{"report_id":"374325d0-76c7-459d-88ff-c1084593b0eb","version":6,"status":"done","tags":[],"date":"2026-04-08T21:31:22Z","url":{"schema":"https","addr":"usdt-qr.com","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"172.67.177.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdt-qr.com/","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"title":"Tether (USDT) QR Code Generator — Instant USDT Wallet QR Maker","dom":{"size":11775,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (444)","md5":"71bcd44022addb9188a6e0363cb685d4","sha1":"5cb41d8b36967080ad15212ffed87c881cb601d9","sha256":"9561175046071ed017080423a85eb6642f7faa6a6b42d7505e4f8ddbb919d774","sha512":"9133897eeebd99c324f505baf27d35bf68de963ed9a490f71fabdb51e7b690b39802cf184a80ea3947d7b3a8401e1f4ad0e795e552c379d8d03f8de326049e06","ssdeep":"192:s9jV7V9mtpTUnXskBAwGXxLPigeFqnjH/moIZOKZVBvRYBVVUYHair68yJSoyeYh:Sj9D8kBlGXxL6zFM+oSltvqBkYSQWJw","tlshash":"af32094be75491370205279269c26fa6c73ac14be34058b93eac036e5fe2f29497b397","dom_hash":"domhash71060d04957d89ba877ac23e372b37ed","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdt-qr.com","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"172.67.177.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-13T21:31:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-05T22:33:08.106483Z","alert_count":0,"request_count":3,"received_data":372397,"sent_data":1328,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"usdt-qr.com","ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-11","domain_rank":0,"first_seen":"2026-04-08T21:31:22.891734Z","last_seen":"2026-04-08T21:31:22.891734Z","alert_count":11,"request_count":11,"received_data":138377,"sent_data":4695,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdt-qr.com/loading.js","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2958fd861929271b389b0f421b67b3ea","sha1":"1afe4fe17943e08d31135b9bdb3834e823836dd9","sha256":"58785917f1da3a3daca043b1923667637de3e3faa430c8f9f43c43c2ccaeee66","sha512":"d5b730fffb57cc694fe4646f91e25a619b23c6f0e51546176e8c6101dfe45dd4236db3466a054ea6e1e3f47ca31b889948e25a3086c01c1c66f8b38ea0eacd5f","ssdeep":"96:lemy173fPrWgYdmEX43S5cixEn7kt5TNwn:lls3fPqgYdmEX4C5cixEn7kt+","tlshash":"4bd144b4abf7a94c902ba0671e3f2204156509130905edad7fcca7cc9fc922d56b77a1","size":6268,"data":"","first_seen":"2024-12-10T02:49:22.603693Z","last_seen":"2026-04-18T19:17:44.527152Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a07da9fae934baf3f749e876bbfdd96","sha1":"46a436eba01c79acdb225757ed80bf54bad6416b","sha256":"d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad","sha512":"e525248b09a6fb4022244682892e67bbf64a3e875eb889db43b0a24ab4a75077b5d5d26943ca382750d4febc3883193f3be581a4660065b6fc7b5ec20c4a044b","ssdeep":"6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3","tlshash":"f844a4d8fb8d112e423231aa9c2f12cdb77dd171560458aebd4d597c24a083d82faf7a","size":271751,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-22T01:58:04.897432Z","times_seen":51360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-22T04:03:59.503486Z","times_seen":122451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.0/clipboard.