{"report_id":"d9576b6e-9dd0-4011-869f-3abdb27f77e1","version":6,"status":"done","tags":[],"date":"2026-04-30T11:03:04Z","url":{"schema":"https","addr":"transactional-check-receiveqr.shop","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"104.21.89.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"title":"Axiom","dom":{"size":63242,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35204)","md5":"90ccc1ee9643d01c7c178d461ee7d36d","sha1":"0c5f47ef62fb06254e3fff860e4b7331e6668e8b","sha256":"4b69bf18009a6cc46ef6edfa9d0b630e558c0f64dc58addf7737f4a25356bca6","sha512":"45382b47e0deecb8873a7e44f773d7bfe3380912dff2e72be8ccefe3d089e44f9834bd398b58373c72eff715f3555ce7cee48d008378c5472b7c7d03fa501bba","ssdeep":"1536:Ro/zqyrYcU7/isVi/LMuAKC6RocNoLM2dcJJUfx8d:Azq7qMuAKC6RokoIO6u5A","tlshash":"4b538464a1201a3b770f41fea1d8dfdda2557604cd13f94973bc81e6a7cacb24db2268","dom_hash":"domhash5037ceea2103bdf1b39cd576a58ada0c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"104.21.89.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T11:03:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"transactional-check-receiveqr.shop","ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-30T11:03:07.338184Z","last_seen":"2026-04-30T11:03:07.338184Z","alert_count":0,"request_count":37,"received_data":8566779,"sent_data":18752,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-28T17:57:42.532763Z","times_seen":409864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/_nuxt/assets/index.js","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5775ff83a5b095f87fbf3e41df33cf10","sha1":"9463da9dc1d6c17982311d90d8108d72e99f527a","sha256":"c9104c3599e00e7f81236202478860708c9dc62f295ccd72b5f808b83b7e2f4e","sha512":"e50f343b0a9c0fb4b880d4512a55737140cca9dfa0270a97fd25530986f2dcf7a601be28d9a9f264e63108e03e47f2b8ebfbc3522a4685a5b3eecbf093c5b10a","ssdeep":"12288:QcLIGw/2r3/E3Cgg1XK0S4U9BLHY9mu0eQfogKjO2bXCHeIZB:QCwH0S4MY9f03fZwXiB","tlshash":"9a15d6772148c0b169ed29c43ca0dcab1aa8b6114f285c6864b7bd8454dfbafb345fdc","size":956617,"data":"","first_seen":"2026-04-21T16:51:31.72404Z","last_seen":"2026-05-02T16:09:23.174562Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9dd4e8f591cc2a3ae2a67d2aeab3aaca","sha1":"4f4a6c8da60a937dc02f7605a4a77d40ee380231","sha256":"6911450be4e2cb249b64c73923277be340ef25ef4ee8ea45c5dd254f4eb0fdf9","sha512":"563aa5d787fc255f75c53b04a5d65267c69aa6260d9671be52239f3e8dd7f2a17cab46d45644aacdeb1522b094d62f1fe70a0836a52b6eeecaaa5e3bd1f4a378","ssdeep":"12288:I6/cHzynjvQX204lHa0I64r0VvEQIfwZnESzzoW:I5x0I6s0VvEjf0zoW","tlshash":"f815c5752248c07289ed01d83c90d1cb2b28ba518fdc9ca868b775845adfb9f6355fec","size":925111,"data":"","first_seen":"2026-04-21T16:51:31.730791Z","last_seen":"2026-05-02T16:09:23.1908Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/axiom.woff","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /axiom.woff HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/bd50b303cf537142.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: font/woff\r\ncontent-length: 7572\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-1d94\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3u3sTGsfpfd2wfNot8Z54X8MDPexBE8FmpQDwQB5hzowuLLkG2vChDkFvQNhri1MF6ur93TJ3uUua%2FTDdzO1cxCUKcN5Tt%2BSFP3Xt%2FC%2FNI1QJ58%2FN2%2BlRoGNOT7gCRnqAu0GHWMUMcTJBvn2OmSMBwRaNdRD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e450ba956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7572,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 7572, version 1.0","md5":"ac87f9faf3ebf44b1641f9133d827a3b","sha1":"ab5c4aa910175617e3d37baa15980fa63f303c47","sha256":"360dc9b890cde5b1562b92872722ee73d958b5c87b4291329c78ab7072cdb5ef","sha512":"2aa9d6334c6136e1a77dcf22aa93221059f9cc9b80568aaa7e53a1305db499850779cb34cc968d7e70f7e5cb3af81cc00c2708828cacdcfe4424dc521514a466","ssdeep":"192:QD45h5TOsVEJ+OR3yjwFKfTIAR7JnuBreZvCO+z/gK:QD8OLF4Tn7JnuRe5+d","tlshash":"09f11a67ab49ef0ae4e301f98825a3414fe3e425933dd7d2a5c68d1a90098d45d3cbee","first_seen":"2025-09-20T16:31:15.433162Z","last_seen":"2026-07-13T01:06:07.919097Z","times_seen":25,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/f30152c0704fba31.css","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /f30152c0704fba31.css HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zfy70ur2Ik%2BxihhpGYsCg8Iz1CMGdzs3wlVWaCi97X1QB13mIa8%2Becr7ZLjQzUHQOcXiYIXn9UvbYd0DJbh%2BvBdB3WFlME9yfODvjQr%2FgdyY8HrM38ls7akUr3hycspPvhM5D75wEVt7KVAuJZC67NcJ86DF\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6838c460-846\"\r\ncf-ray: 9f460e427b7a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2118,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2118), with no line terminators","md5":"5532a60ba705ed7d21e887ce4b6aa94a","sha1":"49de849d7af0b1beeca34dffaf851a536aa82d0a","sha256":"4cd08feeb6b0a63e5d120314042adaf84b0a4167cfce24313da953240871d55c","sha512":"13d7071a6c71cc73d4ca20c947bd85402f3438b14960694be4967fd0ae74258f631e1ca4868c4bb8748e5805b5f68a8788ac03dbd0bae38ea46dfff6669b58a7","ssdeep":"","tlshash":"79415b204019d05fd5f1f89335ca7f73293e60198ad809669a7905798edb86e73e0ba8","first_seen":"2025-09-17T10:50:11.178127Z","last_seen":"2026-07-13T01:06:07.935256Z","times_seen":29,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/bd50b303cf537142.css","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /bd50b303cf537142.css HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: W/\"6838c460-233b6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4l%2B94vaY23e%2BmbsujgIUIkcJGifDQUvgZKDEip%2FilzbXdpCtHg8smgZxMCOMmTsOb3krohHyYVLVLEfarLzcPBpjsIJnJITOx1uBdpYG8KpvwrD4IKWxmxp2Ny0MLq3nfUWG%2BokT8lQn6H9vlF6ZQ3fwb%2BY5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e427b7e56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144310,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63240)","md5":"c781c1b16bafe95547495a05f5dc2143","sha1":"a9f609d048ed6e94263b9c80711cd20394a36951","sha256":"28a2fb39b748838e5e6a19dc1a83f0d1f876fdfe0109acf8049e17f243fd4a34","sha512":"858ca2af858f90b96678a4f477799710e51cf53b782250022677982f8dac97ad1a0480e0eae955420976c99c19232f129f562c9ee54329b480c132d5c502c86c","ssdeep":"3072:GnY4+9hT5BEw1+l/t0cvwLxY1/9zVfbsLPZ5KHIgptfYPBbsy5E35Pdt8Aj7Ocx/:GnY5hT5BEw1+l/t0cvwLxY1/9zVfbsL6","tlshash":"04e3225cb35a553f781784fac1b8dc8ea22ba6c1ef216ffabd15122147903e62d73250","first_seen":"2025-09-20T16:31:15.459545Z","last_seen":"2026-07-13T01:06:07.901618Z","times_seen":23,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/_nuxt/assets/index.js","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 