www.ethereumqrcode.com/aristotelica-pro/Aristotelica%20Pro%20Text%20Extralight.otf
104.21.11.85200 OK 136 kB URL GET www.ethereumqrcode.com/aristotelica-pro/Aristotelica%20Pro%20Text%20Extralight.otf
IP 104.21.11.85:443
Requested by https://www.ethereumqrcode.com/
Certificate IssuerGoogle Trust Services
Subjectethereumqrcode.com
Fingerprint06:59:43:47:D2:68:89:4A:AC:08:EB:F0:72:92:2B:99:1D:5E:1F:C8
ValidityWed, 26 Feb 2025 10:08:45 GMT - Tue, 27 May 2025 11:07:35 GMT
Size 136 kB (136184 bytes)
Hash 0d97f978ae2ee62819c098895843f834
36e284bf03ef2d1a0055e97699afaad0cfef65ea
5b1849a4e0483e361f9c7f7d025d06007e5b511d80db5c51f0b1df0584de5f64
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /aristotelica-pro/Aristotelica%20Pro%20Text%20Extralight.otf HTTP/1.1
Host: www.ethereumqrcode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ethereumqrcode.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 10 Mar 2025 08:31:10 GMT
content-type: font/ttf
last-modified: Fri, 06 Mar 2020 03:39:54 GMT
etag: W/"213f8-5a02768161680"
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fVaalQCocVcO32ITpaMezj0cM5pp4V%2FFx7KocHknA%2BBbow%2BpLWIIAfqtEvrkmYA3Yn39T%2Fsh50fbKW6wx7T7l5uD%2BuMSlED4qcKnT%2FP%2BKvRsQvQ5Vzx%2FKT9i9a63lLGTnVwJ7mFyDbuc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e174485f2b5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3453&min_rtt=1286&rtt_var=2454&sent=125&recv=20&lost=0&retrans=0&sent_bytes=129098&recv_bytes=2859&delivery_rate=21851203&cwnd=57600&unsent_bytes=0&cid=27b58aaa73767231&ts=821&x=1", cfExtPri, cfHdrFlush;dur=0
www.ethereumqrcode.com/roboto-condensed/RobotoCondensed-Light.ttf
104.21.11.85200 OK 141 kB URL GET www.ethereumqrcode.com/roboto-condensed/RobotoCondensed-Light.ttf
IP 104.21.11.85:443
Requested by https://www.ethereumqrcode.com/
Certificate IssuerGoogle Trust Services
Subjectethereumqrcode.com
Fingerprint06:59:43:47:D2:68:89:4A:AC:08:EB:F0:72:92:2B:99:1D:5E:1F:C8
ValidityWed, 26 Feb 2025 10:08:45 GMT - Tue, 27 May 2025 11:07:35 GMT
File type TrueType Font data, 17 tables, 1st "GPOS", 29 names, Macintosh, Font data copyright Google 2012Roboto Condensed LightRegularGoogle:Roboto Condensed Light:2013Ve
Size 141 kB (141384 bytes)
Hash 5b45554305562f2fc404839bb9fe418a
df222c27b5e41dc89ca76a4479c9dd3ae6c1acbc
bcafee6b8dbf976a036373a94c340c9aeb7c9683c34808dd9425331c2892be9c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /roboto-condensed/RobotoCondensed-Light.ttf HTTP/1.1
Host: www.ethereumqrcode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ethereumqrcode.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 10 Mar 2025 08:31:11 GMT
content-type: font/ttf
last-modified: Sat, 05 Feb 2022 02:00:36 GMT
etag: W/"22848-5d73bbbb81900"
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2Fg6Z9GBqPdLDEV2j%2B08Ysk7UjPcIJWTaiDZwFjQm4Wk7RaQewQVEJsTsInahCfCmk0GFn8T1SlvcTBvh%2F3paZ7gX6z9yuG%2FFZ%2BaSl6l8ghnaoSurTeZnF34I5gctSq3IrTnXnGlbjFF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e174487f4a5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3191&min_rtt=1286&rtt_var=1856&sent=294&recv=26&lost=0&retrans=0&sent_bytes=329390&recv_bytes=3380&delivery_rate=2885266&cwnd=115200&unsent_bytes=0&cid=27b58aaa73767231&ts=1648&x=1", cfExtPri, cfHdrFlush;dur=0
www.ethereumqrcode.com/roboto-condensed/RobotoCondensed-Regular.ttf
104.21.11.85200 OK 140 kB URL GET www.ethereumqrcode.com/roboto-condensed/RobotoCondensed-Regular.ttf
IP 104.21.11.85:443
Requested by https://www.ethereumqrcode.com/
