{"report_id":"f73f792b-5442-487a-96aa-f1f13dcccd62","version":6,"status":"done","tags":[],"date":"2026-04-13T03:26:56Z","url":{"schema":"http","addr":"mr-usdt.club","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":0,"asn":0,"as":"","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"mr-usdt.club/","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"title":"MR USDT - Tether Cloud Mining","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T02:45:00.455968Z","times_seen":17966304,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mr-usdt.club","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":0,"asn":0,"as":"","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-18T03:26:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"polyfill.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"mr-usdt.club","ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"domain_registered":"2026-02-28","domain_rank":0,"first_seen":"2026-04-13T03:26:57.486673Z","last_seen":"2026-04-13T03:26:57.486673Z","alert_count":14,"request_count":14,"received_data":1908162,"sent_data":15895,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Polyfill:3","description":"Polyfill is a service which accepts a request for a set of browser features and returns only the polyfills that are needed by the requesting browser.","website":"https://polyfill.io","common_platform_enumeration":"","icon":"polyfill.svg","categories":["JavaScript libraries"]}]},{"fqdn":"polyfill.io","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-03-18","domain_rank":80905,"first_seen":"2016-02-12T00:04:58Z","last_seen":"2026-04-10T06:23:49.991791Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":876,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":3,"received_data":221397,"sent_data":1605,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":10318,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/assets/js/theme.js","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f699d79daf685df97cad749cd1351c4e","sha1":"d70c9b457a7b051e8da3edfb4e1c5108a27af61a","sha256":"5133be9b5cb8f688e2c46bcfd846756755610bd8a1a629c985118a992c9d8e1e","sha512":"5d45432c94bde93045fd83ed70e06e8482c2c26241e4f3f795efa8a951f43b1599e08586406628f96b7696a543a2d9dec5c7451cb841736ed74e3178a2217f29","ssdeep":"384:zWg0lv84CjbZlCG6xHxtmLoHRdJXsywZuI0p24mgbBMgxq:zWNlvjgbHCxxHxtmLoHRdJXsywZudp2p","tlshash":"d052b85f5cf220a224a7e03a21eff704f8560443840ce9567dbee6946f1066791beede","size":13431,"data":"","first_seen":"2023-08-06T00:19:46Z","last_seen":"2026-07-22T21:59:48.536935Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/vendors/bootstrap/bootstrap.min.js","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5730588db13e71c65bdb1d234089260","sha1":"282209ef6065e8451a5623c1b208d256d7b14c27","sha256":"77e1728245a0c2de7d0859163ee081e1113aa75fd6894602cb5eb0d7e739bca9","sha512":"10a596b3565c036658f656cb2123f3f1a191dbe2fb25562a040613ab90178019128d14ae4041aa5b1f11d73017d7a29d5cf6828ce09a284f0c0a9534c1c1e51c","ssdeep":"768:Gs1FOa1EatDEOyStIzhgAQD/BExN8TVO3cQodO6/2Vm7MTRAxmYIZ9tFepWOgdJK:G9i5G/M+ThF6n","tlshash":"9a43b45a3258b87309de44a68076470bf7255d94b047812cb9bdacee1b3dc8272b7f78","size":60091,"data":"","first_seen":"2023-03-07T12:10:18Z","last_seen":"2026-08-18T11:53:40.429056Z","times_seen":12719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/vendors/@popperjs/popper.min.js","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e6ef