{"report_id":"09fb95c4-4562-4fcd-88e2-d500f28e1b3a","version":6,"status":"done","tags":[],"date":"2026-03-06T23:29:17Z","url":{"schema":"https","addr":"xmr-qrcode-generator.com/","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"104.21.3.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"title":"XMR QR Code Generator","dom":{"size":40438,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40411), with no line terminators","md5":"b40b4e5dfa9d291aa49dff01f6ecf1f3","sha1":"8f2f46d768183c1d5a187947a8463e6fcc64d802","sha256":"1d3e3b0374097fa015cf5877942c43b95b0562d27d6ad65b6743aee2315347fd","sha512":"b99c03cb08c24f3b6b07b1d429bd67a1b57d80fbb4712a0c8220da15e8d672fe900cd9ed099d042a87f4fc9d6a2ff257ca24566a6a9915783c0da94fb5c0753b","ssdeep":"768:jTlj5unnhIvM/4ZC3TSA65qhqiriP6QDfSyK9wr+3wuICxLoMUmeJPw4gQoNUcE+:djBGQqEeg6uumqAbCxEwd4gQ8t","tlshash":"4c03a7343121267b81db47f5b299ebbad1e9d34cdb67c806b3bc43670bc6c948952391","dom_hash":"domhash9ad348607d50849db171e67fb1f2f857","first_seen":"2026-03-06T23:29:22.712152Z","last_seen":"2026-03-06T23:29:22.712152Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"104.21.3.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T23:29:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xmr-qrcode-generator.com","ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":20,"request_count":20,"received_data":1036465,"sent_data":9268,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/js/app.js","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5ea266859c7767605dd0277ab5740b3","sha1":"01810e274bf1299e769d2fe4e0b80c268c9987ae","sha256":"6b650ed6eb250b59e40205570dc8aa438cb2736ddbe459ced2182985203f969f","sha512":"d0348a11dbcd6dc1521b18d15f6ade5f9415f5c81c3c512c323ec60590ce0211f6883817951d24b3529eae3da24768e4f1026d9b0c6eef808f1581989d0a28d6","ssdeep":"768:8o4R5pO3lT4njKf0H3qGFuIK0VDHCz9M+oI3CZyhOd25UbSTv69hgZkRIotTyJ6w:ujLAiX/boHl5jqNzS","tlshash":"0e53e1066e81752c630b0b7fa39aa9f2d45a087d75484c6fd208bcd4a161f37bbf1a35","size":62975,"data":"","first_seen":"2026-03-06T23:29:22.745063Z","last_seen":"2026-03-17T19:30:50.387128Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"f68a36abd71ae82677dd3c95dcfd9401","sha1":"46a4b43ec98d6a1be16d06cfbcfadc3d3cc0c9bf","sha256":"931f0c77f754571896c47d313437c8fb48d8f92e04bf626b8b78c11b8aeb9bd1","sha512":"9e36b00defa823eafb60a1cf9391eac3a1da74fb1adf095170ec6d168795af921f892e01df274aa3f71cd9630aa7e1be45d39998c8ef1d5b38389c694852370a","ssdeep":"","tlshash":"5e6000c0003030000003030000f3003000000c0300c0c30cfc0000c000f003c0000c03","size":16,"data":"","first_seen":"2023-04-12T12:16:03Z","last_seen":"2026-08-10T06:15:15.52531Z","times_seen":3372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"f68a36abd71ae82677dd3c95dcfd9401","sha1":"46a4b43ec98d6a1be16d06cfbcfadc3d3cc0c9bf","sha256":"931f0c77f754571896c47d313437c8fb48d8f92e04bf626b8b78c11b8aeb9bd1","sha512":"9e36b00defa823eafb60a1cf9391eac3a1da74fb1adf095170ec6d168795af921f892e01df274aa3f71cd9630aa7e1be45d39998c8ef1d5b38389c694852370a","ssdeep":"","tlshash":"5e6000c0003030000003030000f3003000000c0300c0c30cfc0000c000f003c0000c03","size":16,"data":"","first_seen":"2023-04-12T12:16:03Z","last_seen":"2026-08-10T06:15:15.52531Z","times_seen":3372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T05:54:05.45579Z","times_seen":417896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/js/xmr-app.js","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