{"report_id":"f9ecda20-e9b0-4c70-9ad2-cae225f3bc81","version":0,"status":"done","tags":[],"date":"2026-09-06T22:51:22Z","url":{"schema":"https","addr":"usdt.qr-global.com/","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdt.qr-global.com/","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"title":"Tether (USDT) QR Code Generator","dom":{"size":107807,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (541)","md5":"c405458796bd16b539dfcdb89ff8ca13","sha1":"795e477e2f7f7ceb0519f54645a36510e8ba598e","sha256":"a2118c467818b5761019bfb2677e864f22df82d225cb08f2a76646b94295c6e1","sha512":"9e149070c897cb2f75128731ab7e4bf5e6fc697b46991c4e6b2ad16303f06ac31972144637b20769f8d2016e1f88200b971fe776efa00b725554b2efda11bebd","ssdeep":"1536:aRN2sl7wy+cvy+cDDFMP/OU/000040000r0000G0000F0000Y0000LjRbW6g8Fp6:ZTUmRbm8F0","tlshash":"adb3b95523b014bf24c7c2a6fb512b2e5769eac7d8af4168b29c06921fc7ce5ce0b750","dom_hash":"domhash9f51a6c82ccb47634902842daf0b0788","first_seen":"2026-09-06T22:45:29.764434Z","last_seen":"2026-09-06T22:51:23.466342Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdt.qr-global.com/","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-11T22:51:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"qr-global.com","ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-27","domain_rank":0,"first_seen":"2026-09-06T22:45:25.925492Z","last_seen":"2026-09-06T22:45:25.925492Z","alert_count":0,"request_count":2,"received_data":4100,"sent_data":2471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"usdt.qr-global.com","ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-27","domain_rank":0,"first_seen":"2026-09-06T22:45:25.924034Z","last_seen":"2026-09-06T22:45:25.924034Z","alert_count":0,"request_count":9,"received_data":426915,"sent_data":10491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdt.qr-global.com/build/assets/landing-CQlZ9lA4.js","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"336d16c6e7e44fd009292805a57b6432","sha1":"be2fe90df4c9eb385b29b72f4b26163a173d2763","sha256":"9c88dcc3eb2d61d5564c5178beee8aa3c498dc5aae4ec8aa208e53283a51e6b7","sha512":"9536df4dc95c623685fc8f4c4adf95c933dde65c1ea1ae1908f5d3557563f1b6f8c844f1039061cf8eb7c5c1b5272ed6ea481f7f4ad8a063040fb911576afcd6","ssdeep":"","tlshash":"887175a12614687b129b07abe5fa67c27b742855780b0056353c8ccf1c6dd9307e7adb","size":3519,"data":"","first_seen":"2026-09-06T22:45:29.76827Z","last_seen":"2026-09-06T22:51:23.48057Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qr-global.com/favicon-16x16.png","fqdn":"qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.qr-global.com/","date":"2026-09-06T22:50:53.457Z","timestamp":1788735053457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qr-global.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 19:41:35 GMT","end":"Thu, 26 Nov 2026 20:41:21 GMT"},"fingerprint":{"sha1":"CF:61:25:DF:5D:EF:AA:E8:D4:7A:DE:E3:24:F5:AE:99:4B:05:F0:67","sha256":"9B:44:8A:8F:1A:57:74:03:39:BD:CD:AC:02:47:88:01:F4:62:02:D7:56:BE:0D:A6:A0:9D:A5:CC:40:03:E0:6A"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: qr-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt.qr-global.