{"report_id":"2eba6f9a-a69b-42b3-9ca8-3a25a63a79e6","version":6,"status":"done","tags":[],"date":"2026-05-17T04:45:11Z","url":{"schema":"https","addr":"qfs-ledger.site","fqdn":"qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.qfs-ledger.site/","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"title":"1 new message","dom":{"size":1479,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (443)","md5":"d991ca9980243ccf40be14fcfb4712c4","sha1":"32674826de341c6ef0c90b80c4dbfb40b7393b83","sha256":"4ac40f0b3a520323f93693044f49f834090014e25a386ddb0bf09f8f1f2c1cc0","sha512":"b56a3c3e2e566aabe79b067af0b015f4d0366d9182bbccf8344f5cdeb6c5343c367ba8069cc14c6fb76e8e18fb61c3e3a35e328696c73630321c1bc737defa02","ssdeep":"","tlshash":"6d310fa3e38f744e7201c12864f1f2f81f3ea158bb058f25bc21b7336b8dac654a2951","dom_hash":"domhash003fb3f0de8126b803198d4c3d676989","first_seen":"2026-05-17T04:45:35.400701Z","last_seen":"2026-05-17T04:45:35.400701Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qfs-ledger.site","fqdn":"qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T04:45:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-17","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/2d01abf7/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-05-11T02:03:38.991022Z","alert_count":0,"request_count":2,"received_data":1201,"sent_data":1185,"comment":"","tags":null,"fingerprints":null},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-05-11T11:22:54.65921Z","alert_count":0,"request_count":3,"received_data":6105,"sent_data":1577,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"216.58.201.214","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-05-11T01:47:10.260766Z","alert_count":0,"request_count":1,"received_data":125608,"sent_data":556,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-05-10T22:41:39.091246Z","alert_count":0,"request_count":1,"received_data":63344,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":2,"received_data":81924,"sent_data":1090,"comment":"","tags":null,"fingerprints":null},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-05-11T04:37:33.959609Z","alert_count":0,"request_count":26,"received_data":1385152,"sent_data":12047,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-05-10T22:52:08.295618Z","alert_count":0,"request_count":1,"received_data":1224,"sent_data":485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.youtube.com","ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-05-11T01:48:31.29887Z","alert_count":1,"request_count":9,"received_data":3644079,"sent_data":6220,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vsb42.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1001992,"first_seen":"2020-04-03T19:01:25Z","last_seen":"2026-05-15T08:17:34.646027Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1083,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-10T22:41:13.190184Z","alert_count":0,"request_count":2,"received_data":305238,"sent_data":874,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"qfs-ledger.site","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-05-14","domain_rank":0,"first_seen":"2026-05-17T04:45:24.166773Z","last_seen":"2026-05-17T04:45:24.166773Z","alert_count":2,"request_count":1,"received_data":28281,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.qfs-ledger.site","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":86,"request_count":43,"received_data":1500253,"sent_data":20632,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-08-13T13:51:50.085576Z","times_seen":210538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0krc3ydaibzf6.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f063eb187a4ff9fcf08bd2814bd6e1a","sha1":"04dee8fba0eae81241d8310f5e6aceae04199c5b","sha256":"a154b21f830f1267b11574708df031ae4416e384aa8616bbb328950a6e535a30","sha512":"2b45eb4893909d70ea777cf7f98197c2699bd04778e9a6894d4110b5de0e94176cd9845b55ddfe3a2b4157505d1178cf5b7b738f37c65cccd8393613eeb1035b","ssdeep":"384:aP6T2HDxJ1oYT1/S1ZyIHRkg3i2kjiR1Ykr6KhwqmvCTPtoiUxCKc7HyJ:sq2QYh/S1Eg3i2keJrA0P27c7SJ","tlshash":"30d2f92471a8feed551b00e5a43f800ca03e6db8d92fd4a8f3f9ad2916604c47553fa7","size":29916,"data":"","first_seen":"2026-05-17T04:45:35.452678Z","last_seen":"2026-05-17T04:45:35.452678Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a827d62b77ffb7ea9af66be38df38e29","sha1":"90c321b81f077b1b2158a7f987d793602c8323bc","sha256":"90