5517181a287f0ba32318d5e52a88a2cc","sha1":"30256619ead2087143269e0953cca008679f0a40","sha256":"cf2fc29cfc4087a69f9fdcb89a4f5dbe7103cc35b350fb7a111799307734afa7","sha512":"ed31af42340b750874ae0890251f33119904753424953c7e202b5945857b92474e06965d7de8b78888eb03b10d3c9e6bea9ce5e173b2628417486b44391e1b92","ssdeep":"96:vO2t4uhkKaJcipmd0gWViw7gjB2932+x3XSgVVYYNAsiew+u/xvZvhD:DatRogi8aB2932+x3XSwaScTNhD","tlshash":"d6a154911f84b590135b6dff7517b3e0e2b53d9e2a304842d117da98b8a9e02f9cd136","size":4652,"data":"","first_seen":"2026-03-06T23:29:22.747957Z","last_seen":"2026-03-06T23:31:34.089314Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/js/aos.min.js","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","size":14690,"data":"","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-08-10T23:33:32.178288Z","times_seen":10367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68347b098150940a1a4ddff237d60e8d","sha1":"32d49554070f720a57762d8bfa05a54c4a5874bf","sha256":"53e58f3420e560d211ef740d2d8f2ce2aa8d2f32523cd6b507ce572d9b1b3933","sha512":"69384513fa02812893cc4d933096f0ac615d49150b4f25cb2345c19cffc8c974e02210db55522ed01a260df7529992544b7afcdadb7a25cdd3f0fc318a97fba1","ssdeep":"","tlshash":"8aa022ca88023f03002280c80302822a8233220088fc0c08820c08803e0ac00b00300c","size":66,"data":"","first_seen":"2026-02-28T03:30:48.36814Z","last_seen":"2026-03-17T19:23:57.756288Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/js/lucide.min.js","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5b4869c8c33b36ce9f62adf53c438be","sha1":"0287e20ef1aa96f858d2b1274df1bc92ccf92c19","sha256":"d0d31998c190d8e7c0712879b33dc6f2d5bd14ae742556eb85a771e7cf568ba8","sha512":"16b6d6496dd346ec1d86c119b9b7727cdd149d30074317b2cb8bc29ac540224025b4d99a7a616731941b232f3316cc3407bd6cf25ae2fe49f63d68e576b99514","ssdeep":"3072:e0jchDVSuElHyBoulRKKoGoVpiosjHo0vPO4LwEZrjLpDgXr2QLxynZ0/RRcC:H8gMVoVSpD+vLxsqRRL","tlshash":"868463af8fcd269f4c56e7881a4bb0101fed93bd331a8c12768e967bc252416dcb3651","size":390911,"data":"","first_seen":"2026-02-17T13:58:00.0023Z","last_seen":"2026-03-17T19:30:50.386502Z","times_seen":675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/css/xmr-style.css","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /css/xmr-style.css HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:35 GMT\r\netag: W/\"3844-19cb621d19b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 76314\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBFwRpCxrOho2Sfq3g3vxPxEgBxABbE%2BLLiwqIS3BbA%2FQxPDDYyb85Rn4iVFDC60AlEdevVPiJE98e2hNAKSjTPZFUB9wTZjSTcpqfYYWZMorNbKeBh%2BAQ%3D%3D\"}]}\r\ncf-ray: 9d8523c15de42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14404,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14404), with no line terminators","md5":"95c1c1f031a3fd47db48281f4124a358","sha1":"37c04fcf89d5d4210e5e572ccb7e7be1cb8c26b7","sha256":"3f950077aa9efde85834ff8635081267b46e8386a4439397dd9a15059b39e528","sha512":"cc510bd0ae63525c5fa9566014c5835c13337193f1940398b19b29128739f263bc7c1d54a597295ff9d309aeed9b5b34d2f7031d41b2fff53259553a42585c6e","ssdeep":"192:AE2369nDw20bd/XOjYYf0Z+FqQG9F8ZDf368DNgAG1:AE236+Yf0Z+FLG9F8ZDf36861","tlshash":"71526474f142126f7003c27f6ac4da2e3698d146e8120f5e7f2aac9567859ff16f3a21","first_seen":"2026-03-06T23:29:22.718646Z","last_seen":"2026-03-06T23:31:34.094873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/monero-logo.svg","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:57.