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; qr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Sun, 06 Sep 2026 22:50:53 GMT\r\netag: \"6a9ac1d0-27c\"\r\nlast-modified: Fri, 04 Sep 2026 13:04:16 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 356\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2F3Y0XOGsR%2BmpWZe32axR4xCQyff%2FJRfASQHfAxiWOx0JdpP8I6omktfRCYNoPHz9sKJ7zl7Qk1k3ckWKHEda1%2BnaIXizcp1KEYfWWRr6gtU06icugeE7DE3iqqaqUAg\"}]}\r\ncf-ray: a37109041e3b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":636,"size_decoded":1633,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"72c7fcf9a02aed8d824015d4ee58ce1c","sha1":"451e5e58fa930fab605f0443dd42d17e88cb802b","sha256":"739e84cb72ba188f5de3b89b6994b2060d18f9ba50b0c7da4179bffc000cbbe1","sha512":"b6b77b4480860346d3eff287593eb14199c3ab6d641139c5bb4eba90d6ba9db1bad7b45d96e7270bfd4005e30534dc89b4d64334d61044c5850e524dbf032e42","ssdeep":"","tlshash":"87f062f01b775020e02c7f96ee02e260ddbdc10046aa3549ed7da37f5a84f084792005","first_seen":"2026-09-06T22:45:29.77167Z","last_seen":"2026-09-06T22:51:23.46899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qr-global.com/logo-full.svg","fqdn":"qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.qr-global.com/","date":"2026-09-06T22:50:53.307Z","timestamp":1788735053307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qr-global.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 19:41:35 GMT","end":"Thu, 26 Nov 2026 20:41:21 GMT"},"fingerprint":{"sha1":"CF:61:25:DF:5D:EF:AA:E8:D4:7A:DE:E3:24:F5:AE:99:4B:05:F0:67","sha256":"9B:44:8A:8F:1A:57:74:03:39:BD:CD:AC:02:47:88:01:F4:62:02:D7:56:BE:0D:A6:A0:9D:A5:CC:40:03:E0:6A"}}},"request":{"raw":"GET /logo-full.svg HTTP/1.1\r\nHost: qr-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt.qr-global.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; qr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Sun, 06 Sep 2026 22:50:53 GMT\r\netag: \"6a9ac1d0-5ab\"\r\nlast-modified: Fri, 04 Sep 2026 13:04:16 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 356\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zNglqqx95jEo4evlP5JLNLMIF6KtEm2bc79YXWAfdfTDzEnsteOUlQmuGeoiAQ%2BG0PyvM7EU4xFKa7lh7aphaMNa49WLjhBXhqxRxMHLCjvievnay5sfHIzXXbPiRQZb\"}]}\r\ncf-ray: a37109034e2b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1451,"size_decoded":1709,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1d25695c6b6794c684ec554ef51599c","sha1":"5cba90b24b86065a4b78c7e44868f337c21e9123","sha256":"7634fda8e311b3c5329ca5e21fa780bb338dbebd2b1e4db09357cf958e3c05b5","sha512":"68b9a06adfd2ea17c0a88b0ebbfdc6de07dbbf4ec8afd59cdbd4df2278c41509b7297e7a2e4acbd86367e6d6524f54b251f5cde0ab8f30b1808e8773a8c66b51","ssdeep":"","tlshash":"68312834b6ad941fc104a2094b0494983967f0abab5a4314b59c7d3b2f6a4d3ac7b2dd","first_seen":"2026-09-06T22:45:29.770774Z","last_seen":"2026-09-06T22:51:23.471892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":10,"dns":7,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.qr-global.com/build/assets/manrope-400-latin-C46ZzDBF.woff2","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdt.qr-global.com/","date":"2026-09-06T22:50:53.421Z","timestamp":1788735053421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qr-global.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 19:41:35 GMT","end":"Thu, 26 Nov 2026 20:41:21 GMT"},"fingerprint":{"sha1":"CF:61:25:DF:5D:EF:AA:E8:D4:7A:DE:E3:24:F5:AE:99:4B:05:F0:67","sha256":"9B:44:8A:8F:1A:57:74:03:39:BD:CD:AC:02:47:88:01:F4:62:02:D7:56:BE:0D:A6:A0:9D:A5:CC:40:03:E0:6A"}}},"request":{"raw":"GET /build/assets/manrope-400-latin-C46ZzDBF.woff2 HTTP/1.1\r\nHost: usdt.qr-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://usdt.qr-global.com/build/assets/landing-DhahnJru.