{"report_id":"16ac3596-8f2a-4844-ae04-60f9b567fcfa","version":6,"status":"done","tags":[],"date":"2026-02-01T19:50:44Z","url":{"schema":"https","addr":"usdt-qr-code.com/","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"172.67.165.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdt-qr-code.com/","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"title":"USDT QR Code Generator – Create Tether QR for Any Network","dom":{"size":15505,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (444)","md5":"856a34ead7b3459407e29cfc6ba9c948","sha1":"a7bd84eb22ba95c9c708de7224b341a815014c5f","sha256":"43c4ca22ab52b8958fbd1274528c544229eb78dd217764a1ea3df5a524f2083d","sha512":"43823ff65f064e227198968045954840d47be98a7932c4957aa6f4e904f2a3e831a4f7b9d473a46c8da5e100621fb892a578cb927c3fe8fdb082e270d3443e5b","ssdeep":"384:Sj9DzsGXxW73rY1hh8uIGFsTzsSWaBED7pb2w:Sj9D4GXM73rY1hh4KyzsBSED7l/","tlshash":"7962d649f6947017830732365ad7650d62ab624b620ceda03c6c82ddafe0b2d4d7f79b","dom_hash":"domhashd976cb4af54fad94a9ff994279f1810e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdt-qr-code.com/","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"172.67.165.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T19:50:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdt-qr-code.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"usdt-qr-code.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-02-01T02:06:29.267287Z","last_seen":"2026-02-01T02:06:29.267287Z","alert_count":9,"request_count":9,"received_data":68828,"sent_data":3970,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-25T22:25:20.721908Z","alert_count":0,"request_count":3,"received_data":372416,"sent_data":1343,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a07da9fae934baf3f749e876bbfdd96","sha1":"46a436eba01c79acdb225757ed80bf54bad6416b","sha256":"d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad","sha512":"e525248b09a6fb4022244682892e67bbf64a3e875eb889db43b0a24ab4a75077b5d5d26943ca382750d4febc3883193f3be581a4660065b6fc7b5ec20c4a044b","ssdeep":"6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3","tlshash":"f844a4d8fb8d112e423231aa9c2f12cdb77dd171560458aebd4d597c24a083d82faf7a","size":271751,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-08T11:43:42.577214Z","times_seen":52357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/js/main.js","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37e389e67fed235bc1b909e12da21594","sha1":"9773cb54535c3e819f27a16ba0198137851a83ed","sha256":"6ef13e7def4e72eaa323bfc3e231521ec93cda6abaaf4f4ba5d74965b77ab161","sha512":"2f21d91cba9bbf104a8ecf63d21909f12e988d2bdd423b2e7e0d0e59d0e56358c8e1ab38d31e812daf85715d004a6301ce782d408126f98f6eda724bf4e1f683","ssdeep":"384:HeNSaNiN79U0BmzpWwY6zAAdTR0PeU6EPb1R/7pyHHqsgl41YucMRlyyT71O3yZj:H86QfY6e6ET1R/7kWqcMdToyZiK","tlshash":"89a2c895b28062e553926ce2082f504bf175d8267c0e8554eb36d4e2acf8fda4877fbc","size":22843,"data":"","first_seen":"2024-12-10T02:49:22.609835Z","last_seen":"2026-05-31T12:20:27.089241Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad06d020e7e81af0a0659f7a631ebba4","sha1":"8d39ad85937a926247d1c39dcb97dce302aa1506","sha256":"a3d8e0b790b57fbaa67ab18c4da834d1e68fb7f4560596787d74321b6aca493b","sha512":"5f512baa1e075c0d30097ce52727add35f83090d3c053848ef76eebe595c5f46b196393f858a087dacb27903f6805fc7ff62e481b2dd4fc81ded091af71f39fc","ssdeep":"","tlshash":"3161136875a6b149e31bf03d8a3f950c21ba252b280dce407c0d55c46f9437d1d9a6e6","size":3225,"data":"","first_seen":"2026-02-01T02:06:32.720976Z","last_seen":"2026-02-01T19:50:45.104245Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"207f8cdb168cc84cf9bad482554e5b87","sha1":"151391434bea7fab81dbe53ad0389fdb9e9b6375","sha256":"57c65427b1251293142287f92f260f28b8b60a302af8013328a1f9784388d859","sha512":"39567eec3cd649980d94f45f20e8d7f588b2b15da4d8ef1d55cd708cb74cb4e6a9e6dfa32e7ac66c2fd3b3ac2e8a7c87df18e324152f8801377c210e69a2b238","ssdeep":"","tlshash":"9cf0242ce6f6a143a17b34389a8f5108b524682f0209ce48bdbdd6c08f404acdff2d48","size":570,"data":"","first_seen":"2026-02-01T02:06:32.722017Z","last_seen":"2026-02-01T19:50:45.105174Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"79ae33c038dea83f58ad13faa511dcd1","sha1":"db673590c5de2de96265962406f56664f3cbe422","sha256":"395c6339a36ef4ab822445e81e5036e1cbcd9d188f3cdb2e912e78b24434b3e9","sha512":"1bdaec0e132441c25f7a47630555eddd24cd2bc9e75b34542f0413be9374c74307b3cb3ca88495eab4ac1c279151e6122296add27b1bb4698a48b8ad76b0105e","ssdeep":"","tlshash":"3621ee5cf8e32644827335b9891f818635b726e3212def50354cdac18fb8939e46e6a9","size":1368,"data":"","first_seen":"2024-12-10T02:49:22.607974Z","last_seen":"2026-05-31T12:20:27.098835Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/loading.js","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2958fd861929271b389b0f421b67b3ea","sha1":"1afe4fe17943e08d31135b9bdb3834e823836dd9","sha256":"58785917f1da3a3daca043b1923667637de3e3faa430c8f9f43c43c2ccaeee66","sha512":"d5b730fffb57cc694fe4646f91e25a619b23c6f0e51546176e8c6101dfe45dd4236db3466a054ea6e1e3f47ca31b889948e25a3086c01c1c66f8b38ea0eacd5f","ssdeep":"96:lemy173fPrWgYdmEX43S5cixEn7kt5TNwn:lls3fPqgYdmEX4C5cixEn7kt+","tlshash":"4bd144b4abf7a94c902ba0671e3f2204156509130905edad7fcca7cc9fc922d56b77a1","size":6268,"data":"","first_seen":"2024-12-10T02:49:22.603693Z","last_seen":"2026-05-31T12:20:27.10015Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-08T12:43:59.627322Z","times_seen":133973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.0/clipboard.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c35192f6f3c8655e3d1bd927b3352b7","sha1":"257a1794bad17f3ae5839a178812b5b6aaffb1b3","sha256":"917c34325688477abe95a4d20090d15774bd2c98c4587e6d3f0bf5944835e86d","sha512":"870fe1813947c6d445669e5244b87ae6805552a97c91a81398d4da5d87f3e263f6661ebac2e5c341ad897fb3840bead6e15b0b8fe2a5e8c78ccc204edeaf1b60","ssdeep":"192:X4Hh4LyP153pPJ7rVWLBTwuLJ/eXbA5gpEHa4Lyc2mltIjk1QGo:XJA3JVVWLBT9LJ/eXbA5Tj2mzg/","tlshash":"9622855cb280b1b19ae760a9813f424fb371a469709a90d4b239e8f1bd78dcd5467f3c","size":10661,"data":"","first_seen":"2023-04-06T14:32:39Z","last_seen":"2026-06-08T12:06:02.407132Z","times_seen":3696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usdt-qr-code.com/img/logousdt.svg","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-qr-code.com/","date":"2026-02-01T19:50:19.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr-code.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:49:12 GMT","end":"Thu, 30 Apr 2026 09:46:43 GMT"},"fingerprint":{"sha1":"94:14:92:51:2D:E7:0E:D2:BF:07:4F:87:BF:84:B1:40:5E:10:E3:C3","sha256":"EE:C1:75:91:3B:80:3E:CD:C7:53:AB:12:38:F6:8F:C1:47:D0:79:18:93:78:EB:03:B0:7A:5F:DE:45:76:15:B4"}}},"request":{"raw":"GET /img/logousdt.svg HTTP/1.1\r\nHost: usdt-qr-code.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr-code.