{"report_id":"6941fa3c-487f-40de-b983-d56e66b4fd21","version":6,"status":"done","tags":[],"date":"2026-02-14T12:18:54Z","url":{"schema":"https","addr":"scamqr.org/","fqdn":"scamqr.org","domain":"scamqr.org","tld":"org"},"ip":{"addr":"104.21.53.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"decodeqrcode.com/","fqdn":"decodeqrcode.com","domain":"decodeqrcode.com","tld":"com"},"title":"Decode QR Code","dom":{"size":6043,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c26d06c8034448c694f3cf5b78f4babf","sha1":"7846547d3f9651a4ff5eabb0aebce2aa882bb275","sha256":"300886c64ceba82b025c59b9b4e1cc18f8eb1bb96be326451513e75111b1f188","sha512":"e86a0cef154c57a5569a4576828d5cd9bb347ffee67d6881ecac8efe9b5c2b8e3daa7604c2a8451c93e03bd2ffbaa7245251a2596d8c82866616ec10fd448acc","ssdeep":"96:nOfw0vcml09wapT0iTeiIi4RVLH8o3mKYdFF:Ofw0UWah0iTeiIiyVz3OF","tlshash":"89c164c2464c6404a12fc871b457bfe7b6ad70d1eb4a1cd8bc581bdac88afb44563f89","dom_hash":"domhash5de734ebc010c08d32ff844f8c21b2c1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"scamqr.org/","fqdn":"scamqr.org","domain":"scamqr.org","tld":"org"},"ip":{"addr":"104.21.53.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T12:18:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"decodeqrcode.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-13","domain_rank":0,"first_seen":"2026-02-13T15:44:59.188048Z","last_seen":"2026-02-13T15:44:59.188048Z","alert_count":0,"request_count":4,"received_data":183090,"sent_data":1880,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"scamqr.org","ip":{"addr":"104.21.53.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-28","domain_rank":0,"first_seen":"2026-02-14T12:18:54.561974Z","last_seen":"2026-02-14T12:18:54.561974Z","alert_count":0,"request_count":1,"received_data":6821,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-08T22:20:44.026892Z","alert_count":0,"request_count":1,"received_data":450835,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"decodeqrcode.com/","fqdn":"decodeqrcode.com","domain":"decodeqrcode.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3641ff357f73223d39476542f4343e98","sha1":"c142455ac3b761264840afd80f918337c974a490","sha256":"9ae33129799fcc64dad2dc90b0de02035c0f05c500c52ba4bee13444a3cde2c4","sha512":"b95186db74da3d48928e754d9dc535ab2a6f44852a04a9841dde1b1c175238a61750f787898970f483bebe2624aa4e2a47bc55ace0c7a86f8a477e885a20e9a7","ssdeep":"","tlshash":"a6c02b8c230a0c7041f767008f3fb604b043321494e07935480d23488e30e03db44824","size":153,"data":"","first_seen":"2026-02-13T15:45:04.087978Z","last_seen":"2026-02-14T12:18:57.677988Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"decodeqrcode.com/","fqdn":"decodeqrcode.com","domain":"decodeqrcode.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f65376778ee5645665f3767ebe8dbee","sha1":"30aca1eef5a86fb563a7e3b0bc7b891344758a97","sha256":"c44ad881df5409496804ce67ddcac6be08f12266aea01ce3890c01e1e40af90d","sha512":"6ea14ce2a48f52d729d630578557c75ffd25a38e625dc2ca7bc427e7fcd45e9fda06ef17bdf1ee3bc3af1ea69e1b1fe53a9b26e9cff646925c519bde194510de","ssdeep":"","tlshash":"85a02453f14d0c10015d5cfd1053030c3434c104050115407c1500500033f5450ddc44","size":77,"data":"","first_seen":"2026-02-13T15:45:04.089738Z","last_seen":"2026-02-14T12:18:57.68006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"decodeqrcode.com/","fqdn":"decodeqrcode.com","domain":"decodeqrcode.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b661ce7facb0d328dd7de2a1cf228cd2","sha1":"bd842c8a94274d62ba41fe7799ff77affc7a909c","sha256":"225103f0e48ada88e30cf7f93e1ae217d2f84ead195f58716834b9c6bfecb86b","sha512":"ad7dea51901d065c7f36f4417440146bc2d52e16b5524dcc9c76560041c5fd575230ded512b10b560633c54484abbf3d0f708fa36a26fa10db05940ecfa9c1e6","ssdeep":"","tlshash":"d6d0c797b1a649700adfb6ef98f2478d34348096ad4565443c3c08a08525ed585bffc4","size":233,"data":"","first_seen":"2026-02-13T15:45:04.090661Z","last_seen":"2026-02-14T12:18:57.681895Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"decodeqrcode.com/","fqdn":"decodeqrcode.com","domain":"decodeqrcode.