063fa41ff8d8c00956a7cd3fd9","sha1":"8eeb7bf71e8a978b82a1a198015f14d73d2ea592","sha256":"5a07c69f9061eb12e39a031358a4f567f30a002ad6182639ac84fd1bda2f6e65","sha512":"dab363d8a27e0fcb3571e35ab1321ec7acf81d6c8e9c460b542dc58a018e9b240265cd9e0572a03b1426a37a0a2c7c9f723e77bb3e1032c44258d6cb777d90d6","ssdeep":"384:PDzk5KmEpLFd7tRwQZMVwAVfbsnmlHiBnjLU4MSV1Nn1awap1P9Vy8UuZHFh+L4O:NmERLwQZcFVLCBjg4MC1Nn1ip1P9Vy84","tlshash":"5d82c6cd3994f0a1167b52b6c07f550f73339561228ea410b255d6dd2c74ebba22bc3e","size":18594,"data":"","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-08-19T00:38:05.684973Z","times_seen":5760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/vendors/is/is.min.js","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c9dca2a19f05dc6d7b1afa3244a8f6b","sha1":"4a8519b04be003f12a833e634ba5736a6634fa19","sha256":"96725eba539addee483b61331ebf23289dc26d3f34301c244b96be9f6a2822be","sha512":"0ef85551d416608f54a05e47187865d349db50572bfa3e9d1a583f152ae896a47712b89d13c085f369c234066c1388803e4c3fc2cd0eec8ad9d63394b89417c6","ssdeep":"192:/Q9B/+ZnHDVD5XlBQiAhkWZc682vLHIFO7APTKpXYx3b7zi5/8:/smnjD/QiCq682sFO8KpXYx3u8","tlshash":"b942748df5d2f01d8357baa80a3f4106f23bdee5d88e5128d664d8913cb480ed57af98","size":13181,"data":"","first_seen":"2023-03-07T01:35:45Z","last_seen":"2026-08-18T21:35:39.503697Z","times_seen":740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcd108b2b3d47bc5fa6d5fca10c0e80e","sha1":"16fd3ec39f04ab775d4d3f28aaabb91a8bf06551","sha256":"acac2f20e91a4e9711c999686066019003d08267ef06999a8f4e86ff2ca2f6ff","sha512":"31f536a23f4c186077858ce70ee180a4ba22a20b2b1a896b3fcce9991be675fd1a3e43a04bd1177f603052f38271e3b3209808204b90d4988cff3231cc80faee","ssdeep":"","tlshash":"daf02b3a0ac6fab4ae31b0e5d34fb30825f635d508c35114c03c93457ca447bc2a68c7","size":539,"data":"","first_seen":"2026-04-13T03:27:01.538609Z","last_seen":"2026-04-13T03:27:01.538609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/vendors/fontawesome/all.min.js","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c05471e32e0ef2edf9661706c79885e6","sha1":"73bb8a639d443300b5516e43135733815a668921","sha256":"bb5d7f5d023603a9a95dad23d69d25d14a4edd9ba2313227194a9a4f62bd6564","sha512":"4577fe4120c2510b39bb044a683a17b79e63ca06599b657ef9651976e694fd48bff441a9ddfff629955a8456412861f4b3bef8b1ddc79ab854cbe4a038540b55","ssdeep":"6144:myompD5cEYjS2sDVW4o3ch/V2Dnio/NULo9tRtKehVs3O3seX/YJF2S8eK8wDKSH:zD5cEJh/wtRwf3O3l00","tlshash":"ec45d578d7a4a3bc9d8687b5c62110747a8f90be71a09328937dc6f0b2575dcc2dacc9","size":1195450,"data":"","first_seen":"2023-03-07T12:10:14Z","last_seen":"2026-08-16T21:34:55.906575Z","times_seen":1329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/livewire/livewire.js?id=5cdaa3ec393c09829366","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cdaa3ec393c098293666a1a69eeb311","sha1":"45e20c4a2ad11fdbe6507b3aa731b340826a2669","sha256":"90b371dcd1e5e1455b51c7b0759945859cf1228340f7a5900cd44c1b7ed66c55","sha512":"4bb3dc34851904ed56f5a6d89f4a00352eadd3e0cc801ca9aa45936cdcbb1d410a72e2628493ebcf34f4f203c2ffe4222d65b3ccd65141fe6254ab74b0f97122","ssdeep":"1536:bFWbBs025VQpotIfUoeR9g6qpvWuPkbEyVnw7lxCGuIHIYMx0suDbk/5UK0t6fZm:5KyLBtuU4DpvVZfjuIHIYhvt6FEOySW","tlshash":"e3f33b99b6c1f1b248c77164643f3a0fb2762054589d9090fa79cec07eba948522bf7f","size":159027,"data":"","first_seen":"2023-03-07T12:27:00Z","last_seen":"2026-08-18T06:47:06.895249Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f393d77e2e2834a1a0