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /monero-logo.svg HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:57 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FtrVvgnqChCS69soYrMxk%2BoC7MqoFPYqm3CymUbwX29ZzN093NREJGyvDY71PV5NSBvsfE%2B9MA%2FoNIcRqCanl6E5T0IuxR7QTuKDZkfulq4HWoAK%2Bc41Dg%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:37 GMT\r\netag: W/\"3ac-19cb621d7bf\"\r\nvary: Accept-Encoding\r\nage: 76314\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8523c46e672efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22ac5949dd8d861e10abeee3e4d546d0","sha1":"172f8c99e4b56bc6be6a86791e08fbe867640b40","sha256":"668c28e1a5e0ce6839c6b3a8a35c5dfba3e284a442f7ae4049398472f72ace27","sha512":"d0cb29e855ecafffbd4a49c4b287849ac133c97f0aa9d098d197031add5df8cf51668d2ec34db0934230c216952acf87bc7c4ddce33c6564da2e39e56395eac5","ssdeep":"","tlshash":"d7114083a0702d1ee07689c88be9ae260c7c91b563d92dfcf6d32d3e1531c7811c8a90","first_seen":"2023-05-22T07:53:58Z","last_seen":"2026-08-06T04:50:03.247794Z","times_seen":567,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/webfonts/fa-solid-900.woff2","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 113260\r\npriority: u=3,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:37 GMT\r\netag: W/\"1ba6c-19cb621d7c2\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upA9Mu2DljXg1IS3P5DWWw3WwWN4QSxnX5DJWfPYDBj555qN%2FOnHi5eT7gJMVEHMDG7XHiXXkIaL46JkxVd8WRxZygtCwc67zGwd7emxTku8SmkvXbS6nA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8523c15de22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113260,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 113260, version 896.768","md5":"ff919779d8d0e4ad6fab6e819c120be5","sha1":"a5e7bc931d9a1539224a4b88aadeb6cf91d35ef8","sha256":"ff6d96ef6f1b29124a8daa657809d480d7278401ab16320fdb3edf0b658d6492","sha512":"605d09f13b3dc41cde56ae9a0566a6074293dbe85792edd0252b970ef0c74194856ba5c0aa64872e4927d8ceaae5c061aec601ce401f4decce3bad81754784cd","ssdeep":"3072:yydPZuvhBgEvEjLOYMpqzoX2ypHLjjRi7W:yGKhBZvQLOYMp4yprjjRN","tlshash":"13b312dab626aa9f2cbb535d5750f0d806c67a84accef110f02c821572d4b225ff95bc","first_seen":"2025-09-04T12:31:23.528067Z","last_seen":"2026-08-11T05:39:47.848716Z","times_seen":3124,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/webfonts/fa-brands-400.woff2","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 101180\r\npriority: u=3,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:37 GMT\r\netag: W/\"18b3c-19cb621d7c2\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SbtChK4vIOxEQtG8DnPzLWIhGQ6ViIKx4S%2FFQwuvNEIw4bT%2Ba21XiqaEG2bbqF%2FdzmscDy%2Bzi51gXLSIBmuVD2dm4Juwr6%2B%2F%2BFjTbSd7Wy85nNmgcHgt1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8523c15de32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101180,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 101180, version 896.768","md5":"658d53364d524ba8a26f247bf7652c63","sha1":"6cf201b0c8ccdc9e2ea944de2a1c8a51f8a5383d","sha256":"34ce05b1507e4f0f9d3108eb397855d72fbc8cfad6fb93ae8af1716fb312f59e","sha512":"4666cbf0bd25c5220cf665449864ae8068a95b53801b71550cf6d4030860872d2a24f6ad61baf851705ace260d476f8ef6c9a963b9df55ec7cad8526ed6f17b2","ssdeep":"3072:GmtFv6SRvHDuPPIl0zcvVtr1u6OH8LHiZJJM9BYXkjS9:jfv1RPaPtzch1egHCnXwO","tlshash":"54a312a75c937fde110239f5b1f2c856dc62dcbadd3109e634e9c2c60fe5c4aaa48861","first_seen":"2025-09-04T12:31:23.539888Z","last_seen":"2026-08-09T16:13:49.740122Z","times_seen":939,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/monero-logo.svg","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /monero-logo.svg HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mLsxSPWJOtXDve4SVnVIfL5X3pXjhGwKB1gFJ6jxalxiuq9bcECc9MR5mqo%2FW1LW%2FDDjsihjluZPE4fCwhcX2bNlr%2FsARucH7iL1Ggj99IdAVp37TRI8uQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:37 GMT\r\netag: W/\"3ac-19cb621d7bf\"\r\nvary: Accept-Encoding\r\nage: 76314\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8523c15de82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22ac5949dd8d861e10abeee3e4d546d0","sha1":"172f8c99e4b56bc6be6a86791e08fbe867640b40","sha256":"668c28e1a5e0ce6839c6b3a8a35c5dfba3e284a442f7ae4049398472f72ace27","sha512":"d0cb29e855ecafffbd4a49c4b287849ac133c97f0aa9d098d197031add5df8cf51668d2ec34db0934230c216952acf87bc7c4ddce33c6564da2e39e56395eac5","ssdeep":"","tlshash":"d7114083a0702d1ee07689c88be9ae260c7c91b563d92dfcf6d32d3e1531c7811c8a90","first_seen":"2023-05-22T07:53:58Z","last_seen":"2026-08-06T04:50:03.247794Z","times_seen":567,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/api/xmr-price","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /api/xmr-price HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 47\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\netag: W/\"2f-XkTjfPlD887js1Kz05Hrf3aj/Ns\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=StFh40aIHXlubOV93LquKyJN9dajobEQ7tcF4BygOFA%2B8PQkx4YNvesbTkZQh%2Bs4pPxrmjC7uAMqwIZHqf0LOWdnoRcge24HVp%2BFCDoeNeWtOkvAlibl4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8523c26e092efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ab703a976c138f7badc9d5a12d2d4d90","sha1":"5e44e37cf943f3cee3b352b3d391eb7f76a3fcdb","sha256":"ffaa31974295a332ac8490d9784a91c21afa7992aa5850b8b7713cd4ade0c236","sha512":"e8481680eb7c810279ee13e05e6d7fdcdf659af9115c8caa292462e2ff9bd019efcc95897075254acd12729756fe6a21ed4b4d69a72e2c9e2378ea39c0c7a975","ssdeep":"","tlshash":"07900445cd04cdf57073111f44c104105447c3f44513cd75134c1757115003d010c454","first_seen":"2026-03-06T23:29:22.730142Z","last_seen":"2026-03-06T23:29:22.730142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/api/config","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dm1CN1U7IJd70%2FFouefze5fn%2FVqYAmAvrGrxFuIDHpTuqfW4JPUlBzEWApSgF6cFCv0mRzlgx976U1EZHZjhDlevT%2Bz58HXd8aAa1b%2Bz39i20WBzvHKe6g%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\netag: W/\"74-bjw/wTG9EWrOk5PhrYjAY3RuRXk\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8523c26e0a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bb2977d8978f6752130eae9c502fdcb4","sha1":"6e3c3fc131bd116ace9393e1ad88c063746e4579","sha256":"90ebb9e9367e33bfd7841a9d6e20baa35c76b48cbd65432be4058288f561353d","sha512":"22444a0d9870f8dcd8652d199e704ee687fac52ea764504c787600781ef02e3dc4e663530ca2e9b4d648932543c68847ee66faa937f8d776b3a8932bd4af3dd1","ssdeep":"","tlshash":"e2b02208033aa2c3c00b2a028a8c88aae2c0c00882c0a803e80cbaca22228000802b0b","first_seen":"2026-03-06T23:29:22.733347Z","last_seen":"2026-03-17T19:30:50.390695Z","times_seen":3,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/monero-logo.svg","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:57.