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c35192f6f3c8655e3d1bd927b3352b7","sha1":"257a1794bad17f3ae5839a178812b5b6aaffb1b3","sha256":"917c34325688477abe95a4d20090d15774bd2c98c4587e6d3f0bf5944835e86d","sha512":"870fe1813947c6d445669e5244b87ae6805552a97c91a81398d4da5d87f3e263f6661ebac2e5c341ad897fb3840bead6e15b0b8fe2a5e8c78ccc204edeaf1b60","ssdeep":"192:X4Hh4LyP153pPJ7rVWLBTwuLJ/eXbA5gpEHa4Lyc2mltIjk1QGo:XJA3JVVWLBT9LJ/eXbA5Tj2mzg/","tlshash":"9622855cb280b1b19ae760a9813f424fb371a469709a90d4b239e8f1bd78dcd5467f3c","size":10661,"data":"","first_seen":"2023-04-06T14:32:39Z","last_seen":"2026-04-22T03:19:10.632393Z","times_seen":3019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/js/3.js","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6227fffce83590ed42c7d9fa84ae06ba","sha1":"7a507c89e3aff22c96711428d5e9b6924bf3905d","sha256":"7bab28ac7a43f2cb6a0e9dcca98922241209f1d74fa0d2ee08a4a66977dc26ac","sha512":"a39f5cb7dfb776c641f2f715eb764ce10d93b6cc448e379ed2627f79516cef92237a51b347857580b9fe54b1b298cae49dba4d22793101c4c2671db98e9a33bb","ssdeep":"","tlshash":"8421ee5cf8e32644827335b5891f818635b726e3212def50354cdac28fb8939e46e6a9","size":1366,"data":"","first_seen":"2025-08-09T17:43:34.102576Z","last_seen":"2026-04-18T18:07:27.754322Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/js/1.js","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e054fb9aa5c32ca98b0f347c5cc91a6","sha1":"edfe72d6005e76156f81891e8bb782394e5bf70a","sha256":"3df9a932013fd1a9227c671436d251d7fee2e6c0974af5b91153291e73159aa4","sha512":"863da4bf590dac7226d6c5e87ef9a3e6cb2499c847062e2b26af835d65c01276693371d364622a46c740cc63adba71c7cd9ebd81d92d22e24ef4d57772771093","ssdeep":"","tlshash":"5981246874a67149e32ff13d8b3f960c20ba252b280dcd55bc0e85c45fa437d1dda6e6","size":3936,"data":"","first_seen":"2026-04-08T21:31:27.175369Z","last_seen":"2026-04-08T21:33:05.161119Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/js/main.js","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37e389e67fed235bc1b909e12da21594","sha1":"9773cb54535c3e819f27a16ba0198137851a83ed","sha256":"6ef13e7def4e72eaa323bfc3e231521ec93cda6abaaf4f4ba5d74965b77ab161","sha512":"2f21d91cba9bbf104a8ecf63d21909f12e988d2bdd423b2e7e0d0e59d0e56358c8e1ab38d31e812daf85715d004a6301ce782d408126f98f6eda724bf4e1f683","ssdeep":"384:HeNSaNiN79U0BmzpWwY6zAAdTR0PeU6EPb1R/7pyHHqsgl41YucMRlyyT71O3yZj:H86QfY6e6ET1R/7kWqcMdToyZiK","tlshash":"89a2c895b28062e553926ce2082f504bf175d8267c0e8554eb36d4e2acf8fda4877fbc","size":22843,"data":"","first_seen":"2024-12-10T02:49:22.609835Z","last_seen":"2026-04-18T19:17:44.498392Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"usdt-qr.com/css/main.css?v=1","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 19:36:34 GMT","end":"Tue, 07 Jul 2026 20:33:38 GMT"},"fingerprint":{"sha1":"83:E8:FD:D7:55:D1:37:A1:81:76:12:66:31:26:96:DD:35:9A:C1:39","sha256":"59:99:7D:8B:C2:09:F8:BE:31:FB:B8:56:A0:7C:2B:95:1C:0C:95:F2:E4:72:6A:D0:85:FA:63:56:A3:B2:C7:51"}}},"request":{"raw":"GET /css/main.css?v=1 HTTP/1.1\r\nHost: usdt-qr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Dec 2025 12:27:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693ab8bb-38a3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SmppgjRtcg6czseR%2FZbwgA9nVoC%2Fb19ABSSGtkjgPtcSlCWfqitXlaREE53Z0jn0m8%2F%2Fn2gmh%2FAlBxClhjSKBCD1rvtT7ND9CJaIUqprAVwTn%2BSgrA00%2BKWaQpNa3w%3D%3D\"}]}\r\ncf-ray: 9e94606408a149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14499,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14499), with no line terminators","md5":"b1bd0cd4cce03329140329a8e14ffea1","sha1":"1bafcb4f17724118983d3542cd2ecfe6d14e0a47","sha256":"7ac757004ce210638367b0d70d9ecf4373f11bd1e3ff9f845eb8ecae31c1189d","sha512":"21efed25306926bf2db2a36631e3c0a25da483274618bac1efea786a57e1998df12e69da330e86504c2a12a1e181856566a6427274d1f4da6ece504267c770aa","ssdeep":"192:Mk3QGQt/2CHvif7UqEBsx2Tep4kvE1XrIpRGmLvwD9e5CC:VQv3Bst2krRGm2C","tlshash":"505275118a88210fb0574735dbd2ea44323e8541fc620baefb793199c7e718e937f696","first_seen":"2024-12-10T02:49:22.595087Z","last_seen":"2026-04-18T19:17:44.518473Z","times_seen":34,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 66920\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-42587\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1154012\r\nexpires: Mon, 29 Mar 2027 21:31:01 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QNj4qt3xNdqIdqanEWJnN%2FMsdr35ZYPNur9NyD3noPtWKL%2BAhIi%2FD6TLRMptcwjXZqleNadYiKjv2ha6%2BaHDjmGH7xnSp4JT5EYlSWt1Qis7EZ8785GEJk9LRcQHaJ1yhvDxYEwA\"}]}\r\ncf-ray: 9e9460643d3fb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":271751,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"6a07da9fae934baf3f749e876bbfdd96","sha1":"46a436eba01c79acdb225757ed80bf54bad6416b","sha256":"d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad","sha512":"e525248b09a6fb4022244682892e67bbf64a3e875eb889db43b0a24ab4a75077b5d5d26943ca382750d4febc3883193f3be581a4660065b6fc7b5ec20c4a044b","ssdeep":"6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3","tlshash":"f844a4d8fb8d112e423231aa9c2f12cdb77dd171560458aebd4d597c24a083d82faf7a","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-22T01:58:04.897432Z","times_seen":51360,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":20,"dns":3,"connect":1,"send":0,"wait":9,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.0/clipboard.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/clipboard.js/2.0.0/clipboard.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2905\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e29-29a6\"\r\nlast-modified: Mon, 04 May 2020 16:09:13 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 678313\r\nexpires: Mon, 29 Mar 2027 21:31:01 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sUvNRpaY%2Fv%2BsWNmEier5ZIwd54kFEj5VR%2BikMNt1yO%2BNexYyU41Hg9kaE6MQVYA5bpyyzGTg7fCSFNYDccETizt26d%2B3e3gvDJhFLMgqco%2BPWvHbhLM%2B9cKQGfzpbECjMI6LcldO\"}]}\r\ncf-ray: 