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jan 2026 12:08:06 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nage: 63852\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BetGiYB9cd1w6UcwagawpNZsonufzZFcHYzTnTnPsILsThC6ZhIIf12u7Xgha0xemWoV5%2Bqv26i29ZLCzp3%2FwZd1nRMV6YNQsv6MknmkVMs%3D\"}]}\r\netag: W/\"697c9f26-36a\"\r\ncontent-encoding: br\r\ncf-ray: 9c73fa267f8c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43f688a0313c926433ef60c377c7cc51","sha1":"7edea9502e75583e0f93815ebb6700ad04af7e04","sha256":"fc9c52d67a9dd9c5983c2f679218e804d9ba4aecef8a1074003e3de9efdea088","sha512":"3c957f1758fb3b3a1cf125a8c4e4a5728e0f7072202c421cf834306b6f0ae931291d3181ca725890e67e4274eefbfe114b4796f1cf5be597ab70b8f39c30f3b5","ssdeep":"","tlshash":"4611e3a6d5982f7005c9077c561a70e930f8c88ff5a445eddf7a5a36bc14cf68d280a7","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-06-07T20:50:01.421063Z","times_seen":698,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdt-qr-code.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/loading.css","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-qr-code.com/","date":"2026-02-01T19:50:19.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr-code.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:49:12 GMT","end":"Thu, 30 Apr 2026 09:46:43 GMT"},"fingerprint":{"sha1":"94:14:92:51:2D:E7:0E:D2:BF:07:4F:87:BF:84:B1:40:5E:10:E3:C3","sha256":"EE:C1:75:91:3B:80:3E:CD:C7:53:AB:12:38:F6:8F:C1:47:D0:79:18:93:78:EB:03:B0:7A:5F:DE:45:76:15:B4"}}},"request":{"raw":"GET /loading.css HTTP/1.1\r\nHost: usdt-qr-code.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr-code.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jan 2026 12:07:11 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nage: 63852\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5lfXH0418hNWKzlFsPOwkh7BU64mL4ihbRLS0W8sAfLAsxXZ%2BJJU9rwxElFJ%2Fsr%2B5HjuOK6Fq%2FbquKwlovQU0xgIaDPVw1bXcgetvQS%2BmUw%3D\"}]}\r\netag: W/\"697c9eef-0\"\r\ncontent-encoding: br\r\ncf-ray: 9c73fa268f9235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdt-qr-code.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/img/download--white.svg","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-qr-code.com/","date":"2026-02-01T19:50:19.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr-code.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:49:12 GMT","end":"Thu, 30 Apr 2026 09:46:43 GMT"},"fingerprint":{"sha1":"94:14:92:51:2D:E7:0E:D2:BF:07:4F:87:BF:84:B1:40:5E:10:E3:C3","sha256":"EE:C1:75:91:3B:80:3E:CD:C7:53:AB:12:38:F6:8F:C1:47:D0:79:18:93:78:EB:03:B0:7A:5F:DE:45:76:15:B4"}}},"request":{"raw":"GET /img/download--white.svg HTTP/1.1\r\nHost: usdt-qr-code.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr-code.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jan 2026 12:07:53 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nage: 63852\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lwv6O%2BEjn7ERPjQ70xFXHEGJJ%2FOwFKRnldNbdIuFqSj9Jro%2BKp1Y6S24IevuALRjxaPdH4NU3fqLr%2BxbUH%2FwnT0Ai0h60GMqx17TtdYZfp4%3D\"}]}\r\netag: W/\"697c9f19-1c1\"\r\ncontent-encoding: br\r\ncf-ray: 9c73fa268f9635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec18d6e84c3cbefd322ead601cbfd8f0","sha1":"94fcc4898c0b9088e97f15152aaa6ff106ccc0a1","sha256":"6697d81b51a21744dacebd4f0a35cce24551d4185c9b47a3de7dda2c7212b90b","sha512":"8b0a965c70c481abe7dfb9b402911831746c82850c3690bc18d4a9881114ac25568241f7d2960f2d02d7f428288c5fe455ea257ecc50999160b1854be850b36a","ssdeep":"","tlshash":"daf05c95e70cb40828c58da19f2ce5a4251f30b82fd986d2c6852b1407879c99039594","first_seen":"2024-12-20T10:58:56.891313Z","last_seen":"2026-05-31T12:20:27.068235Z","times_seen":35,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdt-qr-code.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/faviconusdt.png","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-qr-code.com/","date":"2026-02-01T19:50:20.