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9c448a6258401dbf467f120f238e0e6","sha1":"dd0296bdb5423255c6e453c8970aecaa8a0563c9","sha256":"b4f6827555beb90961d75c842084435f05fb776c66eb59a5119311873b414f19","sha512":"bb78fe34cafcfcecc9d252646b8407735c4f9db352bcfee676435715cea22a12da5caa0fe8b35e056f11b0158aba52f6d26333b2b33e2751064f5fd12a463279","ssdeep":"","tlshash":"cda022c320e0ac3000bf32ab2230838c2e30e0f33c808032ec0c23008020c82c83ea82","size":71,"data":"","first_seen":"2023-03-10T01:30:24Z","last_seen":"2026-04-24T02:14:47.273936Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-T71ZKC9ZN3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8d8dd6f25174aa7bec0f92ecc0f851d","sha1":"77c3fce8c0b175c907ff1af3dac6adf74af7bb05","sha256":"4f4f3937304eaf1972d9da682c18a05f76b63a3c3b9025c9d42cf8ffa6afc89b","sha512":"2ca7705cb3eefeebb701130ed0b489198e614de695beeeafbb72af448ed3a53388bcac17726fe96c1c96b62c5f2f7fe653832b1889d09348bb76155d3e78fd3d","ssdeep":"6144:zvjNMmwzYPrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:NjwzYPSmIP8G44BSa","tlshash":"7ca419ce73d674225296f478503f018ba57b24a2f49cc89af189cce42d74a9a4277f7c","size":450231,"data":"","first_seen":"2026-02-14T12:18:57.674122Z","last_seen":"2026-02-14T12:18:57.674122Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"decodeqrcode.com/images/logo.png","fqdn":"decodeqrcode.com","domain":"decodeqrcode.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://decodeqrcode.com/","date":"2026-02-14T12:18:33.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"decodeqrcode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 11:19:11 GMT","end":"Wed, 08 Apr 2026 12:03:36 GMT"},"fingerprint":{"sha1":"3E:74:6C:04:A4:78:58:00:1F:24:8D:DE:9C:05:43:BE:29:4B:13:FD","sha256":"D6:E3:82:A8:DC:57:FE:AD:38:55:F6:0C:1D:80:A8:C2:FB:8C:23:81:25:CC:8E:F3:D6:20:E4:10:6A:85:5F:1A"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: decodeqrcode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://decodeqrcode.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:18:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 16815\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Mar 2025 08:00:19 GMT\r\netag: \"41af-630852de48ac0\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EpHD1O60BvfPWE7Gjha8JKG1OYfHN%2FnMXsLS5YMgAwdFuXalQIEPD%2FkRRN0DRs9HUwTdZsW4HxbnFL%2Br%2B4F%2FulhbAIm6CVrKJiUNEatel6w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc823d2b47e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 661 x 663, 8-bit colormap, non-interlaced","md5":"3829ac0f2719c31963478d4617306932","sha1":"b413aad98e184ac926c8565a88f61ac76ec5771b","sha256":"8ee045846477d43e2e735b52d09b801ad74de9a6dc7e7deeda5c7d1412cf188a","sha512":"e0ab53c51c9cab0a4e7adb924aea1e1daccc61d67f8e2ae719a13be8716e3328a89b60673b15e82075161d8e3d3526d6761c624ce52f79a90281448cc8a19cde","ssdeep":"384:Kyj+Mlq0bJ8lEnY0UB4MZCxlo55kBdiZ2im:KW+Ml9bilEnYdcK55krm+","tlshash":"62729f91c77bc9e89f7b7a510d80439624b80d160f44afb1d59ff2c260bf6a69c31678","first_seen":"2026-02-13T15:45:04.084899Z","last_seen":"2026-02-14T12:18:57.667037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scamqr.org/","fqdn":"scamqr.org","domain":"scamqr.org","tld":"org"},"ip":{"addr":"104.21.53.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T12:18:32.