9e9460643d43b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10662,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10552)","md5":"7c35192f6f3c8655e3d1bd927b3352b7","sha1":"257a1794bad17f3ae5839a178812b5b6aaffb1b3","sha256":"917c34325688477abe95a4d20090d15774bd2c98c4587e6d3f0bf5944835e86d","sha512":"870fe1813947c6d445669e5244b87ae6805552a97c91a81398d4da5d87f3e263f6661ebac2e5c341ad897fb3840bead6e15b0b8fe2a5e8c78ccc204edeaf1b60","ssdeep":"192:X4Hh4LyP153pPJ7rVWLBTwuLJ/eXbA5gpEHa4Lyc2mltIjk1QGo:XJA3JVVWLBT9LJ/eXbA5Tj2mzg/","tlshash":"9622855cb280b1b19ae760a9813f424fb371a469709a90d4b239e8f1bd78dcd5467f3c","first_seen":"2023-04-06T14:32:39Z","last_seen":"2026-04-22T03:19:10.632393Z","times_seen":3019,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":20,"dns":1,"connect":6,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/img/usdtqrcode.png","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 19:36:34 GMT","end":"Tue, 07 Jul 2026 20:33:38 GMT"},"fingerprint":{"sha1":"83:E8:FD:D7:55:D1:37:A1:81:76:12:66:31:26:96:DD:35:9A:C1:39","sha256":"59:99:7D:8B:C2:09:F8:BE:31:FB:B8:56:A0:7C:2B:95:1C:0C:95:F2:E4:72:6A:D0:85:FA:63:56:A3:B2:C7:51"}}},"request":{"raw":"GET /img/usdtqrcode.png HTTP/1.1\r\nHost: usdt-qr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 67278\r\nlast-modified: Thu, 11 Dec 2025 12:28:34 GMT\r\npriority: u=4,i=?0\r\netag: \"693ab8f2-106ce\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d8cERuwV0toDRq78oewkhZ8Y7TsDtbOEe70Ny31AG9vfkAIYP9QWBk5ewj%2BgDIZoQr078VV%2B0ZxCCu7t7Eouu1%2BWgGI%2BPpQsoW9wKdCCt3hg6fjSj0a%2B64InknqVPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e94606408a549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 817, 8-bit/color RGBA, non-interlaced","md5":"1320a67b3392ed2bfe9e3734ddfd2d2b","sha1":"952aa8ceae4362e33e4e7de372694a37bd747eb5","sha256":"bba0f811185072747208aa5d22793e3fa0c8f4048a5496553872f452845c0376","sha512":"6ebe110d69bcaf194b60c3cedebea57be45e1c75a305bc2e265ee2cb84e38d708f991b69cf3f50f8c7ef9cbb34f61da448792fa339fc49d09a75ef41a84fe9bb","ssdeep":"1536:FnNiHdlWdnmM1m0q5p2DVDdsiPkNvlqjlLS:yHqdnZ1mlwDVW1olLS","tlshash":"cb63f2699ce74cc2f45ce0f0e79d06163e02c4dad2949b2243fd96f2b7abc36584ac19","first_seen":"2023-11-09T19:16:07Z","last_seen":"2026-04-21T17:39:02.823328Z","times_seen":1375,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/img/download--white.svg","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 19:36:34 GMT","end":"Tue, 07 Jul 2026 20:33:38 GMT"},"fingerprint":{"sha1":"83:E8:FD:D7:55:D1:37:A1:81:76:12:66:31:26:96:DD:35:9A:C1:39","sha256":"59:99:7D:8B:C2:09:F8:BE:31:FB:B8:56:A0:7C:2B:95:1C:0C:95:F2:E4:72:6A:D0:85:FA:63:56:A3:B2:C7:51"}}},"request":{"raw":"GET /img/download--white.svg HTTP/1.1\r\nHost: usdt-qr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGEn63cDYMDZxl7xxtHpqRGHmMy7PA%2FtniQzx7JG%2F8ZrcX3h0fhjum%2F%2Fxb9k26gTJbyA7HgiwSQkdN1WN4MfOvC6ATbRZrbf2SsvfRLTxzzp4D0BvuxRPDk%2BgHf5ow%3D%3D\"}]}\r\nlast-modified: Thu, 11 Dec 2025 12:28:07 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"693ab8d7-1c1\"\r\ncf-ray: 