21 Apr 2026 16:35:14 GMT\r\netag: W/\"69e7a742-e9e37\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3uesmyi5B3nfQkibqBiAjKCxF5j%2FXASpsCvWug7DhZq74aaBspiqLpe6VXTxSaIpy%2B5o21Iir%2Btp9PgdRzSRczmWLqAU%2Bj7TP6%2BSkG9HEJg%2FP12BUlpvBJTPTaeJ%2Bi4l2rhtVOehziy5fqQfoO2gmsGvz8jm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e427b7f56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":958007,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63400), with no line terminators","md5":"a7f376540d17605c3ef2a0a0ed2948af","sha1":"f35aa85ce59679b818400f07ffdae7ae8f2fd0d4","sha256":"3a15502f4a144a74d780e5320f75226ee34d5837f6852efb2537cbaee88a57f6","sha512":"c1fba08dcdc86caf5403fa793680b6a242cc959e2cd32c6a9a560e30cad71e5727f7222e4c83ea12a5075c5158efdeab7e85336b4adb033d7521d38ff9a528fd","ssdeep":"12288:QcLIGw/2r3/E3Cgg1XK0S4U9BLHY9mu0g6t/ohDbA19E+NgKjO2bXCHeIZB:QCwH0S4MY9f0glwXiB","tlshash":"f925b5732145c3b169aa2dd43db0dcab19647a518e184c686e63bc4c48cfaef7345fac","first_seen":"2026-04-30T11:03:14.248869Z","last_seen":"2026-04-30T11:03:14.248869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/axiom-points.webp","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /axiom-points.webp HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27976\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-6d48\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wHTFzNquExzxULXsHx7KJqY8TKWystT501uZIDXtLVDSKDDkp%2BdgoYpoMNEFKNyZhaGUQui1%2BX9FEqMguKELTJoZLQn4hbB5cAb0OFkE8Z4hQlaW1Q3ZdUQKo2HO0iLRj6F%2BNAqHkJc5Z%2FTXU%2BWsx62SZlhq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e429b8856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27976,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10686ac65a6692c9a3312371a272bbe9","sha1":"4b5693383b3064a1b58683b02c1a3348bf213f23","sha256":"be4dd96343e80f282c28d2985ab2bdbeb6536e8f7b581158703c9fd66d48832c","sha512":"bdf46cf35c1bfbb9a5fdfde45022fdd2bc2166162009afd00da96ca9645906b8e18714f0b8ff5119f2e045f0f4c4116c556dcdd665bf4b130ff61fc1c2785b22","ssdeep":"768:O/ft2RbPJW7h7Z1QAiWdkzR0RRdnXMVIe0tQGvR3uLJ:OwlW7h91RiWCzR0RRd8VIeWVQLJ","tlshash":"02c2e1695d7bf911ba4c5cc599d0cc86a3f12f6db281cd3386ee312c4166a4a4b3703b","first_seen":"2025-03-16T21:52:20.840668Z","last_seen":"2026-07-13T01:06:07.955148Z","times_seen":31,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/wallet-twitter-tracker.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /wallet-twitter-tracker.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1503282\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-16f032\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-range: bytes 0-1503281/1503282\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Om2hBWzUEgiXfFPqBDG3IcEHnDqdeYdL8W6e9qbNTYfhW8fO2SFeyWjXo0HBpoVn7POHreAaL2pqteJMcA1FNffy73xMQpT8fxGW98aY%2FpsVRXtZXHaa0EDs3U9mxkZGb5u%2B01HRE5aJ8R8uzNmyGK7wwfoq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e432b9656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41263,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"a2f0848b8f09f41f50ecfa00cfcc249b","sha1":"4c7adb4f38d2c280bd76fcd6680d6865299a0ec4","sha256":"55928abf693a94c6452e6fafb4750cdd9877e69407d1dca40e917b24c00c5ac1","sha512":"2520de4ad623e86ea1a41ce56c6342836082d9a25558f4e6b060ebad14f495fcea933c51d212efa18af4f617b30b828efc58cc4ae025f00d247df30f4180cae8","ssdeep":"768:nQG5p9U/1JY2SU4ChXalXH2TT64YkQ/foL1Iie:QGe/9d4COX2TbYNfIIie","tlshash":"3f03f177fa51815e01e54e17da47349a3b68301a90d8d6adee86d22f344ac32ded1f38","first_seen":"2026-02-12T19:02:04.398281Z","last_seen":"2026-04-30T11:03:14.251665Z","times_seen":4,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/api/is-banned","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:43.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://transactional-check-receiveqr.shop/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:43 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 1\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0WVeKZNxYVyWQBjwtzGCoOLfWf9IIwDB1r2W2YH1zd67HEWWGMcUor12j2QCkqZdOl78StgrdkudWB27MXxQOQeL23Spz%2BM6n29SLjDsR3OmA5qlG6evYWJ9sMsxpcgemitD4WFtbPwME3NNuhaTXSMHwPk1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e480beb56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-07-28T17:13:25.431282Z","times_seen":118350,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T11:02:41.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMJAhCPWRB6RGoS1eJVXLgHxs62ZSBWGyf%2FOHt5y789elq0XoQUXThyfGfC5eOoerGyMF1oWoGlGdIGcUugXEs0OPGp4RpXE%2FI%2BNWzRdgoSeyRlmmMXMZv%2BuI48jt6qVFcjxFei%2BnYNMwBLL0QZwUSLAsghG\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f460e401c1256c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":47446,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35334)","md5":"be0c0a54074b2b5570c7572fab4598b6","sha1":"6937aee600beba2cadd51c8679361e0601710496","sha256":"2d795b06036c4ee66f601bbd6ae156aa19d3f9972244d4121c419af269f565bc","sha512":"e832039ceb001a803404621ba9bd36d9cf77539d6bfe6e954e9ed26abeab7db8fe016760e07807449c43ca9fb7b1dc3b830f360b6d98b141af0a6574e098148d","ssdeep":"768:doaAHdU/PrrPrGPrIPrRPrGPr/gWjLcL/EwNuAKC6RovoGAqOV00cLM2dcJJUfOu:doLU7/isVi/1MuAKC6Ro0FcLM2dcJJUX","tlshash":"af23857801212667735f41f5b4a9dbdea295f718ce13ec0973bc42bb17cec809d662a8","first_seen":"2026-04-30T11:03:14.253936Z","last_seen":"2026-04-30T11:03:14.253936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":38,"dns":28,"connect":1,"send":0,"wait":227,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 02 May 2026 11:02:42 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Otzxrfy0R6yQ4ElpJtKHP8zY5JluuyGzOHUg6qt8%2ByBK2y%2Bt2D5DtdjjG1MqVJYnxuMcTtxTXseyt0f8VT8HO4JnqnlIYee06q%2BqR5mV3v41tAu9hlKuj9lZhKSXl9CsAhq94G3bGOTRkA%2FUweCSVHYS7d%2FB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncf-ray: 9f460e42ab8d56a5-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-28T17:57:42.532763Z","times_seen":409864,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/hero-video.