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr-code.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:49:12 GMT","end":"Thu, 30 Apr 2026 09:46:43 GMT"},"fingerprint":{"sha1":"94:14:92:51:2D:E7:0E:D2:BF:07:4F:87:BF:84:B1:40:5E:10:E3:C3","sha256":"EE:C1:75:91:3B:80:3E:CD:C7:53:AB:12:38:F6:8F:C1:47:D0:79:18:93:78:EB:03:B0:7A:5F:DE:45:76:15:B4"}}},"request":{"raw":"GET /faviconusdt.png HTTP/1.1\r\nHost: usdt-qr-code.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr-code.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1351\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jan 2026 12:07:08 GMT\r\npriority: u=6,i=?0\r\netag: \"697c9eec-547\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 63852\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJLaYhK42OIjt8NxFT6syRom09rsX1V2rCuCdIMpXOzlyb27AXsv4vdo1FvV3augkePZNLexs1kbmalbPJ%2BkUEPTQW9ejvZaDYoII57laYI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c73fa27ba7e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"99c10daad952643944ccca57d40dc197","sha1":"351444b56a806a47fc5cc6fdaeb312cf4a0f9f5d","sha256":"8349298c758486a93dac31d1efb9096e47fc29f67a0a2a54c3f9f0942b759eab","sha512":"fbbaf5c1c381bf8838ff718634a07926c3cd1f6445a5634ad58e001c398ebbb99045c88967433c8ec770669dccf293ec97674abceda847e4433d6390cd713fa7","ssdeep":"","tlshash":"fd218853b6338832d502f53f30fd2ad4dcd2590f151f2495e510745d3c280db255b302","first_seen":"2023-10-14T05:35:54Z","last_seen":"2026-04-18T18:07:27.75593Z","times_seen":12,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdt-qr-code.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T19:50:19.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr-code.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:49:12 GMT","end":"Thu, 30 Apr 2026 09:46:43 GMT"},"fingerprint":{"sha1":"94:14:92:51:2D:E7:0E:D2:BF:07:4F:87:BF:84:B1:40:5E:10:E3:C3","sha256":"EE:C1:75:91:3B:80:3E:CD:C7:53:AB:12:38:F6:8F:C1:47:D0:79:18:93:78:EB:03:B0:7A:5F:DE:45:76:15:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdt-qr-code.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 30 Jan 2026 12:07:11 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xn0M8LkClQRVCrsQPHuq0Xtdl%2B%2FDzaRnlMkTK9n5QAdGsbm2vhSC0Iz%2FcgvnMZgeIJDW6s9s0avqHAzI2VV%2B0G66cxaRx6ant7Kz8T2N\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c73fa249aad56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}],"data":{"size":15573,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (444)","md5":"4205eb4949ed364523ffa2afdd6fe912","sha1":"f84be934fc0da7d0bc9306654158827c878d4494","sha256":"f29409453cc22bac6cc40c33da81329372427f3d76f3410bbb0cc943490319ba","sha512":"df2556b3f537576b0aaf8e049e4a6afd1ebd39d82a90c29ccf9f7498563ee7e2fa0cdc79e5b65f126e6e09cb7ae9bfda9cb9965003a48e841b5933993700cc65","ssdeep":"384:xj9DH3/773rY1hh8uIGFsTzsSWHHED7pb2w:xj9DXj73rY1hh4KyzsBnED7l/","tlshash":"9a62d649f6947017830732365ad7660d626b624b620cdda03c5c82ddafe0b2c8d7f797","first_seen":"2026-02-01T02:06:32.710086Z","last_seen":"2026-02-01T19:50:45.098661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":77,"dns":58,"connect":1,"send":0,"wait":145,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdt-qr-code.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr-code.com/","date":"2026-02-01T19:50:19.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr-code.