Certificate IssuerGoogle Trust Services
Subjectethereumqrcode.com
Fingerprint06:59:43:47:D2:68:89:4A:AC:08:EB:F0:72:92:2B:99:1D:5E:1F:C8
ValidityWed, 26 Feb 2025 10:08:45 GMT - Tue, 27 May 2025 11:07:35 GMT
File type TrueType Font data, 17 tables, 1st "GPOS", 27 names, Macintosh, Font data copyright Google 2012Roboto CondensedRegularGoogle:Roboto Condensed Regular:2013Roboto
Size 140 kB (140396 bytes)
Hash 0e1821fdf320fddc0e1c2b272c422068
c722696501a8663d64208d754e4db8165d3936f6
4a7c36df4318fee50a8159c3a0ebde4572abab65447ae4a651c2fe87212302b5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /roboto-condensed/RobotoCondensed-Regular.ttf HTTP/1.1
Host: www.ethereumqrcode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ethereumqrcode.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 10 Mar 2025 08:31:10 GMT
content-type: font/ttf
last-modified: Sat, 05 Feb 2022 02:00:36 GMT
etag: W/"2246c-5d73bbbb81900"
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oL7pF0h8f1O1FQn82fTbTT79hHvU5YXtiO8OCp%2FWcy5XTyO4QCDUV4qraai%2FNjEHdcrv98IPc%2BdDvYxlA2jXsmruYq6Afy2SK52CXG3%2Fu2%2BrEpUG1PtaaxDrQ8btlep%2BA4%2FZ5%2FH%2Br7hc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e174486f3f5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3819&min_rtt=1286&rtt_var=2143&sent=200&recv=22&lost=0&retrans=0&sent_bytes=218455&recv_bytes=2951&delivery_rate=4529809&cwnd=115200&unsent_bytes=0&cid=27b58aaa73767231&ts=943&x=1", cfExtPri, cfHdrFlush;dur=0
www.ethereumqrcode.com/images/fav.png
104.21.11.85200 OK 36 kB URL GET www.ethereumqrcode.com/images/fav.png
IP 104.21.11.85:443
Requested by https://www.ethereumqrcode.com/
Certificate IssuerGoogle Trust Services
Subjectethereumqrcode.com
Fingerprint06:59:43:47:D2:68:89:4A:AC:08:EB:F0:72:92:2B:99:1D:5E:1F:C8
ValidityWed, 26 Feb 2025 10:08:45 GMT - Tue, 27 May 2025 11:07:35 GMT
File type PNG image data, 1955 x 1955, 8-bit colormap, non-interlaced
Hash fa6bcd9eaee073256731aefc3832216c
6081aedd6efd62105cf8789013081d6969992589
d9be9a8bcdfe97e53d697b362d022a8c9589e903bd672673d5c48d7cf92d384e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/fav.png HTTP/1.1
Host: www.ethereumqrcode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ethereumqrcode.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 10 Mar 2025 08:31:10 GMT
content-type: image/png
content-length: 36152
last-modified: Wed, 26 Feb 2025 10:55:09 GMT
etag: "8d38-62f0968291d40"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F4MSt8J1R3uYyliCou09WHJddrcjj%2FENSPchBXtKEIZyXgpcPdWXXmQ%2BIMwl%2BqyG0St0gjxrhvVtMa42qzHVWPuSUq10ztD3XC6%2BfZprrXOW26njRjGSQncIgMOv6AfWFrpUNXs1ELVn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e1744a69ac5697-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3418&min_rtt=1286&rtt_var=1870&sent=262&recv=25&lost=0&retrans=0&sent_bytes=291643&recv_bytes=3334&delivery_rate=44583968&cwnd=115200&unsent_bytes=0&cid=27b58aaa73767231&ts=1059&x=1", cfExtPri, cfHdrFlush;dur=0
104.21.11.85200 OK 6.2 kB IP 104.21.11.85:443
Certificate IssuerGoogle Trust Services
Subjectethereumqrcode.com
Fingerprint06:59:43:47:D2:68:89:4A:AC:08:EB:F0:72:92:2B:99:1D:5E:1F:C8
ValidityWed, 26 Feb 2025 10:08:45 GMT - Tue, 27 May 2025 11:07:35 GMT
File type HTML document, ASCII text, with very long lines (6728), with no line terminators
Hash 1960b077e2007ece5acb1b8d5f716a7a
8675666777099286e570769ff65ae9cbbd3fa622