306900557109eb","sha1":"6b37f9ccedbbe18424095973bea5cb6607f6cd41","sha256":"802363cbbe7dfa55962d1fca26238eaa459752e695dca83ed5e54f40d27e79e9","sha512":"7ffd02ba759f475154a2b78e78ab90901c68ac110571942b8d2b1798a4fce1fd532cade8d6e249bf09aed8577bcee4defcda94ed4d62003c2a89b93efbd25fac","ssdeep":"96:ps19yHZ9RSCEF4R/SHpFgSPkg3+26iUYO6ejO7:pI9y59RSCEKR/SH35Mg3+piUYO6ejO7","tlshash":"45a1200972b32a19a213317eab5772091627a0032e85ec9d7dccc34c1f574a65fb9be9","size":4953,"data":"","first_seen":"2026-04-13T03:27:01.542193Z","last_seen":"2026-04-13T03:29:19.822933Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/vendors/bootstrap/bootstrap.min.js","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/themes/frontend/default/vendors/bootstrap/bootstrap.min.js HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 17 Jul 2021 11:27:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15427\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60091,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59812)","md5":"b5730588db13e71c65bdb1d234089260","sha1":"282209ef6065e8451a5623c1b208d256d7b14c27","sha256":"77e1728245a0c2de7d0859163ee081e1113aa75fd6894602cb5eb0d7e739bca9","sha512":"10a596b3565c036658f656cb2123f3f1a191dbe2fb25562a040613ab90178019128d14ae4041aa5b1f11d73017d7a29d5cf6828ce09a284f0c0a9534c1c1e51c","ssdeep":"768:Gs1FOa1EatDEOyStIzhgAQD/BExN8TVO3cQodO6/2Vm7MTRAxmYIZ9tFepWOgdJK:G9i5G/M+ThF6n","tlshash":"9a43b45a3258b87309de44a68076470bf7255d94b047812cb9bdacee1b3dc8272b7f78","first_seen":"2023-03-07T12:10:18Z","last_seen":"2026-08-18T11:53:40.429056Z","times_seen":12719,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyfill.io/v3/polyfill.min.js?features=window.scroll","fqdn":"polyfill.io","domain":"polyfill.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.769Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v3/polyfill.min.js?features=window.scroll HTTP/1.1\r\nHost: polyfill.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T02:45:00.455968Z","times_seen":17966304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"polyfill.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/vendors/fontawesome/all.min.js","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/themes/frontend/default/vendors/fontawesome/all.min.js HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 17 Jul 2021 11:27:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428515\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1195450,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65350)","md5":"60ce7b2549aaa34f34d9ffb2ce4b3844","sha1":"bbdb33fc831df9d57d9e778b25052ed932da08f5","sha256":"a8bec2e01df22b1454b92e447a835ec0047fc2c52fca331f4dcb8ca645ed5d43","sha512":"0de49da20a9d0df4fe5bcacec51473523ca9e35aa21ecd2b07e4c5e570e66b9ddfe9f7bd80ea07f1fd5ee8699fc6befb9b1f2c98979b60a2fad4d95e7cf8463f","ssdeep":"6144:myompD5cEYjS2sDVW4o3ch/V2Dnio/NULo9tRtKehVs3O3seX/YJF2S82:zD5cEJh/wtRwf3O3l0","tlshash":"8025c578d7a4a3bc9d8687b9c62110747a8f90be71a09328937dc6f0b2575dcc2d9cc9","first_seen":"2025-07-31T21:52:02.486409Z","last_seen":"2026-08-18T11:10:38.52713Z","times_seen":1135,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:35.