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /monero-logo.svg HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:57 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DT%2FIaUo%2FCP3GUFaiRSgsv3VBtcfpf20h4xyTgOT5XRSwXo3Zpge9VpM1mqyuBnVASEALTuZeD6LSqni3fEGOe77l%2FC0u75EqPBe7Hl%2BXS8W5nSYgLbKrrg%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:37 GMT\r\netag: W/\"3ac-19cb621d7bf\"\r\nvary: Accept-Encoding\r\nage: 76314\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8523c46e682efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22ac5949dd8d861e10abeee3e4d546d0","sha1":"172f8c99e4b56bc6be6a86791e08fbe867640b40","sha256":"668c28e1a5e0ce6839c6b3a8a35c5dfba3e284a442f7ae4049398472f72ace27","sha512":"d0cb29e855ecafffbd4a49c4b287849ac133c97f0aa9d098d197031add5df8cf51668d2ec34db0934230c216952acf87bc7c4ddce33c6564da2e39e56395eac5","ssdeep":"","tlshash":"d7114083a0702d1ee07689c88be9ae260c7c91b563d92dfcf6d32d3e1531c7811c8a90","first_seen":"2023-05-22T07:53:58Z","last_seen":"2026-08-06T04:50:03.247794Z","times_seen":567,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T23:28:56.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3g7W0tC8FrYsFAbCCqOp1fZZX8%2BMmk3Urz7k50phyZnd2RbDkAuKifZz1I9vM3MEWK1Ef4ILJwi1xvTyVG%2BaXACgb7%2B3jgNfw49iX1sysr6VX9wX7YUGiA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d8523bf3b17b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40052,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40022), with no line terminators","md5":"ccda3c783b74fb2d56234b0a6c18dfa1","sha1":"6213e4274fd0e5cb06e5812d5a8e762e4f89977a","sha256":"63b2c4be7169f294dca6aefed755baade8f204033b07098d686ae16950c2d883","sha512":"f71784758c093bde4d4b6b9915adb365003e816afdf43621adb31e911010e74408b6fdcd86910c0f89a58cc270535b103fc2812aec8cca702a1827a4605b57ed","ssdeep":"768:fhIP5unnGzvM/sOg3TqkA65qhqiriP6QDCpeK9or+3wuzCxDt+qmUfdwggQoNUcu:6PwovqEeg6FNGygQCxJarggQbJ","tlshash":"6403963531212a7f81db47f5b299ebbad1e9d34cdb67c80ab3bc42570bc6c908952391","first_seen":"2026-03-06T23:29:22.735812Z","last_seen":"2026-03-06T23:29:22.735812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":40,"dns":28,"connect":1,"send":0,"wait":207,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/css/xmr-tailwind.css","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /css/xmr-tailwind.css HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:35 GMT\r\netag: W/\"19b88-19cb621d1ad\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 76314\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVgLmOYR%2BMavRM2LVSWG7QZ2OM68bhN9rDg0iQTUC50V5%2FTWylBfF4xOwfwOgWApbthHcgGAX0KL4peQHOsJt8mgvDhZOtL6EAPBa8z3Wcx7Fc9er2vHAw%3D%3D\"}]}\r\ncf-ray: 9d8523c15de02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105352,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"35d0c54f941693d7724d64c50fee8f5e","sha1":"62b31d39c5afc6192fda035ff00d97633283cb23","sha256":"669bf66e5fd4d834f822f0bd74fa33257e76c85571f07f7a9641a58851e77b6b","sha512":"6995bdab6052f72f0b91ae61f28d95945944dcc66752850c2f4aca4c1daab2beec32fbe2918f665c9fe25b52962fc00419deab8068249d15cec682772571f14f","ssdeep":"768:a7iFWFA/LuN/EwbjyFNZ+xrpCtXWdNOnToBZ3CaUkXsOrSZN0cWD5WFoYfRZTr5X:QK+86/EwbjL5X1Sb0+SYfvhMrOW4qwMA","tlshash":"07a38270f122c57b6e23a6bda7dcf48cb90ab096ce2197e9bf51910123d77f21c92614","first_seen":"2026-03-06T23:29:22.738314Z","last_seen":"2026-03-06T23:31:34.109495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/js/lucide.min.js","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /js/lucide.min.js HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:37 GMT\r\netag: W/\"5f6ff-19cb621d7bd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 76313\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhcf%2FuxKWQe77xXDmHGSWzzMDwXKc0GczyQczCFxnnpEOMK31kFr8HRHKmiFBV%2Fm9jDIqW8wparTIIuiHl7mgH%2BMBE8bSfqYY%2FmPa9uOfomYsC1yNUlwaA%3D%3D\"}]}\r\ncf-ray: 9d8523c15de52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":390911,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65368)","md5":"c5b4869c8c33b36ce9f62adf53c438be","sha1":"0287e20ef1aa96f858d2b1274df1bc92ccf92c19","sha256":"d0d31998c190d8e7c0712879b33dc6f2d5bd14ae742556eb85a771e7cf568ba8","sha512":"16b6d6496dd346ec1d86c119b9b7727cdd149d30074317b2cb8bc29ac540224025b4d99a7a616731941b232f3316cc3407bd6cf25ae2fe49f63d68e576b99514","ssdeep":"3072:e0jchDVSuElHyBoulRKKoGoVpiosjHo0vPO4LwEZrjLpDgXr2QLxynZ0/RRcC:H8gMVoVSpD+vLxsqRRL","tlshash":"868463af8fcd269f4c56e7881a4bb0101fed93bd331a8c12768e967bc252416dcb3651","first_seen":"2026-02-17T13:58:00.0023Z","last_seen":"2026-03-17T19:30:50.386502Z","times_seen":675,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/js/app.js","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:36 GMT\r\netag: W/\"f5ff-19cb621d48f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 76313\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fr79KkXZjzI%2FVLfH4Jf%2F63eEO%2FhSXWGm1hxVb1%2ByOWCMQS%2FYCPMJTLx1SC7J6GBeSk9XQ1wFEyLtPqw0yZQYUUXy89VqA3zA88lwVcG4%2BsBUe7rmfOD%2Flg%3D%3D\"}]}\r\ncf-ray: 9d8523c15de62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62975,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62947), with no line terminators","md5":"a5ea266859c7767605dd0277ab5740b3","sha1":"01810e274bf1299e769d2fe4e0b80c268c9987ae","sha256":"6b650ed6eb250b59e40205570dc8aa438cb2736ddbe459ced2182985203f969f","sha512":"d0348a11dbcd6dc1521b18d15f6ade5f9415f5c81c3c512c323ec60590ce0211f6883817951d24b3529eae3da24768e4f1026d9b0c6eef808f1581989d0a28d6","ssdeep":"768:8o4R5pO3lT4njKf0H3qGFuIK0VDHCz9M+oI3CZyhOd25UbSTv69hgZkRIotTyJ6w:ujLAiX/boHl5jqNzS","tlshash":"0e53e1066e81752c630b0b7fa39aa9f2d45a087d75484c6fd208bcd4a161f37bbf1a35","first_seen":"2026-03-06T23:29:22.745063Z","last_seen":"2026-03-17T19:30:50.387128Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/js/xmr-app.js","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /js/xmr-app.js HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:37 GMT\r\netag: W/\"122c-19cb621d7bb\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 76313\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2o9sEkGGszdVhR09h5jEo0yG9XCPAg9LxSc%2BzxtmvDjFpt6FawRjoyCx1oKB6wT%2B393iL1SiYWxL320JVy4PQsvPGfbzDmbm06Qu7uj5wf1FXDfXe1hnfQ%3D%3D\"}]}\r\ncf-ray: 9d8523c15de72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4652,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4652), with no line terminators","md5":"5517181a287f0ba32318d5e52a88a2cc","sha1":"30256619ead2087143269e0953cca008679f0a40","sha256":"cf2fc29cfc4087a69f9fdcb89a4f5dbe7103cc35b350fb7a111799307734afa7","sha512":"ed31af42340b750874ae0890251f33119904753424953c7e202b5945857b92474e06965d7de8b78888eb03b10d3c9e6bea9ce5e173b2628417486b44391e1b92","ssdeep":"96:vO2t4uhkKaJcipmd0gWViw7gjB2932+x3XSgVVYYNAsiew+u/xvZvhD:DatRogi8aB2932+x3XSwaScTNhD","tlshash":"d6a154911f84b590135b6dff7517b3e0e2b53d9e2a304842d117da98b8a9e02f9cd136","first_seen":"2026-03-06T23:29:22.747957Z","last_seen":"2026-03-06T23:31:34.089314Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 