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /hero-video.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1407464\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-1579e8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-range: bytes 0-1407463/1407464\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1RRf81v3HK0IT%2FMXdWTHrRVUKket1RI%2BgBCxYsDD8VR55k8MkjOQx6d6Rdm%2FvdMpsoSmYDya%2BN2y%2BuAXvnxr1vwY0K6cs3qIon6RdxFIq494A2GTbeBNpTtCd9dASddk%2FUGX9PhQOqpk4Ggs6rdb5NwSn9w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e431b8f56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41263,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"479b2a79dcab099a95c6af3d35697f13","sha1":"753f3220cafce5af9a07be3fd68f9bb4bb0c6242","sha256":"a91cdeac77ed728ede36ce1fe3a9201b3dfa1024c50d4c02b7b3594945cc4601","sha512":"52869baa2e828c7936791d5e068f998027c7109577e9e5d3a535ad52b7992332d8529c3476ebdd2f35a85e01f04a97bc9113f929b9114e9bb601182e970d8a8a","ssdeep":"768:4b4YbV3RcOoi/vpx0yduwS5KA5jIoDS6WOfXyz7QUcSV5M5Vb/ioGXU:4b4Ytai/vpHpS5KAMOqL/k/iosU","tlshash":"7903f159c6d0f8cce87c76325a5aab00f7e224810151dba77fb80e5c2e5dca9cdc0964","first_seen":"2026-01-30T03:18:18.880024Z","last_seen":"2026-07-12T23:36:13.282228Z","times_seen":6,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/hero-video.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /hero-video.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1407464\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-1579e8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncontent-range: bytes 0-1407463/1407464\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBsWyq6OTJ62hPwgS3j9smyg1Co3M7tlBH0ZUJ01H3SJ9CNvjcsee1SeN3Jkpp%2FQJmFbiV39nURuUhODPRv7dCk%2BC7ITjgbAGsPN01CYybeie%2BFmmHZ4JoDnKXJ03l97GyCvmwmnRLshuq7CD9Arl2xlVUzi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e431b9056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41263,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"479b2a79dcab099a95c6af3d35697f13","sha1":"753f3220cafce5af9a07be3fd68f9bb4bb0c6242","sha256":"a91cdeac77ed728ede36ce1fe3a9201b3dfa1024c50d4c02b7b3594945cc4601","sha512":"52869baa2e828c7936791d5e068f998027c7109577e9e5d3a535ad52b7992332d8529c3476ebdd2f35a85e01f04a97bc9113f929b9114e9bb601182e970d8a8a","ssdeep":"768:4b4YbV3RcOoi/vpx0yduwS5KA5jIoDS6WOfXyz7QUcSV5M5Vb/ioGXU:4b4Ytai/vpHpS5KAMOqL/k/iosU","tlshash":"7903f159c6d0f8cce87c76325a5aab00f7e224810151dba77fb80e5c2e5dca9cdc0964","first_seen":"2026-01-30T03:18:18.880024Z","last_seen":"2026-07-12T23:36:13.282228Z","times_seen":6,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/api/config","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:43.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://transactional-check-receiveqr.shop/\r\ncontent-language: en-US,q=0.8;en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:43 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8hmTgfq7KrPpIH%2BTUjeeOkyQw%2FugUQZU%2FLRsBP1UtRZ0Ks9eFyQO%2B6PKVOsrLLa3FXgoQkVFCrEh8ljFlxdgOOSNoj8cvE6WLWYOVG04nC26Vu87c1HfFx3xQ5YozIxLKVLym6iIP27ZCoGxarhb58c26k1c\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e481bec56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"619e3a082ee45b6c806626ee15359437","sha1":"b34af6012c3417b84a721f1230e97704c7168bed","sha256":"69f3e8f1a2efd89d54ac849fdea922968328fe4171a7a0b6dc031a47647b98f6","sha512":"4963f7a6ae29509f5964f3ee234e06cd1bd8f0b80d87d98656963ef216b9c42975d07e01af5297779e692377cd9dc6b7cf9582aa1c09e164168b21e8222305ba","ssdeep":"","tlshash":"94d0eb1b83520afce078e48a100c3b9c600c7309626a404ee60268b0a81289fa01c5b4","first_seen":"2026-04-30T11:03:14.258269Z","last_seen":"2026-04-30T11:03:14.258269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/non-custodial.webp","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /non-custodial.webp HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9628\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-259c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QrEk7PsMzxZWtFD0Get6U768Vzsn2MlHc7oyg8wwnV3%2FCfZ8vWlZXtMPuaDqEaCWkpfq5zId81370orgTX25LnqhVODZ1qzgDcRUnkJhFoA2W2j6yuBTfYNw2DML0WN6ujMAOI5zjCwhtzUPKMAulub71DrG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e429b8a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb4dcf221264944e4eb18c34e1139ef0","sha1":"735e2cf62460d3ba51f473753fc8c1a4a3168b8d","sha256":"a4dfc359c8bf955b4acd6c9a80cde63beb446181e8ac726bb2fc887377203aca","sha512":"41105a54b5e035e1d678e821b6a3a5c716b992287d8f46ca5f206c1ef1dc09d2d9194d747c201364f48d7fb9c879a05c05339108dcc2f07f3d93bea9357b5491","ssdeep":"192:Bn4rCbm3881lnPKzkQGDReLqVVMxxD8KlEkHG80ejTI:ZmYmxvizNGsm0xR8KmGGjOI","tlshash":"84129e8e492e6a08a423eebdc97502b4d1cc3510d71f3b96cd93b93d5e842097dcb42b","first_seen":"2025-03-16T21:52:20.856999Z","last_seen":"2026-07-13T01:06:07.952025Z","times_seen":222,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/snipe-on-migration.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /snipe-on-migration.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1298041\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-13ce79\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-range: bytes 0-1298040/1298041\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rws2cs3ugsAc%2Fu1s7mxi%2BBrPA9bxlihCnJwDb8vjr6ZmwnN46Ch7nn%2Bdrq1CmY95HGmfFovfD18LTDUazhTb3iqSG6X%2FROMjgak8uYFS8XukK9hTUeySHhugDeQXXe9tcXDSqXyblA4JIbD9CQQsD3RRX2dq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e431b9256a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1298041,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"f98a4a813c8692e67bd7a5fa4d70578f","sha1":"5c60a64c7dacf93356b315ee17cd67d07b37b334","sha256":"e06ef683c63af85425974899f9f0f34d4c3172f336d028d1ba6f6edfb606cfa6","sha512":"946c2be7d20afc09d88db2be7be772210e0acb890446d0bdc9dc9d57b43d797c9ca1032bd8a1a4ccddd441a6de0a0f8f6a158623185be65430b955cf18a09520","ssdeep":"24576:SRF3oUXczMnC2VIPXllubUizbRNb3c3+Q8nH:SR+UXcz8f0ub7RRqH8H","tlshash":"9525236c1dd0ba62fb1cf97d96e4c856c5d25a52ccc2e38f708e41614b3b5080b9f8ba","first_seen":"2025-08-11T11:12:02.069455Z","last_seen":"2026-07-13T01:06:07.952704Z","times_seen":73,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":501,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/wallet-twitter-tracker.