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mr-usdt.club\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 01:57:03 GMT\r\nexpires: Sun, 11 Apr 2027 01:57:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 178172\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-19T00:00:53.816019Z","times_seen":32257,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":124,"dns":1,"connect":20,"send":0,"wait":22,"receive":38,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/favicons/favicon-16x16.png","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:35.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/favicons/favicon-16x16.png HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 20 Apr 2026 03:26:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Sep 2021 21:57:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2001\r\ndate: Mon, 13 Apr 2026 03:26:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"429f3ff852927c7db9ccb1c7c3be0ce3","sha1":"6f481448cd02455987ab72a33b36706c4824eb1d","sha256":"d3281e61aea597023ba6043b38af2a1ef609d865ec0af68c6680573ea77ad3ea","sha512":"5f6646293d6ec19e612f19c74062f4f3bb7f3e5cc81944a4ceaba0915709332e8e24a691d188a501f88b7f22a852079de2bada66ac02cb44b5a50aefcacd3ac5","ssdeep":"","tlshash":"7d4173c5e992f03a8deb2442a908064c8a03d587f6c5c35e73619e04885e5fc62f8f6a","first_seen":"2023-08-06T00:19:46Z","last_seen":"2026-04-13T03:29:19.810886Z","times_seen":25,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/assets/css/theme.css","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/themes/frontend/default/assets/css/theme.css HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 20 Apr 2026 03:26:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 17 Jul 2021 11:27:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 36763\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":375655,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (480), with CRLF, LF line terminators","md5":"a08a0441203b8e6074512b21be19807b","sha1":"5fc0fb4f6448751fcb424e78828a81550688fc8b","sha256":"6f93099d4951dd319fbf9ded8a34e917620c228306cb85ab1538b1b61b7d149d","sha512":"165f13523b9473dd4a42e36a3a082095a7bd4da94dcba2ad42e6e37d46081b737f1811a0931903a8e354d0fa9a282f9521c52ad33156290919bee58e7372ee36","ssdeep":"1536:VNlbf/1c8/RwvngWbd+A3UumQ+y6Cn5ZaCokUomp78N1l/atdow:ncGxkUomp78N1l/4","tlshash":"d184db9afde11508756ad66895dbbbf9bf7c8043c209ddba79c23230cf067c248d6948","first_seen":"2025-02-05T17:08:35.555732Z","last_seen":"2026-07-22T21:59:48.542879Z","times_seen":18,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/assets/img/icons/users.png","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/themes/frontend/default/assets/img/icons/users.png HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 20 Apr 2026 03:26:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Nov 2021 20:33:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2532\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"e95b0b84f69957ded2865bb0e0ba670c","sha1":"73907fc94ee453bd56171852768819232b3899fb","sha256":"f04511c344afbaadbb1d1ba76e0a6650a1544941e0638255591f132db95b7dd8","sha512":"adca16b059037a2981c2dcad1affde811bd018c083100a5fe9b6f1b7ec99b39cea67ebdb8d829a7b6599eb48d982e490d5676e6551b84f21b292c7490da03c00","ssdeep":"","tlshash":"30515cbe471253a40e050c8b0bf6bd9017b2278ad25fab2c84bec1096ceb6c915df150","first_seen":"2024-12-20T20:36:27.298613Z","last_seen":"2026-04-26T07:02:45.088302Z","times_seen":12,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/assets/img/icons/wallet.png","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/themes/frontend/default/assets/img/icons/wallet.png HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 