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scamqr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:13:36 GMT","end":"Fri, 24 Apr 2026 15:10:49 GMT"},"fingerprint":{"sha1":"D1:08:3D:57:66:5F:49:7A:E3:7C:1E:D2:44:6E:79:C8:8E:EE:FD:5F","sha256":"DE:2E:EB:7F:02:CB:EE:3D:01:3A:65:A7:0F:6F:BC:08:F8:DD:3F:85:A1:9D:41:C3:15:66:BE:54:E2:E7:D2:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: scamqr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 14 Feb 2026 12:18:32 GMT\r\ncontent-length: 0\r\nlocation: https://decodeqrcode.com/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vUWt7F9dUxKPWN6Hj60e3QSWE4wVdslaxyelSIgAfUq52nEYF8bbVfNxl5kW4B3jCSfr2G4WOa42TOOxsDhYeijzkGkjdxbE9%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc82399d1535cc-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6339,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T18:08:27.053067Z","times_seen":14239727,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":69,"dns":40,"connect":8,"send":0,"wait":11,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"decodeqrcode.com/","fqdn":"decodeqrcode.com","domain":"decodeqrcode.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T12:18:32.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"decodeqrcode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 11:19:11 GMT","end":"Wed, 08 Apr 2026 12:03:36 GMT"},"fingerprint":{"sha1":"3E:74:6C:04:A4:78:58:00:1F:24:8D:DE:9C:05:43:BE:29:4B:13:FD","sha256":"D6:E3:82:A8:DC:57:FE:AD:38:55:F6:0C:1D:80:A8:C2:FB:8C:23:81:25:CC:8E:F3:D6:20:E4:10:6A:85:5F:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: decodeqrcode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:18:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRZlL5aghP9ahmLLEZ2tNNVAKa6%2Bzd7WUrIcTNOBLOFj7B%2BOJsCScc9vGXX1no4zkTZK2r5lwiXhTgUN4oIhVwQeS%2FFNlvwmBG%2B7iMuZGfo%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdc823a2d375621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":6339,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"2dc6f507887d9aab35fb9ec94fa8394f","sha1":"2ec5089d6c632f90ff64a25e95fcd3228a66bf4e","sha256":"2ac8a5d38f7f72a43899d0daa13a0b9af825b777132379e57c52655091409035","sha512":"9cbdbef68b73fc5fe22eeac7694a26fd6052fe44a78cc19983e25b2210c4f7a9f3571c3be5fd2d4d1fe7d829ad815e24abbf6be4c51b8ffeda7ce626dda551e3","ssdeep":"96:J81AFKXyqYIrvbp9liXOiVizojPHIcLs/dmh:2idILbbli+iViUj/1nh","tlshash":"50d10089054d1c04e32fca71a601feafe76d7091da460c487c180bdbd44beb64553f8a","first_seen":"2026-02-13T15:45:04.087067Z","last_seen":"2026-02-14T12:18:57.671304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":72,"dns":41,"connect":8,"send":0,"wait":90,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"decodeqrcode.com/images/logo.png","fqdn":"decodeqrcode.com","domain":"decodeqrcode.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://decodeqrcode.com/","date":"2026-02-14T12:18:32.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"decodeqrcode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 11:19:11 GMT","end":"Wed, 08 Apr 2026 12:03:36 GMT"},"fingerprint":{"sha1":"3E:74:6C:04:A4:78:58:00:1F:24:8D:DE:9C:05:43:BE:29:4B:13:FD","sha256":"D6:E3:82:A8:DC:57:FE:AD:38:55:F6:0C:1D:80:A8:C2:FB:8C:23:81:25:CC:8E:F3:D6:20:E4:10:6A:85:5F:1A"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: decodeqrcode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://decodeqrcode.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:18:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 16815\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Mar 2025 08:00:19 GMT\r\netag: \"41af-630852de48ac0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vmy8NLE0mPtIpwhSbGYeb8123gxnlEHvqcHF2j15DVIG9ZVeP0IzlzlTPLGAmQkpTKha202QMqoqAmpsb35b8%2FEJ%2BzDX7X99UzNUcAZoHQw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc823bbeffe0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 661 x 663, 8-bit colormap, non-interlaced","md5":"3829ac0f2719c31963478d4617306932","sha1":"b413aad98e184ac926c8565a88f61ac76ec5771b","sha256":"8ee045846477d43e2e735b52d09b801ad74de9a6dc7e7deeda5c7d1412cf188a","sha512":"e0ab53c51c9cab0a4e7adb924aea1e1daccc61d67f8e2ae719a13be8716e3328a89b60673b15e82075161d8e3d3526d6761c624ce52f79a90281448cc8a19cde","ssdeep":"384:Kyj+Mlq0bJ8lEnY0UB4MZCxlo55kBdiZ2im:KW+Ml9bilEnYdcK55krm+","tlshash":"62729f91c77bc9e89f7b7a510d80439624b80d160f44afb1d59ff2c260bf6a69c31678","first_seen":"2026-02-13T15:45:04.084899Z","last_seen":"2026-02-14T12:18:57.667037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-T71ZKC9ZN3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://decodeqrcode.com/","date":"2026-02-14T12:18:32.