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:43.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /wallet-twitter-tracker.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=32768-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:43 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1470514\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-16f032\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncontent-range: bytes 32768-1503281/1503282\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CdAmQBgtdNGuq4W6Eu37K1Ymk5hO3NsV6f82FObeQCskpPdbQ89mfTu0zxxU4iA4lJIcvIrpFj5NbdKhkiK3Sd62kVTx%2BExzc0GWi0BAB8WmRY2%2BiJBF%2Fc9ekIefilKZgdrPS%2BR3RQepyzlCQSdYS2MsMHS5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e485bf056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":604062,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"30fa617ebbc1508ee2d463b68929bf60","sha1":"4ddd4d1e76e1ad5cb8399cbd656072cec1eb4518","sha256":"ade5b89e70349611f0e38c341eeb8f482b419154fd16186aed6f83dda2d019d9","sha512":"f6b7a3bb09a51115cd0eea27fb133bf5ea4a3168a2ad1f2c386cf12bede20173621b1597f8e005a9fddf09f636746b47211950a67bd584ed4050d73a5a8d42ea","ssdeep":"12288:kCpgqzlRQcK2KvVmEAevwrrqLQR+DY7Ni2hSoqMy/0d0Z3a/ObWi7DUe8FuwS:/gwRu2SGevwrGLiNiqSoq9/s4mwOr7S","tlshash":"13d4233e8097b7d8fe743b1e95c798f81bca219190e6e5a74c41b533ab839496ddc310","first_seen":"2026-04-30T11:03:14.26223Z","last_seen":"2026-04-30T11:03:14.26223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/api/visit","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:43.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://transactional-check-receiveqr.shop/\r\nOrigin: https://transactional-check-receiveqr.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:43 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 2\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJTAC2uifxrGP6CebDIeFGw%2ByKc0mqAzGXkPJ7eWSCocE2qWYN4JrnjpEUwRwtZjk9jJ%2BvbfzBYDDhCmxbCzzFpDJ1V%2FGW48fiO2lyLvVL2Na7C8mRQdiY8eWh0CpodCUAsnbz1p%2FmE%2FM7GhVLM3%2F4m3TxWR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e495c0256a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-28T16:57:06.991337Z","times_seen":443315,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/integrations.webp","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /integrations.webp HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14534\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-38c6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdJZTpaFJWCToLIVdrY1FBRTFI3t8Nsnv7RcbyvAxmRhJQtjk5qakmA8hD9esMrbErf%2B0s9joQ4MFFdOoUxBUML0mMXUVEjQOEWR2yYiypoAkR1F7bFvQTNIbzl1O7EZ3lpNvwuAbT0QEzDnnWukuQ9Hy0vx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e429b8956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14534,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"92022a4faeac1671bb1c29195d1e0d60","sha1":"400d5748332789134b7dce3569d33563dcab3b35","sha256":"cc5d2383a6d290f9b4a8bf109e43c617776be1c785c7bd77bfff7eacd2e9b522","sha512":"e96ce18783bbe4cd5ef32ed4095361617d6500b3b7151dbd695630d0571986dd41ab0cf59976537271be074772d01e92462eed29a4da46bb7ecfe2b9ccc0c251","ssdeep":"384:3jDdnCINL9S74GDhcAplRrJCYub6WqqLt4gko:TDdhGDhc0jVzn5Pgko","tlshash":"5662cf1cc08485f8e04b457edbec2b99fa6938f770c3026b6453de926606bc19960b9d","first_seen":"2025-03-16T21:52:20.85954Z","last_seen":"2026-07-13T01:06:07.94025Z","times_seen":223,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/perps-image.webp","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /perps-image.webp HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 107086\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-1a24e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3TOJqrY8znd1uywcrtseEDEXTGt9esf%2FlqPFXYltaU8WsBCqSUpFl6%2Fo16qRY%2B8jGDoMK9iuWsTWgOnlOcJ1kljsimC3hjr8NzR42wnVbF0RGyIRWequgHoqLAtxSEgZk%2BZvnPQt%2FhsSqo%2FRl4rmwDUAT2TA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e428b8356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107086,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2504x1360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a0e599c0d2bb569bef8e5063a026b06c","sha1":"d2c9c7e034fb0c65dffe37385bfa2a0a72bbcfc8","sha256":"ffbd20c89f947373d072ca4f06e7abfc435e3e5d9b4623c811dcee82532d8a7e","sha512":"9b364ac8744224ed830722ed7931cc67cf9bf00df4d44ab4607c0f47f84fef318e108455f19d7924a079c98c85e78544a3c7b3d3a0d08cd9c408d598e07bea68","ssdeep":"1536:Ew0lqitP5xsMjTPP30NH3y7P4x3lFrAvTBpyxG3D+QF+1erONLhYZTVp/9cJNRC9:IlqcBjrqA4xfrCp5D+QF+1WrL/9UNwcQ","tlshash":"1ca3121486e8f12fc5f3c4ff714a9c1190889789b460ee52dd694cab9168f3a5cf278b","first_seen":"2025-03-16T21:52:20.823659Z","last_seen":"2026-07-13T01:06:07.95072Z","times_seen":219,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/yield-page.webp","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /yield-page.webp HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38906\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-97fa\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1c2XLuI3TKS5OrvACKG4KnnFsu3xAGXeCsK33QtN%2BBuxtkSdGnypeO%2Fjv4eBRm9JxhFyqi6%2BF73dhxqaQbMWXCNroHQhD6BZFfl5Ph5GpDniRmGwNAP34XUhDDnFHI%2BQ5G2YFkQ4SCVzPKMMyOKyCfTdexqN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e428b8456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38906,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2814x1660, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"313bab83ad36287500f22cf98a60ae67","sha1":"326e10891c10d16c11e05933fb59054949fed8a1","sha256":"513aff4a32fa92330773f44fd86bdc051355a2cb901102bf04011cb7006a23cb","sha512":"0959091e48b95bd0c675f3b24f58c9be6e99c1e774990d03f4c0527f441426349f4362c8b6a6c69ebac507f57983ac18f8f681ecdc193d874d20e708dcc515b4","ssdeep":"768:hddb1jAd6+fdIscucqcVwfTkt/C+e+U++Bp+LA8udAZ5duicmV3b6kauJSJSJlKv:ZXrXx7X5FKUla66Dqk","tlshash":"79038e72aa661fdac6effff761823b78686c6d2093a411d20f2473d0417022255bfd5a","first_seen":"2025-03-16T21:52:20.876455Z","last_seen":"2026-07-13T01:06:07.937969Z","times_seen":219,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/axiom.svg","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:43.