20 Apr 2026 03:26:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Nov 2021 20:35:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5179\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"e79cad73c18d3fa998fac0c24d0054f1","sha1":"d6f13a347a6b34b47d0068d4dc24576e23fa5bf4","sha256":"db1add7a4cf055b776cebce168c86cf4ee04d5d8d54d252aa4412d52fc090bc9","sha512":"c969ed60557b5095e56a79cd9c061762fd3ba624851040a44139b5ebb0d6e76ad005a5d4b7b944088571a03e67f5dbbc136fd4d19f08e42895c4277bebec044f","ssdeep":"96:X0GiJKAtRVm0x9QZlQLkxFLYw4xLDii2ou6uMHL5CA6LEeCB:EBJuZGAxF8wYLDt2/Mx","tlshash":"1cb18dfe500dfcb4f938dc20025a072bc82a07ad4445ef75dc8338cd3146a6ab725a69","first_seen":"2024-12-20T20:36:27.28315Z","last_seen":"2026-04-26T07:02:45.066029Z","times_seen":12,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/vendors/is/is.min.js","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/themes/frontend/default/vendors/is/is.min.js HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 17 Jul 2021 11:27:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3930\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13181,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13132)","md5":"5c9dca2a19f05dc6d7b1afa3244a8f6b","sha1":"4a8519b04be003f12a833e634ba5736a6634fa19","sha256":"96725eba539addee483b61331ebf23289dc26d3f34301c244b96be9f6a2822be","sha512":"0ef85551d416608f54a05e47187865d349db50572bfa3e9d1a583f152ae896a47712b89d13c085f369c234066c1388803e4c3fc2cd0eec8ad9d63394b89417c6","ssdeep":"192:/Q9B/+ZnHDVD5XlBQiAhkWZc682vLHIFO7APTKpXYx3b7zi5/8:/smnjD/QiCq682sFO8KpXYx3u8","tlshash":"b942748df5d2f01d8357baa80a3f4106f23bdee5d88e5128d664d8913cb480ed57af98","first_seen":"2023-03-07T01:35:45Z","last_seen":"2026-08-18T21:35:39.503697Z","times_seen":740,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:35.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mr-usdt.club\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 01:57:03 GMT\r\nexpires: Sun, 11 Apr 2027 01:57:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 178172\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-19T00:00:53.816019Z","times_seen":32257,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":197,"dns":1,"connect":9,"send":0,"wait":21,"receive":14,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:opsz,wght@14..32,300;14..32,500;14..32,700;14..32,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:52 GMT","end":"Mon, 15 Jun 2026 08:38:51 GMT"},"fingerprint":{"sha1":"10:68:A1:B6:6F:BE:E8:57:8D:53:84:02:27:8F:E5:B8:83:ED:F1:68","sha256":"19:3A:7C:96:C1:4A:DD:40:D8:24:D5:6C:D9:2F:3F:74:1E:19:64:E6:F9:D4:88:68:56:D5:DC:1D:17:B6:21:BC"}}},"request":{"raw":"GET /css2?family=Inter:opsz,wght@14..32,300;14..32,500;14..32,700;14..32,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Apr 2026 03:26:34 GMT\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9632,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"06a6ddd63430eaaeb234b17af9d507f2","sha1":"71147b783557db619b53c77e306e0f4cc79e3a44","sha256":"df186884e2f6af8ad2654179efd5df95157914b36701fb48213d5b7e0c8334dc","sha512":"55a36d8e156fd4bfad95d935bdefff8d66106366d2ab7ebdd7a543635e688963dd34af4e2311ce7e27d255fad6fc372d51e10af7dee9e2bc9aee897c7b562db3","ssdeep":"192:w3AI7j3l9fig3OWJj3/Xf8q3EM3j3RpfGD3xp2j3kMfHN:IN5LJ5a4t","tlshash":"cc128a91006be500af431cda23df7e366d8e15966082d57e9bfd1cc9acead22032878d","first_seen":"2026-04-13T03:27:01.524707Z","last_seen":"2026-04-13T03:29:19.814367Z","times_seen":2,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":182,"dns":1,"connect":15,"send":0,"wait":36,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/assets/img/icons/vault.png","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/themes/frontend/default/assets/img/icons/vault.png HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 20 Apr 2026 03:26:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Nov 2021 20:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3630\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"2307d812377e913e9ce1da7e6b16a1a5","sha1":"6e5338314c6d7887caba4c66c11703a196c9dfc8","sha256":"9bcc4d422fec12feaa2eec1bf94b4eba89095967bdbaa1d2967db9bde5b7256c","sha512":"b2e17c033d0362309a2cd8aa7af0729ef1609ae7ddb9171737faace119ee253c12e93420e2837a35939c7a8df6cd807bbb8b87d7cb1a4cddd4ee534fdce864ec","ssdeep":"","tlshash":"17714c8a119e389de156232bb6cd8b79f6fa3cca5819a387d1cf0b4b402187470903e8","first_seen":"2024-12-20T20:36:27.290462Z","last_seen":"2026-04-26T07:02:45.081768Z","times_seen":12,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/assets/img/icons/calendar.png","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/themes/frontend/default/assets/img/icons/calendar.png HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 20 Apr 2026 03:26:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 13 Nov 2021 20:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2951\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"e535e9c8132ce13d8b1473655c497d31","sha1":"c6a8c5cfada2f0aa8b6e99a279fc7be99998fc4b","sha256":"a04dfa8ffc6a9ca19fbbf433bb780492460703821a08171f07559f209f10d06b","sha512":"95194e76149707a93fa0579453cef8e80c6f20eaca13557c1dd29ca6e25a0a06f9d458e44808113fe42733ee37b459f6342ce43f09b2956dcee0ec50eb9f27c7","ssdeep":"","tlshash":"cd516dfb1760810173be00fa1d0c129126ba53a32f6d9b2dcf9bfe071201a011b065c7","first_seen":"2024-12-20T20:36:27.293757Z","last_seen":"2026-04-26T07:02:45.072923Z","times_seen":12,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/vendors/@popperjs/popper.min.js","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/themes/frontend/default/vendors/@popperjs/popper.min.js HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 17 Jul 2021 11:27:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6434\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18594,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18506)","md5":"83e6ef063fa41ff8d8c00956a7cd3fd9","sha1":"8eeb7bf71e8a978b82a1a198015f14d73d2ea592","sha256":"5a07c69f9061eb12e39a031358a4f567f30a002ad6182639ac84fd1bda2f6e65","sha512":"dab363d8a27e0fcb3571e35ab1321ec7acf81d6c8e9c460b542dc58a018e9b240265cd9e0572a03b1426a37a0a2c7c9f723e77bb3e1032c44258d6cb777d90d6","ssdeep":"384:PDzk5KmEpLFd7tRwQZMVwAVfbsnmlHiBnjLU4MSV1Nn1awap1P9Vy8UuZHFh+L4O:NmERLwQZcFVLCBjg4MC1Nn1ip1P9Vy84","tlshash":"5d82c6cd3994f0a1167b52b6c07f550f73339561228ea410b255d6dd2c74ebba22bc3e","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-08-19T00:38:05.684973Z","times_seen":5760,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/livewire/livewire.js?id=5cdaa3ec393c09829366","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /livewire/livewire.js?id=5cdaa3ec393c09829366 HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: application/javascript; charset=utf-8\r\nexpires: Tue, 13 Apr 2027 03:26:34 GMT\r\ncache-control: max-age=31536000, public\r\nlast-modified: Tue, 19 Oct 2021 23:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":159027,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54461)","md5":"5cdaa3ec393c098293666a1a69eeb311","sha1":"45e20c4a2ad11fdbe6507b3aa731b340826a2669","sha256":"90b371dcd1e5e1455b51c7b0759945859cf1228340f7a5900cd44c1b7ed66c55","sha512":"4bb3dc34851904ed56f5a6d89f4a00352eadd3e0cc801ca9aa45936cdcbb1d410a72e2628493ebcf34f4f203c2ffe4222d65b3ccd65141fe6254ab74b0f97122","ssdeep":"1536:bFWbBs025VQpotIfUoeR9g6qpvWuPkbEyVnw7lxCGuIHIYMx0suDbk/5UK0t6fZm:5KyLBtuU4DpvVZfjuIHIYhvt6FEOySW","tlshash":"e3f33b99b6c1f1b248c77164643f3a0fb2762054589d9090fa79cec07eba948522bf7f","first_seen":"2023-03-07T12:27:00Z","last_seen":"2026-08-18T06:47:06.895249Z","times_seen":75,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyfill.io/v3/polyfill.min.js?features=window.scroll","fqdn":"polyfill.io","domain":"polyfill.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:35.109Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v3/polyfill.min.js?features=window.scroll HTTP/1.1\r\nHost: polyfill.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T02:45:00.455968Z","times_seen":17966304,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"polyfill.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/favicons/android-icon-192x192.png","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:35.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/favicons/android-icon-192x192.png HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 20 Apr 2026 03:26:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Sep 2021 21:57:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5210\r\ndate: Mon, 13 Apr 2026 03:26:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit gray+alpha, non-interlaced","md5":"8a395d785c0f84994e4befbe5a577340","sha1":"ed7632ff868fef17f8ff777878fa8dc87b4efa03","sha256":"8f45b4d19291338b2621e388a2df6884e6abd22f4a72c2e4264f872db483fd23","sha512":"fe5e640103fe66ac932941f359e75be454c90d4498e770caa80e6b247035958ed1f86208160f733f564f7ea2f3948bd07f405cd6cefbf3c02ab29a6d2cb01bf6","ssdeep":"96:NdKMHWl5eXbgk1+il8odRRyWiPajSbhfN12z03rQghpBzQjGOjdwSz03dkz2AA0F:NdK7oLVMilfDyW80SVf/p/UyOjdfLA0F","tlshash":"29b18e685104a9f27f1fd4352f94e513e7f1a803a88450dbf8b1de427f358982e52a9b","first_seen":"2023-08-06T00:19:46Z","last_seen":"2026-04-13T03:29:19.810316Z","times_seen":22,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T03:26:34.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=0, must-revalidate, no-cache, no-store, private\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; expires=Mon, 13-Apr-2026 05:26:34 GMT; Max-Age=7200; path=/; samesite=lax; secure\nmr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D; expires=Mon, 13-Apr-2026 05:26:34 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Polyfill:3","description":"Polyfill is a service which accepts a request for a set of browser features and returns only the polyfills that are needed by the requesting browser.","website":"https://polyfill.io","common_platform_enumeration":"","icon":"polyfill.svg","categories":["JavaScript