjZjY2MTViMzg5YzIxODIxMDdmOTlkMDZiZTk2OTMwZmM2MGEzNWE4YmI0NGQyYjc5NDAxZDJhYWJjIn0%3D; server_name_session=65467543910cd240d9abf189ef7da430\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 15:16:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Oct 2025 10:03:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e393d9-20ba\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 2250\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S7ipotBth3RF%2B0DIokCOtkiyd%2F47me%2BjFQ4LyC3e5qKWtDjP6IWi1VcsZm8klElNvaWiojCJSCj0MaTiaaKIVvvxeLc%2BaglAQKUtqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc4ce27bcfb82b3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8378,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59ad937ac644bff1fc763b71cccc7aff","sha1":"1cf92168d253986f255e00afb393e0089531373b","sha256":"ebe7cc1904b1dea7e38e52a09c61c502b333818c32454da3c721086d4439c4d6","sha512":"76566069b395d4056fc416f2108c2bc196080dbe171aa17ceae37f6e63b41dae9219d27f94885d1125ef98e1f356ae2e15354d8f4f36f6966f970074071fcce3","ssdeep":"192:d9IMtzc9SYSniMJsHnvDa63L/dyrqj2ri3Eyu/sIj:d9dIcndJsHvDa63bdyrqSriUyQsIj","tlshash":"df020e26730c7336361a83ea1e78f1b1d15e50ec9a6e46c934c70744875eeee5e8c9d8","first_seen":"2025-11-06T14:47:40.251725Z","last_seen":"2026-06-12T10:35:22.519735Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}