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; qr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-type: font/woff2\r\ndate: Sun, 06 Sep 2026 22:50:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 06 Sep 2027 22:44:56 GMT\r\nlast-modified: Fri, 04 Sep 2026 13:05:20 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nage: 356\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k8fUBdwKALtvMgyv22aE2UJZffY59PCnu1gtdvtoY9jY2Pa3XAk6hEJfwTJd4ZlbmteCZsB%2BwXnrJ%2BsBnsFVExyvfSsC1uTECDY4DpUW%2FlV9h1HtBn%2BfPNk8eeZfhkjBuFxXRXo%3D\"}]}\r\ncf-cache-status: HIT\r\netag: W/\"6a9ac210-6000\"\r\ncf-ray: a3710903ee310731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24576,"size_decoded":25606,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-10-11T22:46:01.121279Z","times_seen":13022,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.qr-global.com/build/assets/manrope-400-latin-C46ZzDBF.woff2","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdt.qr-global.com/","date":"2026-09-06T22:50:53.426Z","timestamp":1788735053426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qr-global.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 19:41:35 GMT","end":"Thu, 26 Nov 2026 20:41:21 GMT"},"fingerprint":{"sha1":"CF:61:25:DF:5D:EF:AA:E8:D4:7A:DE:E3:24:F5:AE:99:4B:05:F0:67","sha256":"9B:44:8A:8F:1A:57:74:03:39:BD:CD:AC:02:47:88:01:F4:62:02:D7:56:BE:0D:A6:A0:9D:A5:CC:40:03:E0:6A"}}},"request":{"raw":"GET /build/assets/manrope-400-latin-C46ZzDBF.woff2 HTTP/1.1\r\nHost: usdt.qr-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://usdt.qr-global.com/build/assets/landing-DhahnJru.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; qr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-type: font/woff2\r\ndate: Sun, 06 Sep 2026 22:50:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 06 Sep 2027 22:44:56 GMT\r\nlast-modified: Fri, 04 Sep 2026 13:05:20 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nage: 356\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EfaE1rEfEdE3c5w%2Fr0fWhrg8j%2BqTj50HlnEj114nP0xPGKgoJGSi%2FyQvpLwNsClei4VL3d3giefjRYeZhsqLNWM3gKfuM1Bx9jQY8Uhz%2BiCwzkPxRK11yC%2BoCMwibepVOFnvUzo%3D\"}]}\r\ncf-cache-status: HIT\r\netag: W/\"6a9ac210-6000\"\r\ncf-ray: a3710903ee350731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24576,"size_decoded":25608,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-10-11T22:46:01.121279Z","times_seen":13022,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.qr-global.com/","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-06T22:50:52.819Z","timestamp":1788735052819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qr-global.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 19:41:35 GMT","end":"Thu, 26 Nov 2026 20:41:21 GMT"},"fingerprint":{"sha1":"CF:61:25:DF:5D:EF:AA:E8:D4:7A:DE:E3:24:F5:AE:99:4B:05:F0:67","sha256":"9B:44:8A:8F:1A:57:74:03:39:BD:CD:AC:02:47:88:01:F4:62:02:D7:56:BE:0D:A6:A0:9D:A5:CC:40:03:E0:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdt.qr-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=21600, public, stale-while-revalidate=86400\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 06 Sep 2026 22:50:53 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; expires=Wed, 04 Nov 2026 16:50:53 GMT; Max-Age=5076000; path=/; domain=.qr-global.com; secure; samesite=lax\nqr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D; expires=Wed, 04 Nov 2026 16:50:53 GMT; Max-Age=5076000; path=/; domain=.qr-global.com; secure; httponly; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: X-Inertia, accept-encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-landing-cache: HIT\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6moUKMJUcefIMQUxqVK5FIkTr0vh8JzcN8mc49rUrp9iXML8I3Vkriw6xpYUNihiFWGgxuRBCRecDqm6%2BBEq7d8qe2SVrbXxWZNp6EcH8gxswsgQ3JCQSEmyn%2BWnnxL0zYXm900%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a37109004dd00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","domain":".qr-global.com","expires":"2026-11-04T16:50:53Z","raw_expires":"Wed, 04 Nov 2026 16:50:53 GMT","max_age":5076000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; expires=Wed, 04 Nov 2026 16:50:53 GMT; Max-Age=5076000; path=/; domain=.qr-global.com; secure; samesite=lax"},{"name":"qr-global-session","value":"eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","domain":".qr-global.com","expires":"2026-11-04T16:50:53Z","raw_expires":"Wed, 04 Nov 2026 16:50:53 GMT","max_age":5076000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"qr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D; expires=Wed, 04 Nov 2026 16:50:53 GMT; Max-Age=5076000; path=/; domain=.qr-global.com; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107652,"size_decoded":14006,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (535)","md5":"a6bbef41b61f1dd721f2687331ceb4d3","sha1":"854079213247fd4e550e641807617fe62da7774a","sha256":"4cd3d2d4ceca33e186151ce585a6716fbba6e8f1118c0adf44bc2743f456621b","sha512":"32cb2e95c40a91775fb62c073e4578a2b43b19353158c9b819b042f4c5bcfe9bde2db09b2ddb964d5505087f513c96a79df5333ccd56940d047779dd47009924","ssdeep":"1536:owSsS5dpX+dpXsF33xl1111E1111x1111M111131111C1111kZwSogXns2jP:QHxRwS1nss","tlshash":"f5b3989523b014bf24c3c1a6eb512b2e57a6fac7d8af4568b1dc02921fc7ca5de0b750","first_seen":"2026-09-06T22:45:29.765673Z","last_seen":"2026-09-06T22:51:23.475607Z","times_seen":2,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":5,"connect":18,"send":0,"wait":218,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.qr-global.com/build/assets/landing-DhahnJru.css","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt.qr-global.com/","date":"2026-09-06T22:50:53.294Z","timestamp":1788735053294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qr-global.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 19:41:35 GMT","end":"Thu, 26 Nov 2026 20:41:21 GMT"},"fingerprint":{"sha1":"CF:61:25:DF:5D:EF:AA:E8:D4:7A:DE:E3:24:F5:AE:99:4B:05:F0:67","sha256":"9B:44:8A:8F:1A:57:74:03:39:BD:CD:AC:02:47:88:01:F4:62:02:D7:56:BE:0D:A6:A0:9D:A5:CC:40:03:E0:6A"}}},"request":{"raw":"GET /build/assets/landing-DhahnJru.css HTTP/1.1\r\nHost: usdt.qr-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt.qr-global.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; qr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 06 Sep 2026 22:50:53 GMT\r\netag: \"6a9ac210-263ec\"\r\nexpires: Mon, 06 Sep 2027 22:44:56 GMT\r\nlast-modified: Fri, 04 Sep 2026 13:05:20 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nage: 356\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mqq6W26hvnh5UjG2G0X7AEomFZBaNqaJOb54qQYB4o7WejKUV9ihx%2FeJWmVFPdViTO932OQaYKrR8yj0GAdV4Zrt7Ek2CocP9O0HDSzil2jh3Yx%2Fpfy4bMAaSFI52yQJDXY%2BN0w%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\ncf-ray: a37109032e270731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156652,"size_decoded":24411,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4ddf87bcee1bb81e7ff06ea141cf0d0f","sha1":"38fa2ed3a2f0e9c5e14a089133adf1f70daf88e3","sha256":"8a01a944242026d3752440d2393460ac4f283cfdbdde2dd7cee7b7ca091ebd18","sha512":"df606cf8660d51e0e58f7fabff876c797c4eef12517eeb98ebb00135cf78d975bf8aebe1cb09c9f1c2fa2f088cd2c0c57c3ad151c751f9bae610affa7aba7213","ssdeep":"3072:e1I13sGl8rs7zquVW1YHYQENNF+RWhR0/yFpVBSQaMGMZnqyiiOYd1B:+I13sGl8rs7zquVW1YHYQENNF+RWhR04","tlshash":"6ee392b0a135d43bbc23b4f9e3dce84cb909b092dd2657ecba1160112bd3bf65d96a14","first_seen":"2026-09-06T22:45:29.766834Z","last_seen":"2026-09-06T22:51:23.477921Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.qr-global.com/build/assets/landing-CQlZ9lA4.js","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt.qr-global.com/","date":"2026-09-06T22:50:53.296Z","timestamp":1788735053296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qr-global.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 19:41:35 GMT","end":"Thu, 26 Nov 2026 20:41:21 GMT"},"fingerprint":{"sha1":"CF:61:25:DF:5D:EF:AA:E8:D4:7A:DE:E3:24:F5:AE:99:4B:05:F0:67","sha256":"9B:44:8A:8F:1A:57:74:03:39:BD:CD:AC:02:47:88:01:F4:62:02:D7:56:BE:0D:A6:A0:9D:A5:CC:40:03:E0:6A"}}},"request":{"raw":"GET /build/assets/landing-CQlZ9lA4.js HTTP/1.1\r\nHost: usdt.qr-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt.qr-global.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; qr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 06 Sep 2026 22:50:53 GMT\r\netag: \"6a9ac210-dbf\"\r\nexpires: Mon, 06 Sep 2027 22:44:56 GMT\r\nlast-modified: Fri, 04 Sep 2026 13:05:20 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 356\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xq0YngVaD5ZUZBw7xcOwXYmhQz5gVFJXVwT4Jer4VF1Te6CrkTS6Bt3cu9QPP0AVpFn4ohHBT685frPrvMYNCSftoH59%2BXlz6MmZ5mPV%2FzxlUbr3oW0VLZIKjGRRhW0C9StHrT8%3D\"}]}\r\ncf-ray: a37109032e2a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3519,"size_decoded":2466,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3518)","md5":"336d16c6e7e44fd009292805a57b6432","sha1":"be2fe90df4c9eb385b29b72f4b26163a173d2763","sha256":"9c88dcc3eb2d61d5564c5178beee8aa3c498dc5aae4ec8aa208e53283a51e6b7","sha512":"9536df4dc95c623685fc8f4c4adf95c933dde65c1ea1ae1908f5d3557563f1b6f8c844f1039061cf8eb7c5c1b5272ed6ea481f7f4ad8a063040fb911576afcd6","ssdeep":"","tlshash":"887175a12614687b129b07abe5fa67c27b742855780b0056353c8ccf1c6dd9307e7adb","first_seen":"2026-09-06T22:45:29.76827Z","last_seen":"2026-09-06T22:51:23.48057Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.qr-global.com/build/assets/sora-variable-latin-5v9NviDD.woff2","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdt.qr-global.com/","date":"2026-09-06T22:50:53.423Z","timestamp":1788735053423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qr-global.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 19:41:35 GMT","end":"Thu, 26 Nov 2026 20:41:21 GMT"},"fingerprint":{"sha1":"CF:61:25:DF:5D:EF:AA:E8:D4:7A:DE:E3:24:F5:AE:99:4B:05:F0:67","sha256":"9B:44:8A:8F:1A:57:74:03:39:BD:CD:AC:02:47:88:01:F4:62:02:D7:56:BE:0D:A6:A0:9D:A5:CC:40:03:E0:6A"}}},"request":{"raw":"GET /build/assets/sora-variable-latin-5v9NviDD.woff2 HTTP/1.1\r\nHost: usdt.qr-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://usdt.qr-global.com/build/assets/landing-DhahnJru.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; qr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-type: font/woff2\r\ndate: Sun, 06 Sep 2026 22:50:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 06 Sep 2027 22:44:56 GMT\r\nlast-modified: Fri, 04 Sep 2026 13:05:20 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nage: 356\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1uVS9sGTCH6ogFME2xqSq36yntltEua%2Fi%2Fi17LV3Gs%2BRfVb7ozGSfffErgDMzIRDR%2FRcHsN2WzaIoEaP%2BHrElYjalCB%2B3RFXaboNdMQfvopHUSvjDikaaSWg0omzvNhd%2Bkrs2pw%3D\"}]}\r\ncf-cache-status: HIT\r\netag: W/\"6a9ac210-6298\"\r\ncf-ray: a3710903ee320731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25240,"size_decoded":26276,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25240, version 1.0","md5":"f544d77b0e9b284f5c9f06c0905d9f41","sha1":"9067cf8d0729f9ddcf4cdf90649050594e793525","sha256":"3902474d3ece89c8580d5ef3325cf58753e6e45a86f9957b4dacc4fce2e7fde1","sha512":"69cc3131509240320065de23ea923fba0c9ffde8f108ffea894303458f44bfadcc0b172f2d936732470cf004a46cf65e02428c83f7fa34889fb8626cb1b4c89e","ssdeep":"384:OCvS/6gw97YTo7qbVbUdFqTn1XV2FDoDTShGjXHU9B64BwXaRVKzb:OD/6gw97YTo6ZSqTn5VQEcGjXYWXAQb","tlshash":"e6b2e16b37387de5db05c766e4d23ab34dc3655aa6a01977682fd418880808327bf3bd","first_seen":"2025-09-23T01:14:50.250739Z","last_seen":"2026-10-10T23:27:33.845215Z","times_seen":1432,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.qr-global.com/build/assets/manrope-400-latin-C46ZzDBF.woff2","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdt.qr-global.com/","date":"2026-09-06T22:50:53.424Z","timestamp":1788735053424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qr-global.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 19:41:35 GMT","end":"Thu, 26 Nov 2026 20:41:21 GMT"},"fingerprint":{"sha1":"CF:61:25:DF:5D:EF:AA:E8:D4:7A:DE:E3:24:F5:AE:99:4B:05:F0:67","sha256":"9B:44:8A:8F:1A:57:74:03:39:BD:CD:AC:02:47:88:01:F4:62:02:D7:56:BE:0D:A6:A0:9D:A5:CC:40:03:E0:6A"}}},"request":{"raw":"GET /build/assets/manrope-400-latin-C46ZzDBF.woff2 HTTP/1.1\r\nHost: usdt.qr-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://usdt.qr-global.com/build/assets/landing-DhahnJru.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; qr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-type: font/woff2\r\ndate: Sun, 06 Sep 2026 22:50:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 06 Sep 2027 22:44:56 GMT\r\nlast-modified: Fri, 04 Sep 2026 13:05:20 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nage: 356\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Pi%2Fj41pTz7ckrPDW%2F7k21aNF4MowG9as2OLbP14i2e8fFdWUtHMY0%2BQoojNKzIuINy6gqtTJYutGGJJCdfhkiC7GGE9gcdXVcnKUazv%2FVUEKd2PV5VZ5gfcrhNPeyIYgyR0X4U%3D\"}]}\r\ncf-cache-status: HIT\r\netag: W/\"6a9ac210-6000\"\r\ncf-ray: a3710903ee330731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24576,"size_decoded":25606,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-10-11T22:46:01.121279Z","times_seen":13022,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.qr-global.com/build/assets/sora-variable-latin-5v9NviDD.woff2","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdt.qr-global.com/","date":"2026-09-06T22:50:53.427Z","timestamp":1788735053427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qr-global.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 19:41:35 GMT","end":"Thu, 26 Nov 2026 20:41:21 GMT"},"fingerprint":{"sha1":"CF:61:25:DF:5D:EF:AA:E8:D4:7A:DE:E3:24:F5:AE:99:4B:05:F0:67","sha256":"9B:44:8A:8F:1A:57:74:03:39:BD:CD:AC:02:47:88:01:F4:62:02:D7:56:BE:0D:A6:A0:9D:A5:CC:40:03:E0:6A"}}},"request":{"raw":"GET /build/assets/sora-variable-latin-5v9NviDD.woff2 HTTP/1.1\r\nHost: usdt.qr-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://usdt.qr-global.com/build/assets/landing-DhahnJru.