9e94606428ab49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec18d6e84c3cbefd322ead601cbfd8f0","sha1":"94fcc4898c0b9088e97f15152aaa6ff106ccc0a1","sha256":"6697d81b51a21744dacebd4f0a35cce24551d4185c9b47a3de7dda2c7212b90b","sha512":"8b0a965c70c481abe7dfb9b402911831746c82850c3690bc18d4a9881114ac25568241f7d2960f2d02d7f428288c5fe455ea257ecc50999160b1854be850b36a","ssdeep":"","tlshash":"daf05c95e70cb40828c58da19f2ce5a4251f30b82fd986d2c6852b1407879c99039594","first_seen":"2024-12-20T10:58:56.891313Z","last_seen":"2026-04-18T19:17:44.497739Z","times_seen":33,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/js/3.js","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 19:36:34 GMT","end":"Tue, 07 Jul 2026 20:33:38 GMT"},"fingerprint":{"sha1":"83:E8:FD:D7:55:D1:37:A1:81:76:12:66:31:26:96:DD:35:9A:C1:39","sha256":"59:99:7D:8B:C2:09:F8:BE:31:FB:B8:56:A0:7C:2B:95:1C:0C:95:F2:E4:72:6A:D0:85:FA:63:56:A3:B2:C7:51"}}},"request":{"raw":"GET /js/3.js HTTP/1.1\r\nHost: usdt-qr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 11 Dec 2025 12:28:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693ab904-556\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2FHH3CLK16IX3dC3CKgML5CVCiXYFNm%2B3348NqimEXDWpkgU47fecypS3L3O79zEQ83uVGin2bHU4HjcOJitxLCobj%2FhcvzDY7jNmi5TK5ZMmDo%2FO%2BCdG3osidv%2B8g%3D%3D\"}]}\r\ncf-ray: 9e94606418a849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"6227fffce83590ed42c7d9fa84ae06ba","sha1":"7a507c89e3aff22c96711428d5e9b6924bf3905d","sha256":"7bab28ac7a43f2cb6a0e9dcca98922241209f1d74fa0d2ee08a4a66977dc26ac","sha512":"a39f5cb7dfb776c641f2f715eb764ce10d93b6cc448e379ed2627f79516cef92237a51b347857580b9fe54b1b298cae49dba4d22793101c4c2671db98e9a33bb","ssdeep":"","tlshash":"8421ee5cf8e32644827335b5891f818635b726e3212def50354cdac28fb8939e46e6a9","first_seen":"2025-08-09T17:43:34.102576Z","last_seen":"2026-04-18T18:07:27.754322Z","times_seen":6,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/img/download.svg","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 19:36:34 GMT","end":"Tue, 07 Jul 2026 20:33:38 GMT"},"fingerprint":{"sha1":"83:E8:FD:D7:55:D1:37:A1:81:76:12:66:31:26:96:DD:35:9A:C1:39","sha256":"59:99:7D:8B:C2:09:F8:BE:31:FB:B8:56:A0:7C:2B:95:1C:0C:95:F2:E4:72:6A:D0:85:FA:63:56:A3:B2:C7:51"}}},"request":{"raw":"GET /img/download.svg HTTP/1.1\r\nHost: usdt-qr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMLjzJdD8wfRw%2BfZ95J0LFP1BWnzIphtFcxzO5zvhFaY3fpgSuKCl2P6rTesQqGdf%2FoCef5zOwdXWfPnJsYwgfyqZQa5dnfeefczQUtrFoLQpLBz6NCGo3t1wRdAAA%3D%3D\"}]}\r\nlast-modified: Thu, 11 Dec 2025 12:28:08 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"693ab8d8-1c4\"\r\ncf-ray: 9e94606418a949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b131a294a8b74f2ccce37f314edfdbcb","sha1":"37514ca4b070a41d8f878f4ef61ace8d1bb022ab","sha256":"42a1a6399c09f7277a1e2cdd121bf1a0fa45af5d945c032d241f1eb7a5e4d50e","sha512":"cf86b13e76e5c96bd9f270e5292461c2ad598f2dfabfee7e136adf439ddc2239909b057648620d4bbe35deb409ee73559e33fd6fcd8e673f3c35e8c5447cf247","ssdeep":"","tlshash":"41f05ca5e70cb40828c58db18f2ce5a4651f20b81ed986d2c6853b1407879c9d43d5a4","first_seen":"2024-12-20T10:58:56.885688Z","last_seen":"2026-04-18T19:17:44.513024Z","times_seen":33,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/loading.js","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 