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27433\r\ncf-ray: 9c73fa269cdc568d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-1538f\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1508726\r\nexpires: Fri, 22 Jan 2027 19:50:19 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d%2FvPtea8mDO6EjyR%2BeOegg2PQgRrZgpvM%2B6PCqCyUz5gdr3Nx7qhbge4Q1O%2FqWs6R81G2HVRr5icJrWqeZxrHaB6brFTFqLVEjaKdAS59%2BvrgURrPBoMwzXgYI%2BWrGhC8rc2rJe8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-08T12:43:59.627322Z","times_seen":133973,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":12,"receive":2,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr-code.com/","date":"2026-02-01T19:50:19.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr-code.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 66920\r\ncf-ray: 9c73fa26ace2568d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-42587\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 943684\r\nexpires: Fri, 22 Jan 2027 19:50:19 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tA8I69fwB%2BJpyyruXhSvNtZD6bJGCk0IzuPj8%2B1LXBZfEN5%2BlpdTfKD%2FN4T5Stk3BqqSk0iH29g58f%2Fa4ekF3NxjMhXEBUap8jQ56YfWS%2F0K59TJuEO17vl8A5myZhXOiQWSKUgW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271751,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"6a07da9fae934baf3f749e876bbfdd96","sha1":"46a436eba01c79acdb225757ed80bf54bad6416b","sha256":"d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad","sha512":"e525248b09a6fb4022244682892e67bbf64a3e875eb889db43b0a24ab4a75077b5d5d26943ca382750d4febc3883193f3be581a4660065b6fc7b5ec20c4a044b","ssdeep":"6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3","tlshash":"f844a4d8fb8d112e423231aa9c2f12cdb77dd171560458aebd4d597c24a083d82faf7a","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-08T11:43:42.577214Z","times_seen":52357,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":20,"dns":1,"connect":4,"send":0,"wait":12,"receive":3,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.0/clipboard.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr-code.com/","date":"2026-02-01T19:50:19.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/clipboard.js/2.0.0/clipboard.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr-code.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2905\r\ncf-ray: 9c73fa26aced568d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e29-29a6\"\r\nlast-modified: Mon, 04 May 2020 16:09:13 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1509345\r\nexpires: Fri, 22 Jan 2027 19:50:19 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4RTKG0mZlv%2BrVB3NgDiyJECMGXQ%2Fx%2F%2B2rweGEPZr7OtO7Z8mvPD9%2B0rTjPb06DmTuSx9FTfCW21yHJ%2FGYaJtmNgg0NkxQUi8JjWO55tlY%2FzAOvFKLjLt1ma%2FVs2oTLFFAsqRtIF1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10662,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10552)","md5":"7c35192f6f3c8655e3d1bd927b3352b7","sha1":"257a1794bad17f3ae5839a178812b5b6aaffb1b3","sha256":"917c34325688477abe95a4d20090d15774bd2c98c4587e6d3f0bf5944835e86d","sha512":"870fe1813947c6d445669e5244b87ae6805552a97c91a81398d4da5d87f3e263f6661ebac2e5c341ad897fb3840bead6e15b0b8fe2a5e8c78ccc204edeaf1b60","ssdeep":"192:X4Hh4LyP153pPJ7rVWLBTwuLJ/eXbA5gpEHa4Lyc2mltIjk1QGo:XJA3JVVWLBT9LJ/eXbA5Tj2mzg/","tlshash":"9622855cb280b1b19ae760a9813f424fb371a469709a90d4b239e8f1bd78dcd5467f3c","first_seen":"2023-04-06T14:32:39Z","last_seen":"2026-06-08T12:06:02.407132Z","times_seen":3696,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":21,"dns":3,"connect":3,"send":0,"wait":16,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/img/download.svg","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-qr-code.com/","date":"2026-02-01T19:50:19.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr-code.