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-T71ZKC9ZN3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://decodeqrcode.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 12:18:33 GMT\r\nexpires: Sat, 14 Feb 2026 12:18:33 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149300\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":450231,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"d8d8dd6f25174aa7bec0f92ecc0f851d","sha1":"77c3fce8c0b175c907ff1af3dac6adf74af7bb05","sha256":"4f4f3937304eaf1972d9da682c18a05f76b63a3c3b9025c9d42cf8ffa6afc89b","sha512":"2ca7705cb3eefeebb701130ed0b489198e614de695beeeafbb72af448ed3a53388bcac17726fe96c1c96b62c5f2f7fe653832b1889d09348bb76155d3e78fd3d","ssdeep":"6144:zvjNMmwzYPrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:NjwzYPSmIP8G44BSa","tlshash":"7ca419ce73d674225296f478503f018ba57b24a2f49cc89af189cce42d74a9a4277f7c","first_seen":"2026-02-14T12:18:57.674122Z","last_seen":"2026-02-14T12:18:57.674122Z","times_seen":1,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":141,"dns":1,"connect":10,"send":0,"wait":33,"receive":23,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"decodeqrcode.com/roboto-condensed/RobotoCondensed-Regular.ttf","fqdn":"decodeqrcode.com","domain":"decodeqrcode.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://decodeqrcode.com/","date":"2026-02-14T12:18:32.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"decodeqrcode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 11:19:11 GMT","end":"Wed, 08 Apr 2026 12:03:36 GMT"},"fingerprint":{"sha1":"3E:74:6C:04:A4:78:58:00:1F:24:8D:DE:9C:05:43:BE:29:4B:13:FD","sha256":"D6:E3:82:A8:DC:57:FE:AD:38:55:F6:0C:1D:80:A8:C2:FB:8C:23:81:25:CC:8E:F3:D6:20:E4:10:6A:85:5F:1A"}}},"request":{"raw":"GET /roboto-condensed/RobotoCondensed-Regular.ttf HTTP/1.1\r\nHost: decodeqrcode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://decodeqrcode.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:18:33 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\nlast-modified: Sat, 05 Feb 2022 02:00:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tNP0tnrwHriA8lv5naAaMv2NC09UVC3bSoD%2BWZoSneE%2FAw4V%2FKPL84IJBlvXQlDLDmfVusGehJnG7Gf2yee%2FTA7FM6usGVB%2Bw6pL7Kj2VPY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"2246c-5d73bbbb81900\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc823bcf42e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140396,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GPOS\", 27 names, Macintosh, Font data copyright Google 2012Roboto CondensedRegularGoogle:Roboto Condensed Regular:2013Roboto","md5":"0e1821fdf320fddc0e1c2b272c422068","sha1":"c722696501a8663d64208d754e4db8165d3936f6","sha256":"4a7c36df4318fee50a8159c3a0ebde4572abab65447ae4a651c2fe87212302b5","sha512":"948adb943bfae5807e0e88a23364d8e706a8bdfe8c4d00592a95cdd34081a64a8d44c4ba6e33a65874ac8a7117927c3de2b995fdc57c2746aedd7161df727293","ssdeep":"3072:LXd+rtH61MsgXbu4vDVjOvG0uvsb4hoNo6bdkuqYfh3h4/o+K5/j0VNXFYG2ZtCh:LXd+Bygrhvse0uZWJjNpG+tbM","tlshash":"f8d3d643d2426669c683b6747d3ca3be4d35e82d3d4aa41b70d8df2985cb801ac65ff8","first_seen":"2023-04-18T13:43:20Z","last_seen":"2026-04-26T04:21:39.279744Z","times_seen":164,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":111,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}