19:36:34 GMT","end":"Tue, 07 Jul 2026 20:33:38 GMT"},"fingerprint":{"sha1":"83:E8:FD:D7:55:D1:37:A1:81:76:12:66:31:26:96:DD:35:9A:C1:39","sha256":"59:99:7D:8B:C2:09:F8:BE:31:FB:B8:56:A0:7C:2B:95:1C:0C:95:F2:E4:72:6A:D0:85:FA:63:56:A3:B2:C7:51"}}},"request":{"raw":"GET /loading.js HTTP/1.1\r\nHost: usdt-qr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 11 Dec 2025 12:27:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693ab895-1874\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HreJswc2kPtVN7JIrz%2FZ3zOzey8MECIoGf5W9KSel8cweWbaR%2FKCaO2jEkUKgPmOL%2FaunLoM3jqBdokIsgpd9noD2CRRux%2BSL1h0nowwo1xuL4HUr26j8Ylufjrqng%3D%3D\"}]}\r\ncf-ray: 9e94606408a449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6260,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"67a2297fbdd096ee15364977e3669755","sha1":"178ca8b2d0eb84a7fe8f9367d8ec8973be37116d","sha256":"6cba712d5f0901a3cadac13b480e6f22c6b403ec97d98bfa58899845c74afda4","sha512":"ea69fce890e3d66b8c63438a993f38033e24d09b54727a3c3c1b10367a1b0b43bee37a7285c5a251795a353a16b817fd516c6d1239634494f7f9e91f7a9c665b","ssdeep":"96:lemy14fPrWg1twEX43S5cixEn7kt5TNwn:llFfPqgnwEX4C5cixEn7kt+","tlshash":"c4d145b4abf7aa4c9027a0671e3f3204156509130905ed9d7fcca7cc9fc922d56b77a1","first_seen":"2025-04-07T03:14:35.168992Z","last_seen":"2026-04-18T19:17:44.523139Z","times_seen":32,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/loading.css","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 19:36:34 GMT","end":"Tue, 07 Jul 2026 20:33:38 GMT"},"fingerprint":{"sha1":"83:E8:FD:D7:55:D1:37:A1:81:76:12:66:31:26:96:DD:35:9A:C1:39","sha256":"59:99:7D:8B:C2:09:F8:BE:31:FB:B8:56:A0:7C:2B:95:1C:0C:95:F2:E4:72:6A:D0:85:FA:63:56:A3:B2:C7:51"}}},"request":{"raw":"GET /loading.css HTTP/1.1\r\nHost: usdt-qr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nlast-modified: Thu, 11 Dec 2025 12:26:56 GMT\r\npriority: u=2,i=?0\r\netag: \"693ab890-0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kC9dryHiNyroFMRwf6aLrzBA6sb7dGq1%2BpOuOGyFE2KjYSNQpmTMwh8HlbCRkX73qsmVOtwNH8WRQhWS4YSNs6Lv%2BR6U2G6q0%2BME%2F4B5VWI32ivL2%2FCjG9tNkorMLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e94606418a749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T04:09:27.367407Z","times_seen":14044227,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/js/1.js","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 19:36:34 GMT","end":"Tue, 07 Jul 2026 20:33:38 GMT"},"fingerprint":{"sha1":"83:E8:FD:D7:55:D1:37:A1:81:76:12:66:31:26:96:DD:35:9A:C1:39","sha256":"59:99:7D:8B:C2:09:F8:BE:31:FB:B8:56:A0:7C:2B:95:1C:0C:95:F2:E4:72:6A:D0:85:FA:63:56:A3:B2:C7:51"}}},"request":{"raw":"GET /js/1.js HTTP/1.1\r\nHost: usdt-qr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 11 Dec 2025 12:28:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693ab901-f60\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XpjQ%2FxjbepY6TQZcxPmE3xsYML4cmZ684EVaj%2FjgtQSHfrJwvpuDx3KWz3RQ39RIhWUcxwIR8teETKwEJlZ2ZOTs4nO31jOQcpevhjDDBbd3beaDrLKenUmi99jt1g%3D%3D\"}]}\r\ncf-ray: 