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; qr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-type: font/woff2\r\ndate: Sun, 06 Sep 2026 22:50:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 06 Sep 2027 22:44:56 GMT\r\nlast-modified: Fri, 04 Sep 2026 13:05:20 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nage: 356\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PuT%2FO72MkComivAzc9ssNhpGOoV7o%2B04laG66zycqkWBNrba8G94bomYX25olq%2Bb6lGRZ73eO8wumfdGyn54KzgfTPtLYLK2E0pYL2OpCbjGuq2VdGgt1ei88Uw77PJg6qcwnHg%3D\"}]}\r\ncf-cache-status: HIT\r\netag: W/\"6a9ac210-6298\"\r\ncf-ray: a3710903ee360731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25240,"size_decoded":26268,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25240, version 1.0","md5":"f544d77b0e9b284f5c9f06c0905d9f41","sha1":"9067cf8d0729f9ddcf4cdf90649050594e793525","sha256":"3902474d3ece89c8580d5ef3325cf58753e6e45a86f9957b4dacc4fce2e7fde1","sha512":"69cc3131509240320065de23ea923fba0c9ffde8f108ffea894303458f44bfadcc0b172f2d936732470cf004a46cf65e02428c83f7fa34889fb8626cb1b4c89e","ssdeep":"384:OCvS/6gw97YTo7qbVbUdFqTn1XV2FDoDTShGjXHU9B64BwXaRVKzb:OD/6gw97YTo6ZSqTn5VQEcGjXYWXAQb","tlshash":"e6b2e16b37387de5db05c766e4d23ab34dc3655aa6a01977682fd418880808327bf3bd","first_seen":"2025-09-23T01:14:50.250739Z","last_seen":"2026-10-10T23:27:33.845215Z","times_seen":1432,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.qr-global.com/build/assets/manrope-400-latin-C46ZzDBF.woff2","fqdn":"usdt.qr-global.com","domain":"qr-global.com","tld":"com"},"ip":{"addr":"104.21.90.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdt.qr-global.com/","date":"2026-09-06T22:50:53.428Z","timestamp":1788735053428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qr-global.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 19:41:35 GMT","end":"Thu, 26 Nov 2026 20:41:21 GMT"},"fingerprint":{"sha1":"CF:61:25:DF:5D:EF:AA:E8:D4:7A:DE:E3:24:F5:AE:99:4B:05:F0:67","sha256":"9B:44:8A:8F:1A:57:74:03:39:BD:CD:AC:02:47:88:01:F4:62:02:D7:56:BE:0D:A6:A0:9D:A5:CC:40:03:E0:6A"}}},"request":{"raw":"GET /build/assets/manrope-400-latin-C46ZzDBF.woff2 HTTP/1.1\r\nHost: usdt.qr-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://usdt.qr-global.com/build/assets/landing-DhahnJru.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUwQnhHZ2R6eExNVVlaYUlyRXBEbXc9PSIsInZhbHVlIjoidFNURGMwNWZiaHNVdHZpTGpGSVYwVUwydW1nTE9UaWRjd2FxdW53UGcxNzlxbEhaRW1pR0FqK3J0dCtrSEhRekkxRENrM09JRXBkYzl1VXJ5U3JUR0xrdUtqYXVtcGpFcHVoTUwrMHNZcWx4UjZHbkl0VDJ4M0xrdEUzWXZ3bFciLCJtYWMiOiIzYTkwNTM0NWQ0ZWY4YmE1YjkwMmJiZTY1M2YzZjg1ZmU2OTBhMGEwMzg5NzBiYWY5YWJkN2U0MDM2ZGYyMmI2IiwidGFnIjoiIn0%3D; qr-global-session=eyJpdiI6ImJOblE3eTR2L2E3KzZhQm81V3FtRXc9PSIsInZhbHVlIjoibUpVUFZOQmxnU2hZczNsRXJjcTR4ZXlneXYrZWFSNkJmT1I2dzVXSWlqVlNNSVlIVWRRT01ZblVsOXZqL1VOd29LSFBLcmtNVTBLdWxRNHVTS0pxTndIS2V0VC9VV0YxcGk1L0oyVVNWZ3ZpUzNxTEhDUS83QTV6NzJTTmdkK2YiLCJtYWMiOiI0NzMwYzVhMWRjZDQ4YTQxYzM4YzczODYwNTQ0Njk3ZjY4NmQ2ODk0YTM4NTBlOWIxM2Q3Njg4YjhjN2RiZTAxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-type: font/woff2\r\ndate: Sun, 06 Sep 2026 22:50:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 06 Sep 2027 22:44:56 GMT\r\nlast-modified: Fri, 04 Sep 2026 13:05:20 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nage: 356\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7pauSpo1xvcVW9hdXtBw96%2BhKLJa3NnBRX7Fb%2B1jWZsFIvN67ahv7Yv%2BKFnoyoZaaQfSnc0JFgZHTnyf8fjaATTzKOWCt7x0S0XhFT%2FdFcBa%2FkyD%2F7IJu%2FE1EW4tDnE1Jd71Zc%3D\"}]}\r\ncf-cache-status: HIT\r\netag: W/\"6a9ac210-6000\"\r\ncf-ray: a3710903ee370731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24576,"size_decoded":25612,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-10-11T22:46:01.121279Z","times_seen":13022,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}