libraries"]}],"data":{"size":46180,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (733)","md5":"7fb8df844fb332dfcbec6bf30ea96ad9","sha1":"a85ae1fa49a2dcaab0145e6dd91bf1b9235b8ef1","sha256":"61337a06b23d801c1986157cc97d4e1e17d404740822531008674bf0fc8e1bf5","sha512":"9b33c4b112b4abb0d51d712394d0cb753f70224a1ff785afc66e003bd7c8c008415bc4f1fa65b7ae9a8301e14040d33fa3f95bf8b717d0ba8828e21b88ff53d7","ssdeep":"768:X+kihcsJ7SqSMIVP05NEFqUIU8/5VIAz1S8FM/MqT:GL/tU8BV/z1S8Fxi","tlshash":"1623d63190f62527614390e5f7227b0a5ba2d207ca4b8b9876fc42d16f87e719c6379c","first_seen":"2026-04-13T03:27:01.534632Z","last_seen":"2026-04-13T03:27:01.534632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":209,"dns":133,"connect":35,"send":0,"wait":212,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mr-usdt.club/assets/themes/frontend/default/assets/js/theme.js","fqdn":"mr-usdt.club","domain":"mr-usdt.club","tld":"club"},"ip":{"addr":"46.224.42.194","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:34.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mr-usdt.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:06:03 GMT","end":"Tue, 23 Jun 2026 10:06:02 GMT"},"fingerprint":{"sha1":"E9:83:F3:0E:DB:45:DF:AE:8F:F4:F5:83:B8:31:D0:39:7F:29:81:9C","sha256":"16:36:14:E1:D4:71:3E:DE:01:2E:EA:0D:38:C8:5E:4A:36:0C:64:9D:30:D1:2D:62:BD:F0:BA:4B:5C:51:D2:17"}}},"request":{"raw":"GET /assets/themes/frontend/default/assets/js/theme.js HTTP/1.1\r\nHost: mr-usdt.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mr-usdt.club/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJwQ0ZLSk5JRzh5Ykc0bkVHL2k1YXc9PSIsInZhbHVlIjoiQjlnL0JuV2NHckI1K3ZTUU1HZVFDRmNrVjFBQ095T1dOSEJrWnJyaGZmdEtXR1cvSGZRUTFvckNOeXgrM3g4UkFUNnc4LzlGS1lFMHFIN0F5UzNUNHJteXBVNXlvNkpmTFZOR09LcGpYK0dlbVY3cWl3UjlKd1VaWDQramh4YXoiLCJtYWMiOiIxMmM0OWM5NDA1MTk0MjNjNTY1N2QwNjhhNjEwODFkZDBlNzFjZmNhYzY5YmMyZjkwZjNiM2NhOTgzMTU2MTFkIiwidGFnIjoiIn0%3D; mr_usdt_session=eyJpdiI6ImZYOEhZRnA4RlVoNTZlY200VVA1b3c9PSIsInZhbHVlIjoiU3FCVGlLWG11a21VQmtlL0FUL2VqVVl5MWd5UHM1bVJJWk5iK0l6WkNlRXcxRDZUYVM1NHk1dWIzUG1PaGVPdzRhRlJCdUFBQWRISkI3TitObVhLZ1o1OFF2WFpJcUozMENjNHhRRnpaV2NPZWdlYVJib2xyYnVYS0N3SHlEMEwiLCJtYWMiOiIzMzY4MjRiMWMxMjIzNjk4MzBiODAwOTFkYjI3ZmMwY2U3MmQ3ZDhiMGQ0ZGVmNmZhNWEzZmY1YzFkNzI2NjA0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 17 Jul 2021 11:27:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3700\r\ndate: Mon, 13 Apr 2026 03:26:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13431,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"f699d79daf685df97cad749cd1351c4e","sha1":"d70c9b457a7b051e8da3edfb4e1c5108a27af61a","sha256":"5133be9b5cb8f688e2c46bcfd846756755610bd8a1a629c985118a992c9d8e1e","sha512":"5d45432c94bde93045fd83ed70e06e8482c2c26241e4f3f795efa8a951f43b1599e08586406628f96b7696a543a2d9dec5c7451cb841736ed74e3178a2217f29","ssdeep":"384:zWg0lv84CjbZlCG6xHxtmLoHRdJXsywZuI0p24mgbBMgxq:zWNlvjgbHCxxHxtmLoHRdJXsywZudp2p","tlshash":"d052b85f5cf220a224a7e03a21eff704f8560443840ce9567dbee6946f1066791beede","first_seen":"2023-08-06T00:19:46Z","last_seen":"2026-07-22T21:59:48.536935Z","times_seen":35,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mr-usdt.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mr-usdt.club/","date":"2026-04-13T03:26:35.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mr-usdt.club\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 01:57:03 GMT\r\nexpires: Sun, 11 Apr 2027 01:57:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 178172\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-19T00:00:53.816019Z","times_seen":32257,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":150,"dns":1,"connect":7,"send":0,"wait":21,"receive":16,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}