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:49:12 GMT","end":"Thu, 30 Apr 2026 09:46:43 GMT"},"fingerprint":{"sha1":"94:14:92:51:2D:E7:0E:D2:BF:07:4F:87:BF:84:B1:40:5E:10:E3:C3","sha256":"EE:C1:75:91:3B:80:3E:CD:C7:53:AB:12:38:F6:8F:C1:47:D0:79:18:93:78:EB:03:B0:7A:5F:DE:45:76:15:B4"}}},"request":{"raw":"GET /img/download.svg HTTP/1.1\r\nHost: usdt-qr-code.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr-code.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jan 2026 12:07:53 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nage: 63852\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2BUM%2BjQQmK9qRZLtrJgbGuSYfm1PlF6hTs6b3XXW2%2FYcybgPE6r%2BZG9AK2TcOtO0q4JarEBzbVFIfPf3YCJt3VNVAiRDoYPT8tMNJhF7iz0%3D\"}]}\r\netag: W/\"697c9f19-1c4\"\r\ncontent-encoding: br\r\ncf-ray: 9c73fa268f9435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b131a294a8b74f2ccce37f314edfdbcb","sha1":"37514ca4b070a41d8f878f4ef61ace8d1bb022ab","sha256":"42a1a6399c09f7277a1e2cdd121bf1a0fa45af5d945c032d241f1eb7a5e4d50e","sha512":"cf86b13e76e5c96bd9f270e5292461c2ad598f2dfabfee7e136adf439ddc2239909b057648620d4bbe35deb409ee73559e33fd6fcd8e673f3c35e8c5447cf247","ssdeep":"","tlshash":"41f05ca5e70cb40828c58db18f2ce5a4651f20b81ed986d2c6853b1407879c9d43d5a4","first_seen":"2024-12-20T10:58:56.885688Z","last_seen":"2026-05-31T12:20:27.065989Z","times_seen":35,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdt-qr-code.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/css/main.css?v=1","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-qr-code.com/","date":"2026-02-01T19:50:19.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr-code.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:49:12 GMT","end":"Thu, 30 Apr 2026 09:46:43 GMT"},"fingerprint":{"sha1":"94:14:92:51:2D:E7:0E:D2:BF:07:4F:87:BF:84:B1:40:5E:10:E3:C3","sha256":"EE:C1:75:91:3B:80:3E:CD:C7:53:AB:12:38:F6:8F:C1:47:D0:79:18:93:78:EB:03:B0:7A:5F:DE:45:76:15:B4"}}},"request":{"raw":"GET /css/main.css?v=1 HTTP/1.1\r\nHost: usdt-qr-code.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr-code.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jan 2026 12:07:35 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697c9f07-38a3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 63852\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iccz9zzlY6Cs70Iph7b4Th%2BHKahi4BW65wCmu2%2Fz1LpbjE2UGKH3ah4ZSVM%2BayyDjzoQYYkmMnj19Md5Dg9tH076QjCGSuKkHnslEhNa698%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c73fa266f5f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14499,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14499), with no line terminators","md5":"b1bd0cd4cce03329140329a8e14ffea1","sha1":"1bafcb4f17724118983d3542cd2ecfe6d14e0a47","sha256":"7ac757004ce210638367b0d70d9ecf4373f11bd1e3ff9f845eb8ecae31c1189d","sha512":"21efed25306926bf2db2a36631e3c0a25da483274618bac1efea786a57e1998df12e69da330e86504c2a12a1e181856566a6427274d1f4da6ece504267c770aa","ssdeep":"192:Mk3QGQt/2CHvif7UqEBsx2Tep4kvE1XrIpRGmLvwD9e5CC:VQv3Bst2krRGm2C","tlshash":"505275118a88210fb0574735dbd2ea44323e8541fc620baefb793199c7e718e937f696","first_seen":"2024-12-10T02:49:22.595087Z","last_seen":"2026-05-31T12:20:27.091044Z","times_seen":36,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdt-qr-code.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/loading.js","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr-code.com/","date":"2026-02-01T19:50:19.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr-code.