b2f1780d803f4c32b0373257a3c9303dd197370e109376a66b47795d3accd1d9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: www.ethereumqrcode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 10 Mar 2025 08:31:09 GMT
content-type: text/html
last-modified: Fri, 28 Feb 2025 08:22:16 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=59Fg5BZtzgOqfkQH4F5WOKbUX8z8ssAlIaeXJVIvyufq86U7nD19LNjKb8bCSegTuRcU1IbGgS%2Ban%2BCQSCtu2BDUu06E1YoVpJUt6Ry1qmtNPqWduPPlnalOX8trulDJBA1ySYkbcEQn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e174431ac9568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6589&min_rtt=435&rtt_var=12227&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3295&recv_bytes=1265&delivery_rate=7515570&cwnd=254&unsent_bytes=0&cid=17ec231216fcfc77&ts=115&x=0"
X-Firefox-Spdy: h2
www.ethereumqrcode.com/chance.js
104.21.11.85200 OK 351 kB URL GET www.ethereumqrcode.com/chance.js
IP 104.21.11.85:443
Requested by https://www.ethereumqrcode.com/
Certificate IssuerGoogle Trust Services
Subjectethereumqrcode.com
Fingerprint06:59:43:47:D2:68:89:4A:AC:08:EB:F0:72:92:2B:99:1D:5E:1F:C8
ValidityWed, 26 Feb 2025 10:08:45 GMT - Tue, 27 May 2025 11:07:35 GMT
Size 351 kB (350575 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /chance.js HTTP/1.1
Host: www.ethereumqrcode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ethereumqrcode.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 10 Mar 2025 08:31:09 GMT
content-type: application/javascript
last-modified: Wed, 17 Apr 2019 09:48:14 GMT
etag: "5596f-586b6c8c3d380-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DiLdBr1a6akQp9D%2BLdh87Zz6FaQGBwdiaw0RXO4d5sEFAyhEJjUOTUJdS0AzMnAw9jWPM7u73pY2wJM8teUj3hdOf3lWZsgJw8GVStwzRfxpQqKhB5vG9xraDj4rwo3ftRYHTU5ez6v%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91e174461c3c5697-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6232&min_rtt=1710&rtt_var=3871&sent=14&recv=9&lost=0&retrans=0&sent_bytes=4197&recv_bytes=1478&delivery_rate=347215&cwnd=12000&unsent_bytes=0&cid=27b58aaa73767231&ts=565&x=1", cfExtPri, cfHdrFlush;dur=0
www.ethereumqrcode.com/images/fav.png
104.21.11.85200 OK 36 kB URL GET www.ethereumqrcode.com/images/fav.png
IP 104.21.11.85:443
Requested by https://www.ethereumqrcode.com/
Certificate IssuerGoogle Trust Services
Subjectethereumqrcode.com
Fingerprint06:59:43:47:D2:68:89:4A:AC:08:EB:F0:72:92:2B:99:1D:5E:1F:C8
ValidityWed, 26 Feb 2025 10:08:45 GMT - Tue, 27 May 2025 11:07:35 GMT
File type PNG image data, 1955 x 1955, 8-bit colormap, non-interlaced
Hash fa6bcd9eaee073256731aefc3832216c
6081aedd6efd62105cf8789013081d6969992589
d9be9a8bcdfe97e53d697b362d022a8c9589e903bd672673d5c48d7cf92d384e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/fav.png HTTP/1.1
Host: www.ethereumqrcode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ethereumqrcode.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 10 Mar 2025 08:31:10 GMT
content-type: image/png
content-length: 36152
last-modified: Wed, 26 Feb 2025 10:55:09 GMT
etag: "8d38-62f0968291d40"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I8Tfjy3t8sQE8RHwZ3LPLZcCxpf%2FF4R3JZIGXvmDpnW8N90HAoL3zICNH4jt0Pw3zuxSPW5iqWU%2Fg%2FgxPF0JxI9A1nFctqCCeHoRA1o1geTWXddNZUoPirmEIggHAComWunUSn5OmWKG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91e174461c515697-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4147&min_rtt=1399&rtt_var=3244&sent=53&recv=14&lost=0&retrans=0&sent_bytes=49058&recv_bytes=1694&delivery_rate=17143885&cwnd=28800&unsent_bytes=0&cid=27b58aaa73767231&ts=624&x=1", cfExtPri, cfHdrFlush;dur=0