07 Mar 2026 00:16:56 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=etpyILOiQe7%2FeBwldQKTiTx3p%2F5PeDpEhofuYtLvNcDgwsNrr6LBTNG1DH%2BUO4CqeyGfKfOV8TmlwjWb4dD%2FS0VRSn1FiurjddxSUU2Gyay2QV9jGfCB4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncf-ray: 9d8523c15de92efa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T05:54:05.45579Z","times_seen":417896,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/js/aos.min.js","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /js/aos.min.js HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:37 GMT\r\netag: W/\"3962-19cb621d7bc\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 76313\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4wqwEHfb2FDr4hP0isLxk7s1ISYONx%2BA4QbXiCOVAWJ7lYIC9UC43Rz5lynJQspNNUeWnWQs5PJ9nZ19dAKyBcFg8hwF%2FSNTyMRkwgIk8xRgKWxzfXIwg%3D%3D\"}]}\r\ncf-ray: 9d8523c16dea2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14690,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14690), with no line terminators","md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-08-10T23:33:32.178288Z","times_seen":10367,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/css/fontawesome/all.min.css","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /css/fontawesome/all.min.css HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:35 GMT\r\netag: W/\"12232-19cb621d1af\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 76313\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fUzDYPcrQE5ALFxsf2QYYVev2JIzk1Bz%2Fm1fxt6zGM4RhfNBPdZ1TYFNb%2F0jBrShz7y8Vs3wzcKt%2F4EPTTc0sr15n7EV72NJ1prJFio61k83d8pJS1abQ%3D%3D\"}]}\r\ncf-ray: 9d8523c1ddf52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74290,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (50205)","md5":"95878fd8503903b9b185225cc9168b3b","sha1":"3fae52740ade9f4deb58822449b801cf1dbd211b","sha256":"6e59a8761e7dd42309319c4c2a5a64941c91defda36d0518716addcf0f745690","sha512":"0206e63c5ad6d5bd5ef06670b06fbfe77c6f9f9028e8db0c06e14347c9567c3761a7ce5744d414b795ca853250e568e9e342238fd03e9a45156a020968f1df30","ssdeep":"1536:CWM1MvMaMfM0tAX0HEbpNG2eLZy6lkS/erkh3:6tAXkEfGc6VWrkd","tlshash":"79730e12ad84019bb4568d7f3895bf34a6f2eb28aad14595e4344d807ef28fd314f732","first_seen":"2026-02-28T03:30:48.362386Z","last_seen":"2026-03-17T19:23:57.754641Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/fonts/inter-latin.woff2","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /fonts/inter-latin.woff2 HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\npriority: u=3,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:37 GMT\r\netag: W/\"bd30-19cb621d794\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jY0W5pJBm3WCwwR255uUNil6sC1x8XW8%2FJbJSdVAa8rDahgmC%2B03mmYfQpm%2Bnocsdl5dKTpJUaeMuFtt2IVi8CTwbI5%2F1d6xHP2ORFCQjAKwCXsjY6gEqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8523c15de12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-11T05:57:03.328223Z","times_seen":89311,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/css/aos.css","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /css/aos.css HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:56:35 GMT\r\netag: W/\"65c5-19cb621d1aa\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nage: 