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /axiom.svg HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YhnexSveRQfhQ3wpIpY%2BuIXagyJWERk2M%2FjRw9s3mxTT0%2BHFb%2BUQsGXp3ImHF9mqavILGiQeovVe%2FJG8nyBIj67zse41Wfmh%2FLNwYQvX3VRQj9PuG7%2BPwRTuQN8Z8%2Bnx4%2B3VFREr%2FsvjuW9he4QEkXdQSGeu\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6838c460-200\"\r\ncf-ray: 9f460e4a1c0a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":512,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca4c3e0f1732e8d11636fd8769839ae3","sha1":"1e0df992bb3256eef535ab2780532c95c5b59675","sha256":"b499691abd3802dd218e6110f9ff985588ffb356fc43abea39c1695f76e3f855","sha512":"fbfc7343290b41767b401fb81bd04cfb4380f3b6d141398a7c389ffba473428972da0cd50930b488cf1965a09cf11bcfb1ecad1e3b6f537c9573b7cbfa7c0178","ssdeep":"","tlshash":"35f059d8b14c8508f701e395db5a2d99465fb1d64a590110fb443b47293c0abbd646c9","first_seen":"2025-08-11T11:12:02.009277Z","last_seen":"2026-07-13T01:06:07.946963Z","times_seen":218,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/not-triggered-by-mev.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /not-triggered-by-mev.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 373600\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-5b360\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-range: bytes 0-373599/373600\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AU%2BXDfQXeigCtLdNcuXk3rHoNjvEPH4flQHCaXau5fr56yY2GdKvMysnBFk4iFv8LCq4kaPUMmILs6QR7vQ3n%2FG9YhEdsE0bRs2MyIUD%2BPDv8gMpbEa1VmngnRAGXU7Bix1Id6%2BSWMpsOn6gxyIDOoIshCkZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e432b9356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":373600,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"a66c5ea4efe239cc1eace8149d3d032c","sha1":"d1b5013b8290871e998eb8d6669d31782b67f13b","sha256":"f02c57eb66d6d63543ff5ac3fab55bf70209487e9534e9e46e21cabff3bf5374","sha512":"5756a7da257a0e5b5f755e2d7491169f70466226ce43c553793d90eab2acbec44dba31ede4788ebe791032b8e480f5cda7ca5427c34a696a721c7c90c6809955","ssdeep":"6144:rhozaUs6YpImbnzasxhnrveDT3nq0Qz0ViUdWnAk53y46y6:0Ts6AJ9xVz47q0Qzb2k046V","tlshash":"bc84e02e4ef26250fb4cf23d8084c526d8e28666ca81d75fb59f08648f756494b7f2b3","first_seen":"2025-03-16T21:52:20.858701Z","last_seen":"2026-07-13T01:06:07.958903Z","times_seen":105,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/remixicon.ff3db2f0.woff2","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /remixicon.ff3db2f0.woff2 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/ce178d2b3058a5fe.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 176812\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-2b2ac\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKXiDbAmvIXnSNOWy95qrPqppjGtC5aua8MqDRHzm9TWir%2FAwMDucPRDSL86jhKpa%2BrRQgdU4Od%2B5lkJkADmC7sJndFgHSQvVAUOrLCJNpBzCEtFlF8a6JRLKj8alraJu6EsGDjdjaSDLY2cH0hON6vsOOse\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e44eba756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 176812, version 1.0","md5":"9f0118b43f57fc3ea9f55bbfb3a3b185","sha1":"f3ec7500bd2c615bba2de885d46bcaa91c20aa9b","sha256":"7ea90bbc7c505b98dd7d3a089a6fa32067e353150192951cedb05e26820936cf","sha512":"6a17cdb1c39d1638a2e69ac8c9cf15229d9f64ce9026965dd8e8878700994fd1db65f21be31e18a49ec36e0b0ca522d05ab7f3884b21a022d9ccde9795d0baab","ssdeep":"3072:8oI+omjEjOiEHbaa4yYDtZimTAj2QdJohF8EBGWXsL1u:8r+5baa4yYRTw2Q8C48g","tlshash":"300413f0eda0d72cd9c7fc12f48db606aa9c579475f790901bb0fef869ca4a8965c420","first_seen":"2024-12-20T14:28:38.376296Z","last_seen":"2026-07-28T11:54:13.412968Z","times_seen":2343,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/land-on-two-blocks.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /land-on-two-blocks.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1313773\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-140bed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncontent-range: bytes 0-1313772/1313773\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFc2p6Zn%2FZFd9wEulpMkgGD%2BV0ytyh04NLNPqzTyI5jSWWt%2Fi9ODDtGHzYXPGVOJg1S3m5t4BXy5PxCgPk8t3D2g5jUZRNjKpAXV7Xjwjo9I4paIFHbTszWZVkRwyx2foBPXUYAiITD4w7S2CGocoDtXz4yv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e432b9556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1313773,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"08ac70c389f49937565646a04dc95eac","sha1":"7be39c4c3a932e5aed7c66ba72d1ad9e03462389","sha256":"5ab373fa094bbe2e9fb8d43536f4df83c76a86fe81d7959a5ac263c07c4953a2","sha512":"5d6d1c4ddcf81909de6b8d928048e85244a1e3aa338d2c10a6bed7123cd619bfb74a1f36e233eb685e4a1db6b3d17377c4493da2d35df4c8eb657715349f5092","ssdeep":"24576:UqTooav6z0R8xCOQtUrMolDhtAv/uFYDDh:UqTgv6z0afFhDAzDh","tlshash":"0b25125e0da29020ff8cfa7d84a2d825e9e35a17c8c2d35f750e05444b7a4968bef1b6","first_seen":"2025-08-12T01:57:34.407037Z","last_seen":"2026-07-13T01:06:07.941511Z","times_seen":130,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":430,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/axiom-logo-mark.svg","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /axiom-logo-mark.svg HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0VYIpqqPN%2FIpnnAvgjLOCEIxXJqDQBbvmTK1q0bVJeiL8MfpdhKoqdb14WHKMHCn%2B3ddXc9WN8uLB5Sjs64K4ab%2BSEBagpyB5ol5IKIicIs9GYPBTHzjdQoihrpI4mgeB0eEsH%2B9dLBR2X2udSxLfbYcgLCL\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6838c460-1c4\"\r\ncf-ray: 