9e94606418a649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3936,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7e054fb9aa5c32ca98b0f347c5cc91a6","sha1":"edfe72d6005e76156f81891e8bb782394e5bf70a","sha256":"3df9a932013fd1a9227c671436d251d7fee2e6c0974af5b91153291e73159aa4","sha512":"863da4bf590dac7226d6c5e87ef9a3e6cb2499c847062e2b26af835d65c01276693371d364622a46c740cc63adba71c7cd9ebd81d92d22e24ef4d57772771093","ssdeep":"","tlshash":"5981246874a67149e32ff13d8b3f960c20ba252b280dcd55bc0e85c45fa437d1dda6e6","first_seen":"2026-04-08T21:31:27.175369Z","last_seen":"2026-04-08T21:33:05.161119Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/faviconusdt.png","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 19:36:34 GMT","end":"Tue, 07 Jul 2026 20:33:38 GMT"},"fingerprint":{"sha1":"83:E8:FD:D7:55:D1:37:A1:81:76:12:66:31:26:96:DD:35:9A:C1:39","sha256":"59:99:7D:8B:C2:09:F8:BE:31:FB:B8:56:A0:7C:2B:95:1C:0C:95:F2:E4:72:6A:D0:85:FA:63:56:A3:B2:C7:51"}}},"request":{"raw":"GET /faviconusdt.png HTTP/1.1\r\nHost: usdt-qr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 1351\r\nlast-modified: Thu, 11 Dec 2025 12:26:49 GMT\r\npriority: u=6,i=?0\r\netag: \"693ab889-547\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UlCo8JAkthW4g1JD9%2BtP9uM5%2Ft8KBSp%2FsGuTa3JjuhHOlmxtFlivcTMmgTmQXwogO4fjAPv%2BJXiNfuwKJxAlr4s3UpRcg6eRGJnafmamPAzelm8Or%2FdpeR6fS0G73w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e946065b8d249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"99c10daad952643944ccca57d40dc197","sha1":"351444b56a806a47fc5cc6fdaeb312cf4a0f9f5d","sha256":"8349298c758486a93dac31d1efb9096e47fc29f67a0a2a54c3f9f0942b759eab","sha512":"fbbaf5c1c381bf8838ff718634a07926c3cd1f6445a5634ad58e001c398ebbb99045c88967433c8ec770669dccf293ec97674abceda847e4433d6390cd713fa7","ssdeep":"","tlshash":"fd218853b6338832d502f53f30fd2ad4dcd2590f151f2495e510745d3c280db255b302","first_seen":"2023-10-14T05:35:54Z","last_seen":"2026-04-18T18:07:27.75593Z","times_seen":12,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-08T21:31:00.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 19:36:34 GMT","end":"Tue, 07 Jul 2026 20:33:38 GMT"},"fingerprint":{"sha1":"83:E8:FD:D7:55:D1:37:A1:81:76:12:66:31:26:96:DD:35:9A:C1:39","sha256":"59:99:7D:8B:C2:09:F8:BE:31:FB:B8:56:A0:7C:2B:95:1C:0C:95:F2:E4:72:6A:D0:85:FA:63:56:A3:B2:C7:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdt-qr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 21:31:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 11 Dec 2025 12:26:56 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5S8oa6CzP8M18LXxqz4cst0D7B54cdmvIvyHVYZJvdRi6rKmoAFlw8k7jM9BOtd5LG2zNjvCA3juo83QorTjDwVgf9GQAAdhC%2FeRhaSSW61WPL6i2uol6T%2B7FTrfw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e94606228fa56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":11839,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (444)","md5":"4086b4facfd657d5f6946b91f9e739c0","sha1":"7b370fb5f993a019a21f23d44ef5b2b2a5fafcc2","sha256":"5d62449de7214664ad3ef8e94dec8eaa90d7c71a624876423055b1f15857c6f8","sha512":"a55609fef7ee90af03eac0cbe2601c2f0ea2e0cee9a20028207949815a9e02bb4500d9ab49f36e962c53972c78956357139fc5c2b4113cfc66752b46fb70c338","ssdeep":"192:4AjV7V9mtpT8qnXskBxT/gPigeFqnjH/moIZOKZVBvRYBVVUYHair68yJSoyeYzq:xj9D9kBt/g6zFM+oSltvqBkYShUJw","tlshash":"4832f84be75481370205279269c26fa6c73bc14be34058b53eac03ae5fe2f19497b397","first_seen":"2026-04-08T21:31:27.17721Z","last_seen":"2026-04-08T21:33:05.160312Z","times_seen":2,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":82,"dns":65,"connect":2,"send":0,"wait":163,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-qr.com/js/main.js","fqdn":"usdt-qr.com","domain":"usdt-qr.com","tld":"com"},"ip":{"addr":"104.21.56.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-qr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 19:36:34 GMT","end":"Tue, 07 Jul 2026 20:33:38 GMT"},"fingerprint":{"sha1":"83:E8:FD:D7:55:D1:37:A1:81:76:12:66:31:26:96:DD:35:9A:C1:39","sha256":"59:99:7D:8B:C2:09:F8:BE:31:FB:B8:56:A0:7C:2B:95:1C:0C:95:F2:E4:72:6A:D0:85:FA:63:56:A3:B2:C7:51"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: usdt-qr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 11 Dec 2025 12:28:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693ab905-593b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dt8qaZEo9YrZJv8U2k1fKl6uel4%2Fq9bBzYjI%2BofH7itjdsbeDhmi4jJBzL4%2BvInZJafAn6MTsIfGjfmPCyXEE5VhBITTqZoUfiBmfYBjAPjf0pLhi5MgamiRRznO%2BQ%3D%3D\"}]}\r\ncf-ray: 9e94606408a049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22843,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22843), with no line terminators","md5":"37e389e67fed235bc1b909e12da21594","sha1":"9773cb54535c3e819f27a16ba0198137851a83ed","sha256":"6ef13e7def4e72eaa323bfc3e231521ec93cda6abaaf4f4ba5d74965b77ab161","sha512":"2f21d91cba9bbf104a8ecf63d21909f12e988d2bdd423b2e7e0d0e59d0e56358c8e1ab38d31e812daf85715d004a6301ce782d408126f98f6eda724bf4e1f683","ssdeep":"384:HeNSaNiN79U0BmzpWwY6zAAdTR0PeU6EPb1R/7pyHHqsgl41YucMRlyyT71O3yZj:H86QfY6e6ET1R/7kWqcMdToyZiK","tlshash":"89a2c895b28062e553926ce2082f504bf175d8267c0e8554eb36d4e2acf8fda4877fbc","first_seen":"2024-12-10T02:49:22.609835Z","last_seen":"2026-04-18T19:17:44.498392Z","times_seen":34,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdt-qr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-qr.com/","date":"2026-04-08T21:31:01.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-qr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 21:31:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27433\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-1538f\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 122788\r\nexpires: Mon, 29 Mar 2027 21:31:01 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsWayCyHHSqReRju6Jp2PbOvBjPv%2BMZynsjN%2BIfHT0A3RQWOkGvyBOTeIWQHZzw8aQQgf0tX2eET1e44Mjwc%2Bq1pX6f%2FR6Tj%2B0xx5WCyvSEHVPgP6S6t4F%2Be8C81kC3JyThqiIPv\"}]}\r\ncf-ray: 9e9460643d3cb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-22T04:03:59.503486Z","times_seen":122451,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":9,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}