76313\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Btu%2FFP%2F0GXEKHtB2pLttgTvnlQuih0O441N%2F%2FQ%2Bxa%2Bw9zr6KRfS1Tg7VVwHzHfPu2qR%2B8ZFQQS8NQuv4jNMBKC1fP9jlM5WQZ1fCQcJpmzUi0TnEV%2BfVQ%3D%3D\"}]}\r\ncf-ray: 9d8523c1ddf62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-11T06:01:42.21962Z","times_seen":43760,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/api/stats","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /api/stats HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7OWoz7kn9Jrug7iR0Vyk2Y10M%2BO7phNx2cFOCGoFbWsbuZiDlTXNvvsYjHsNrYi3jsvS1OTxfGB%2FbXOiZm%2Bgk1TXKRR0D0UGpeemVG%2FVshQjQjtTAKcSTA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com;font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;img-src 'self' data: blob: https://cdnjs.cloudflare.com;media-src 'self' data:;connect-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com;frame-src 'none';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\netag: W/\"33-pRX8mYKY8/WNWnPQLarBCpOfVJ8\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8523c26e082efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"689b0337db645ddbe2803cb1ffcf2c90","sha1":"a515fc998298f3f58d5a73d02daac10a939f549f","sha256":"85adabbd8b97b04e83d9b15a0dc908dc74219bdee0fbba5affbecf68d39f3f8a","sha512":"f868239d9f56fbc19d0658e1333c88949605279a7f4914a23a17d4e09cb8b7ec9887cb0b92f09600ee16393089fc13451d9a7ad7fc8e0e4f15944a17eab0ef22","ssdeep":"","tlshash":"b090027a115c5db48325d2429209c45257302460551165a9480658296544610534a990","first_seen":"2026-03-06T23:29:22.760833Z","last_seen":"2026-03-06T23:29:22.760833Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmr-qrcode-generator.com/webfonts/fa-regular-400.woff2","fqdn":"xmr-qrcode-generator.com","domain":"xmr-qrcode-generator.com","tld":"com"},"ip":{"addr":"172.67.130.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xmr-qrcode-generator.com/","date":"2026-03-06T23:28:56.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmr-qrcode-generator.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 22:33:09 GMT","end":"Mon, 01 Jun 2026 22:33:08 GMT"},"fingerprint":{"sha1":"3B:C1:36:C2:D9:99:21:1C:C3:2F:35:B4:09:72:75:78:2C:20:F2:99","sha256":"32:C9:2D:1A:B6:90:62:30:1D:D2:B2:26:E5:88:FF:CE:52:73:4A:A0:5D:16:81:7E:E4:6F:79:0F:04:FB:E0:4F"}}},"request":{"raw":"GET /webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: xmr-qrcode-generator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmr-qrcode-generator.com/css/fontawesome/all.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 23:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kCn2PsPM2kHZy4sqTFs9owb3lvDsmTKtofHY9i7KcOBMW5Q3hNKi0mYL9MJpSsj9ANEM3VwzXo3v38YIQPgmJl2uFbMjdKPvtE0ThA1MkaQ58ONxubYWYw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'none'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8523c37e3d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5938c4d4207db7e6538cc8024fb2e5ca","sha1":"fa782c3e1ae65929ce8047127b4044fbac546fbb","sha256":"a3a53ba6c88d928fbf77ec87b5030ee85721ea2d187b90a9bf8cf29df3db078d","sha512":"f927335a53e37126482367b4d23842cc9ea1f45cc603b0c6fcee6b4100a40e783a78f76aa47f8d8016bd4611fea2f15759835dfe215da9fac46c6c06705d5182","ssdeep":"","tlshash":"d8c080fd115111054630530029d1765435d77f6d54e795406b47e05bdce5517c5c7148","first_seen":"2026-02-28T03:30:48.355988Z","last_seen":"2026-03-17T19:23:57.748373Z","times_seen":5,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"xmr-qrcode-generator.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}