9f460e427b8056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba619fafb07bfd750de8684d13ac508c","sha1":"ef7b89e0cbb1c2b8cdf016dac94d79ab825d4db7","sha256":"8c61dd47112c6efad3dcec0625617a66dd926c6583fa0d2c862b695768992ae1","sha512":"a067d23b14919b6f832c7a68d9cf6e15dd9b186f4bf9ac37d7ab024c1003ebbcd839f8f79492bc308df5a6839173103d4cfc9e53a57121d96a249603a9a0c146","ssdeep":"","tlshash":"9bf05ca4305c86559a02d741036cb47e407ab3db65160468b9946f0a683a55e2f7c7d4","first_seen":"2025-05-16T12:46:07.698652Z","last_seen":"2026-07-13T01:06:07.903867Z","times_seen":232,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/axiom-logo-type-new.svg","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /axiom-logo-type-new.svg HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyj9512xf883bUCYsXhxNx7%2BqPK5tp2yA5VY2vO6%2BZ0yxNM8Hf1XZ3iPdSq7l7LAQfebbYiWH0K464C%2FV%2BWRqbCC7Vgj1iMOicBZSm8BAUU3z46HjWknUMUX5dAfQoV%2BNN0wirchY31qA4XBhrAcrTABxEPl\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6838c460-886\"\r\ncf-ray: 9f460e428b8156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2182,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e9718f74140ea2fad4779bde7048f3c","sha1":"8785e97686ad35c6bedcffd3c84d54bd4fff5c58","sha256":"81f024093442742102d01da7865af992da0bd75044223f910d6aa1c7ce255128","sha512":"12d8900b856db84477ffc8ad01ba18bcf550a1857fd07d87e95eb4ea715dd5681d5298bbf772b2734bc22d0f3a0f41c101f143b8ed5965f5fe12d3b85cf58491","ssdeep":"","tlshash":"4241dca2b74891d6a910d7edc35f01ee205b20fbf341ef968bd22f11b5646928ceca44","first_seen":"2025-08-11T11:12:02.01455Z","last_seen":"2026-07-13T01:06:07.904824Z","times_seen":225,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/ranks-rewards.webp","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /ranks-rewards.webp HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11330\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-2c42\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IiDudiG7DY1lxz7bgGaV%2FvZFda13pGSgyRwzhVM5Fi%2FMTl71AWER%2BDSJm6pkX9wrzn2QT3yktMdMGjSuKk3gsKiY%2FvxjgXIr1wpdS4BLqBA0eBl%2BQemh%2F4rq0o3HCd14gpaSRGQb%2B1216L2BRxycj986qYJp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e429b8656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11330,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41948d5151eb816445349aaea41de298","sha1":"5f6431c2d01089cc2f5a115819683f1324904239","sha256":"6640d5cff174a164a38cde2c7a54109b4b5c6eeb010df1a790a984add8d22e4b","sha512":"853db66c57aa5ba8cebe66dac3e4130bcb25d9480f43d8c135fa9f7b7d2d7d7209f20f80ca103a3f2b0e7fd922b1a64dd875fef8487dde73e45525da4483df82","ssdeep":"192:OnMWX8VsXir0RiU0IdtlpmxWxEjDcQb3jZP+hueVo2H+miiv3rYzJKz1ZE/07z4P:SZXiSfpmUEjgQbzZWhtZD/3V2uhK","tlshash":"db32aee631f85ae0c41b7b9ccec2a5c40e651d036418cf93a8cf5aec4ec5eab6267406","first_seen":"2025-08-11T11:12:02.046965Z","last_seen":"2026-07-13T01:06:07.911773Z","times_seen":219,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/referral-rewards.webp","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /referral-rewards.webp HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39980\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-9c2c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GV0GWhkhWDWntlqfIsOZa%2B4NQM5j4QUoiYSCeAPKAPMC8nJGNGPIvuhYxsCGSXdKCqQn8%2Fe8UwW%2B6gtByWpAs47HHo7Ss8vwFn8HBhVDZZ8dI%2BdTV6B8Mw7GHh7Y20APj4g8fW64%2BOTlZhojxRbQBap5vvVc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e429b8756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39980,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"23406a925fb9c1a1135cdf9735ca059a","sha1":"39242bf59535e2d5c2b3d24719121ee856359ae8","sha256":"b782ff6a99b5bcdb1ce9b806e2c26d303b638a995b3b519832ea5119c84fb12e","sha512":"6a9f1264bc8df9afe9c7aea75d9ef3f036a48577641f960e7baa567782ca0332b3cbff375686c6d73457c3b5688180de28e154f20f1ecf2f90cf5aa2fa513003","ssdeep":"768:YOl7TcvfrZoCWKP0YMhko1Z7qKaRZ3JISJoJINfuFs7bhFKLy:3lvcvjZoCWKP0NpZ7qx5LdN2Crqy","tlshash":"7503f11d870383678425e53ac01df46eb98315c2ab7a49206b8b35f73d57efe258a702","first_seen":"2025-03-16T21:52:20.877376Z","last_seen":"2026-07-13T01:06:07.905741Z","times_seen":223,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/hero-video.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /hero-video.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1376256-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 31208\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-1579e8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncontent-range: bytes 1376256-1407463/1407464\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLLBe0U2hdKewPK00ON7xJsxXKGEtcmgXipVzSCkwFePFgv6G2k4X8YK%2Bc3ibiBdSsRXBWQ0r90WXUGvmlCQ%2BN%2BjtzQn%2BWGJmH2vKm9%2F%2Fyf9%2B1mMpk6JKHXfBoc9yHHBAnlF5XRLhu780kr%2BNd19WLCqZAaj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e454bad56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31208,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"55a63b7c576c0a981dd14e3b1f6d2813","sha1":"8259704ba1709e000a788c44b83dfdc8a749e6d0","sha256":"a0240abdd6e28b84ec79f990d38585c9e678d23504694856e9e99781b1710e69","sha512":"9932e56fbd7839975fc4cd507f0f3ea92a05b40bedbd505a5da7214ec77d5ed972e6f1488ad3abaeee7513669b65f3f1cc56260950aa1cefcb43f168b0f6d5ef","ssdeep":"768:/PQ7qiKJCIvBIV89O71vGrgzp7XiSRDP3xviHtc:XQuvvBa8A71vRVGSx4S","tlshash":"f8e25942ab34019bc428037c94f3c340bb71da61ab93575fd79073b8bca27799c925ea","first_seen":"2025-09-20T16:31:15.457806Z","last_seen":"2026-07-13T01:06:07.914111Z","times_seen":21,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/notification-reward.webp","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /notification-reward.webp HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40438\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-9df6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hSgFalZnTsCt09sNdoJMli82zBlf30IllM1WinVMsXie1tzj1Y6QdbVnCrCtDiHhkaOgs9GvFVKkJxhoslQbSEaxRJ9xLMMHHIxxIHbrrMP3hbGJcFWyd%2FsSENGpJN6aXK8QuVvcsh%2FIEVVeOQzSE0I8GGhv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e429b8556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40438,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8888ba318fd0987cdfaede457eda59b5","sha1":"9fd7d18e0c1286f3a811f081d1aca166275287f4","sha256":"88c475d2075bcca448136b89fac00e5f27db31331b152a83aa6220b6135faa17","sha512":"3a225a1c9d7e32e0f4abbf31bd7bf82fbe550cc3975b14d2c1fde624d27588779af141c8e718b7fc0c3f655fa31b72c4f2ea550b3d58fb3ed3642e4ae452c739","ssdeep":"768:xyj3dTlpXjIpNcriJdvD6/fa/HCJ1QWJKLAbARznP7TdsefoaF0IYY2ZKqAzh:e39lepmuH2KHO1+LAbARzP3GaFQGqch","tlshash":"4303f1dcbd89f3c8eaf3d93ec801255a3b1de6be104f9004f81699057a2c952de19f4a","first_seen":"2025-03-16T21:52:20.873348Z","last_seen":"2026-07-13T01:06:07.938825Z","times_seen":221,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/last-section.webp","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /last-section.webp HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52448\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-cce0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjjUxNbQhmp9%2Bfevaf6jguZU24qfzQyevFQaSTBOAXRu29ongNQlzdTda0MV%2FLls2yL4gK6ZNrmOO77hiStNhcC8kPzoFJ0WAVu7DhrT8bDpW8%2Fi%2BNIkW0j7vJ2vcpsiS4dfp7AGmvqZy35pATY%2FH9%2FF9vaN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e429b8b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"396c64a4a5b1eaa76438a1549e8f6809","sha1":"37a5617b80c16ac69653e2c6ea63fbee8f4a3c59","sha256":"049fe660ed104b9b0e7e7ee99969bceb3222d0dce6d746fa232f0355f718ffa3","sha512":"e089081d4e48df1aa03e4c3b7df3647e7729cfb08c2581fb2a665a48c6556da79010269b2b080edb14ada2afd079206d4704f36168b657813821b8640d5c20d9","ssdeep":"768:YYytYytYyn1/+/daiJR84zLkWweWtsPcLEiMDrs/rwXNAtIJkEyo51GL:YJJ7pQdZR84zrwREcLEiMETwXoPL","tlshash":"9a33f1659afac355c7abd8f4ec12bfdc40b31f3dfa24c846d570a052b1c6a026d8b245","first_seen":"2025-03-16T21:52:20.8131Z","last_seen":"2026-07-13T01:06:07.956351Z","times_seen":221,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/axiom-logo.svg","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /axiom-logo.svg HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Our6E%2BDmaZAkJWUzfFkzcebPrkxBlHytby3HP0ipQ9OZ5C8iMoTf1XxxUOsJDjzKrNQplW0Sh0EUr4tmvh4CwbaMZmrtmMlOD0%2Fimje5xTvFyvUSxqV7NhVA9tXeFGuUlvXYsIKRKyIefJoJEyiFh4SgbvXV\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6838c460-9ea\"\r\ncf-ray: 9f460e42ab8c56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2538,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8fea2f496cbab0880d9dc3971ea5c628","sha1":"06c79fac1b6844698a6a824cbe1a5a440b0442c5","sha256":"c786ebf30a59c42054ac322f6b111633db5ff48afbfb1849e7e771d7b43af0b0","sha512":"94fb112df8191f4a46212d04dff33659632a402f5ea547fb77db35ae63a653578d37b86e37741ec783a1bc499aeaac1ada4fb45f597357659803d52429fa1179","ssdeep":"","tlshash":"2d5155cc33284398fd89cef36a04542d0413d9e3a4468a50c27a2f651cd9d467e77fd5","first_seen":"2025-08-11T11:12:01.877718Z","last_seen":"2026-07-13T01:06:07.943191Z","times_seen":226,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/land-on-two-blocks.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /land-on-two-blocks.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1313773\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-140bed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-range: bytes 0-1313772/1313773\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=txbIIue%2FNScubXPMXVWOrm4Gx06NtRgqmSmRdIS4ANP2g12pXjifI5Vxlj8mbEBpQeHhCgaPpLBeC0Cq3ar8zZnouNYv0hBtcpxKo89yLIsIKcEBdC8bM8le16DZ0soT7lx539pcUQ%2FwkOrg21np2O3egiYD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e431b9156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242637,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"08ac70c389f49937565646a04dc95eac","sha1":"7be39c4c3a932e5aed7c66ba72d1ad9e03462389","sha256":"5ab373fa094bbe2e9fb8d43536f4df83c76a86fe81d7959a5ac263c07c4953a2","sha512":"5d6d1c4ddcf81909de6b8d928048e85244a1e3aa338d2c10a6bed7123cd619bfb74a1f36e233eb685e4a1db6b3d17377c4493da2d35df4c8eb657715349f5092","ssdeep":"24576:UqTooav6z0R8xCOQtUrMolDhtAv/uFYDDh:UqTgv6z0afFhDAzDh","tlshash":"0b25125e0da29020ff8cfa7d84a2d825e9e35a17c8c2d35f750e05444b7a4968bef1b6","first_seen":"2025-08-12T01:57:34.407037Z","last_seen":"2026-07-13T01:06:07.941511Z","times_seen":130,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":508,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/automatic-placement.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /automatic-placement.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1663148\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-1960ac\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-range: bytes 0-1663147/1663148\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5WLegxfDD3lmW8hd5alAxewZMU2FjNIJsa5HaVn2Cv5mXU0KnlR90X6Iu4yW2%2FpVdYSy4w6weXDqrfA4wP8a3nxVTeRo2OifslneCcYqjznpF9XlUs0Simq3AsTe3Cz9R0seooHV%2BBfNQ5wUBGc1xjgi2Pwz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e432b9456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1663148,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"ff584a49f8f2a4d0f2446485f7d0b14d","sha1":"70fecb962adcef622e5907e9ef85b0944d2a46a3","sha256":"e59951c4144cf0a6ee09c536f928bbca08718d5a656403c5872deaad6c353678","sha512":"47659aceb69a6549e0b94bd8537529daf7c3fd0054e2e0a6868728957d7cc0b693429b1e5e5014788f16cbb763a2346be1e6944aaa3da8ff029700f55cd97b51","ssdeep":"24576:gj1hhTK5suEA3gRST9tGkME6h0iehrqa846CYuu3r9jx/EH:gjDh+/xQRS5JMzIzYzxx/0","tlshash":"7625126e0dd31012ff2cfa3d6594c929cad66a23c9c1c65f746c85918f7a1214bbf0ba","first_seen":"2025-08-11T11:12:01.98419Z","last_seen":"2026-07-13T01:06:07.925015Z","times_seen":93,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":480,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/wallet-twitter-tracker.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /wallet-twitter-tracker.