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:49:12 GMT","end":"Thu, 30 Apr 2026 09:46:43 GMT"},"fingerprint":{"sha1":"94:14:92:51:2D:E7:0E:D2:BF:07:4F:87:BF:84:B1:40:5E:10:E3:C3","sha256":"EE:C1:75:91:3B:80:3E:CD:C7:53:AB:12:38:F6:8F:C1:47:D0:79:18:93:78:EB:03:B0:7A:5F:DE:45:76:15:B4"}}},"request":{"raw":"GET /loading.js HTTP/1.1\r\nHost: usdt-qr-code.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr-code.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jan 2026 12:07:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697c9ef2-1874\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 63852\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CUKiyzkHIDeykB%2FRM5%2F%2F1Zk0PKDZ7AEvI1TaZvsq62nPNzgRjcvC0if1oQkn2zKBaEJC2XOiy1a%2BTm6VaOd7YpSd5meQ%2BjTsCLXlJCx6gtk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c73fa268f9135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6260,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"67a2297fbdd096ee15364977e3669755","sha1":"178ca8b2d0eb84a7fe8f9367d8ec8973be37116d","sha256":"6cba712d5f0901a3cadac13b480e6f22c6b403ec97d98bfa58899845c74afda4","sha512":"ea69fce890e3d66b8c63438a993f38033e24d09b54727a3c3c1b10367a1b0b43bee37a7285c5a251795a353a16b817fd516c6d1239634494f7f9e91f7a9c665b","ssdeep":"96:lemy14fPrWg1twEX43S5cixEn7kt5TNwn:llFfPqgnwEX4C5cixEn7kt+","tlshash":"c4d145b4abf7aa4c9027a0671e3f3204156509130905ed9d7fcca7cc9fc922d56b77a1","first_seen":"2025-04-07T03:14:35.168992Z","last_seen":"2026-05-31T12:20:27.071118Z","times_seen":34,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdt-qr-code.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr-code.com/js/main.js","fqdn":"usdt-qr-code.com","domain":"usdt-qr-code.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr-code.com/","date":"2026-02-01T19:50:19.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr-code.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:49:12 GMT","end":"Thu, 30 Apr 2026 09:46:43 GMT"},"fingerprint":{"sha1":"94:14:92:51:2D:E7:0E:D2:BF:07:4F:87:BF:84:B1:40:5E:10:E3:C3","sha256":"EE:C1:75:91:3B:80:3E:CD:C7:53:AB:12:38:F6:8F:C1:47:D0:79:18:93:78:EB:03:B0:7A:5F:DE:45:76:15:B4"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: usdt-qr-code.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr-code.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 19:50:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jan 2026 12:08:18 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"697c9f32-593b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 63852\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FoG%2FjCJweWn6Tx2%2FBy3T5W%2BvQnRnGva%2BA%2FjgW%2BrDy8GwhJ65nhbps42CfECXBXTj1%2F6wpdqfCJmhaYXCD8azuLicLRe44pjzwomhyJRULC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c73fa266f5d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22843,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22843), with no line terminators","md5":"37e389e67fed235bc1b909e12da21594","sha1":"9773cb54535c3e819f27a16ba0198137851a83ed","sha256":"6ef13e7def4e72eaa323bfc3e231521ec93cda6abaaf4f4ba5d74965b77ab161","sha512":"2f21d91cba9bbf104a8ecf63d21909f12e988d2bdd423b2e7e0d0e59d0e56358c8e1ab38d31e812daf85715d004a6301ce782d408126f98f6eda724bf4e1f683","ssdeep":"384:HeNSaNiN79U0BmzpWwY6zAAdTR0PeU6EPb1R/7pyHHqsgl41YucMRlyyT71O3yZj:H86QfY6e6ET1R/7kWqcMdToyZiK","tlshash":"89a2c895b28062e553926ce2082f504bf175d8267c0e8554eb36d4e2acf8fda4877fbc","first_seen":"2024-12-10T02:49:22.609835Z","last_seen":"2026-05-31T12:20:27.089241Z","times_seen":36,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdt-qr-code.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}