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1474560-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 28722\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-16f032\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncontent-range: bytes 1474560-1503281/1503282\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQg7kxpWnhsoVJDqFOZv%2Bku9HiLmAzgWbN76RCTP9QV1he%2BXzyBvqnzwhGVjMlVO1EoBPwtSZIT8%2F8ZSiYzHFzeryTZZmHePk5rx6axa%2BUh5eOXnSadRnCLjdgA%2BY7N6%2Bw4m6xZ1NMlcTB1S9RKXqx8JKiAS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e454bac56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28722,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"ff1d540173282944d252fcde1c579a65","sha1":"f002a325bca73dd0beaf92f8906f4b4eb54cd13f","sha256":"eee7325ca80c55eba4c88c1a8f190057dc7042e41bd4d1cf15dc773562e356b9","sha512":"43708d0b8cb79a4208c9008050fa5e3f6e5f01a4e9c882306216ec2cd3a93b300a6b402d6717454131957ef8c05963541d3c0057b7f2038d5055b3a98b0404ef","ssdeep":"384:T9NVblk9kZ5GfJpYqHnw0opuMjWxIkxRWJi4jli7b1uadWgdH4lucubieVov:70sGfHYqHwzjjGxRvslinFWNNDoa","tlshash":"0bd2489e5f02c02aca36263adcf223183730d4fd5207875f141c9a7c6ed6bd51cea89a","first_seen":"2025-09-20T16:31:15.449019Z","last_seen":"2026-07-13T01:06:07.927499Z","times_seen":21,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/y-combinator-brand.svg","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /y-combinator-brand.svg HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5jQKNo9orHWyjJ%2F8US7xrJ6O5v2aKTLIOApCXBXMJU%2B%2Fa1aRQauqkfyAXo1rgjGDIYzOZcRnCzRbQPRIl%2F92FFjxFNU93Xdf%2F5mgo%2FrZ7P6cD8OtuvmKYlI6h0E7kHPsvyfufFDShmfwtzzcQGBxB7nHDy0\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6838c460-2fcb\"\r\ncf-ray: 9f460e454baf56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12235,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"786f1a6a3e4c065c7a3ee52f83dd9996","sha1":"3fe2e3b54a874b37d53b1bb6fab0616fd28ffcf8","sha256":"4abac8191dad95b84b1dbdf7acbb49a74af8ace7ddf3e5ec4e22b223b825bf6c","sha512":"a30cf2c5963ce9c4fdbfbf38568250479c4604b60125093c0e5f57d34a54b949d6f990a42f2f35dcd2bddf58c4eff31b5ec243435d184cbc1e7b1b250b659799","ssdeep":"192:b5yVztN8hLtiVm0yDmCY/9wORR2Hd6i8+gqsfwjyzyanWeir9eeLWYN4BXGKzi05:dUXsLZYqsR2HdB9jyzya9g9fL3+YKZ5","tlshash":"43421fef9bc8b2d0f102f3f4e42644b57a5f24bb67d2c710c3a59e8469464acc98dc84","first_seen":"2025-03-16T21:52:20.837477Z","last_seen":"2026-07-13T01:06:07.94213Z","times_seen":223,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/hero-video.mp4","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /hero-video.mp4 HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1376256-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 31208\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: \"6838c460-1579e8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncontent-range: bytes 1376256-1407463/1407464\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qNFgkPdv19XO0kCH6JeDXOMm3xDmbxMxemXFQms6DAKV2xUaUrv9yy8sqVGQuLPo4G5B6CxT5E%2FH6irSPpGTfAAXAJnolyikyAB2q8Jg7p3hSq4q%2Bg6eNwxkDmCoRIfqIZ%2Bg9ivzB5%2F8CCbFPojrWwBBf%2Bme\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e454bae56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31208,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"55a63b7c576c0a981dd14e3b1f6d2813","sha1":"8259704ba1709e000a788c44b83dfdc8a749e6d0","sha256":"a0240abdd6e28b84ec79f990d38585c9e678d23504694856e9e99781b1710e69","sha512":"9932e56fbd7839975fc4cd507f0f3ea92a05b40bedbd505a5da7214ec77d5ed972e6f1488ad3abaeee7513669b65f3f1cc56260950aa1cefcb43f168b0f6d5ef","ssdeep":"768:/PQ7qiKJCIvBIV89O71vGrgzp7XiSRDP3xviHtc:XQuvvBa8A71vRVGSx4S","tlshash":"f8e25942ab34019bc428037c94f3c340bb71da61ab93575fd79073b8bca27799c925ea","first_seen":"2025-09-20T16:31:15.457806Z","last_seen":"2026-07-13T01:06:07.914111Z","times_seen":21,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transactional-check-receiveqr.shop/ce178d2b3058a5fe.css","fqdn":"transactional-check-receiveqr.shop","domain":"transactional-check-receiveqr.shop","tld":"shop"},"ip":{"addr":"172.67.136.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:42.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transactional-check-receiveqr.shop","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 15:48:20 GMT","end":"Tue, 28 Jul 2026 15:48:19 GMT"},"fingerprint":{"sha1":"33:25:DC:8D:76:D9:5E:37:6E:B5:E0:36:96:AB:64:B5:09:7A:89:9B","sha256":"33:AC:A9:15:A4:5B:EA:CA:78:F8:CB:D2:BE:0A:AA:28:FE:F0:32:53:CF:B3:DD:72:66:47:1D:3F:8F:8F:D3:2F"}}},"request":{"raw":"GET /ce178d2b3058a5fe.css HTTP/1.1\r\nHost: transactional-check-receiveqr.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 11:02:42 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 29 May 2025 20:32:32 GMT\r\netag: W/\"6838c460-1fd03\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbZT1nCKB9WEWZKx%2F589Kl8F5canSvHkIvaaIBBykYaU%2Bm8JBHAsQp1WWLKFnanKucRK2UTcP9%2BDt%2Fuo237Na1Qo0GrRj%2Bqy7LrFiLB%2FcGjEiRgoTRBY8Lc8kC5gmC7gKoJ4ZY4VR7Gl1lSXk3IE2s8ClOoC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f460e427b7b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"edcf47cfe4c90d9051f74e396e61b0d9","sha1":"e7c404a1fdff2476cd4b1ec1e0cb7b2395b68cd1","sha256":"0481d6462cc1618aecd94556f02cfcb2825b96ac08a9907bf7d8edfc75bf5b2e","sha512":"27cbbd857996b5aacc5b7093d88d626066cbcae43bbee7b46704523f1c0c1a0e151fceb38cec49fd994d4722b97b1095f7ed3712699c6d0aae1bf750350dcb42","ssdeep":"1536:6c+QAP3ILxAjujj/mZjblpU0UvDfFawWgUipUwRET5yZ03fIJsP322H3a37VMrXe:e3uxx/KPbdwRDnK56","tlshash":"fdd305fde24d45d13732c886eb75b78a60e9fabad5815c45f81b500daec36a102c4ebc","first_seen":"2025-09-17T08:13:09.265925Z","last_seen":"2026-07-13T01:06:07.949557Z","times_seen":25,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://transactional-check-receiveqr.shop/","date":"2026-04-30T11:02:43.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://transactional-check-receiveqr.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 30 Apr 2026 11:02:43 GMT\r\ndate: Thu, 30 Apr 2026 11:02:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-28T17:02:22.100043Z","times_seen":38337,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":169,"dns":2,"connect":28,"send":0,"wait":19,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}