943074205624269636e91b637d713b687e02567ee6f20c91a266f9a0ef2200","sha512":"56576def85ced50a403a3f1e7f32d4d26e503ca087227ed6b5888b1d107bb5ea40430f8bd0d9eb632592fc0773fb2c7e40bcb3b1dbcf973d1be8aa5d110a3893","ssdeep":"1536:bVoU5b2GjSnb18WOmlEpmpp6BilewF+IsL:7BnqEpq6gw","tlshash":"f663f6def1c163315af331f2405b410aa2bea925dc84286eb914e7f45a30c8b557bf7a","size":68493,"data":"","first_seen":"2026-05-17T04:45:35.486751Z","last_seen":"2026-05-17T04:45:35.486751Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7693093c26961b8c73a482fdf8efbfcb","sha1":"ac252cf90572a968837aae012fb01c2ac09b7bee","sha256":"f5030cc1533982d6ce468e69f0a73cdd60ad33f8ac77c76331bda3f999d98ae7","sha512":"2860f6cdc9f1f46654926de8d69b77d5cb697fd6af301981fcbe614818f0f41ead655cc729a21a39e3ab93481bfc44083f3f8992176240b5abcd23aaa230cf51","ssdeep":"","tlshash":"72d097402e549cae89ef238724eba9b4989bb806f7006c1c1808824482b8d3e8d6cc01","size":252,"data":"","first_seen":"2026-05-14T07:07:11.192535Z","last_seen":"2026-05-18T06:58:26.182896Z","times_seen":2535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2510c39011c5be704182423e3a695e91","sha1":"27d5482eebd075de44389774fce28c69f45c8a75","sha256":"aaa9402664f1a41f40ebbc52c9993eb66aeb366602958fdfaa283b71e64db123","sha512":"2241bc8fc70705b42efead371fd4982c5ba69917e5b4b895810002644f0386da9c3131793458c2bf47608480d64a07278133c99912e0ba2daf23098f3520eb97","ssdeep":"","tlshash":"c700000300000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-08-04T18:55:31.786423Z","times_seen":60811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d56634f4cbf7b08d3fe6d69dfa97944a","sha1":"c7ec2cb75e58731e5e8e90c4863f5a0828bb5ec4","sha256":"8eb3a766ba9c336a2f4e51abd66352403de31f2fd8489be6c958180142c7905e","sha512":"8956cc2c9ad230e797abdc26a75c41ba94d2544548a26960881ddd3ce7bc4c18c87068d58f8bdd9637fab964f5106f338d20971fe5b792a1ac1d248d8b9d9b1d","ssdeep":"","tlshash":"f5218907d2c24b7009f18ae24c0b9106411caf32bcd6ac0b6c07d3b85d595937816dfb","size":1120,"data":"","first_seen":"2026-05-14T07:07:11.238559Z","last_seen":"2026-05-18T06:58:26.198551Z","times_seen":2502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"620616f96ff4614b68c93c2adbc43e9e","sha1":"3cb52a2c372626a405f5a5af48e07d667e769d5e","sha256":"f9f9fe106da548bc68489c04acc855b50ac26ba18a4f3c10417608c881df1d0b","sha512":"4b7507f460e705623f3b052175e8cf93eaf9c387285a24eb05ba7f8e6280d9209f274d84bb0c9ed47babe02c0169477d9587828080b18f13757613ab26b396d2","ssdeep":"","tlshash":"bac09bd2f659541cc3927417113ec305df9b1d18940c529cc397f85a6a715054f38bf6","size":132,"data":"","first_seen":"2026-05-14T07:07:11.207337Z","last_seen":"2026-05-18T06:52:50.9115Z","times_seen":1121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8f77742dfe3fa268ac8d2782dd808e02","sha1":"37564c13475aa89f74bff6ddaff811f53a9b495c","sha256":"957632e1f26b3a3a8c16551ed0f6c1fa412746e9cd4794933a19d8d6e588eeb8","sha512":"fb3972609a94f9e489bed328c0ca7cc9afafb65905213193517968d58158a0b442c9d1d866ef1ed136fac025683376b99e2cb2256e7739ed8ab37d5452c7bd84","ssdeep":"","tlshash":"42c080d3f555543c82926457413f5209d7452c859408515e8353f4596271145063c5f6","size":162,"data":"","first_seen":"2026-05-14T07:07:11.175902Z","last_seen":"2026-05-18T06:58:26.15608Z","times_seen":1133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0vw33z41rh83v.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b0887ebc7a39d1ee1a7f064c7734ae4","sha1":"830f437ee8ce0653f1ce698aff3f7eaf2873c836","sha256":"23739e6dd34bd93df21d7e1b8d83f9a787eda3c7c4e12b2b23cab7b93ca3cb48","sha512":"7b193013cfdb1f27927fe3f95b4520bee65aff0708ccfb46d49050195842c303e025c8a3dfe4b5bee4202b6e59858182c15133906a2ef6463242f55d873ad048","ssdeep":"384:p60mw4o1GbnHd9NBvkAqnsg7W88qnjAi8Kn/4V+9A41fIiVIfZcZBMy:/mwMnHfNhkzns6jAiHn/hW4hifZcZBMy","tlshash":"3bd275e6af1cb39c69c596681f27b213931e353f35df90a48b4d86d49ac6808f53381b","size":28595,"data":"","first_seen":"2026-05-17T04:45:35.442903Z","last_seen":"2026-05-17T04:45:35.442903Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"94a990462684a2fbb5dfc7fab1c8975d","sha1":"320144db7b4b4f405b44085a2317540c1f5c4cc0","sha256":"6612396204354eb1edad994b210abd2880588ea3879854626dd7ee9c106bb455","sha512":"31df56dae6552b2c792825b9322bd8433e18fadc7f5ec53831fe76a73a9e5a54b1270267cd492d4b8acfd8a2d5e8277fe56c84fa8a6ba27c3312a84fcc9db5ba","ssdeep":"","tlshash":"c7100000000000000000c000c000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:07:29Z","last_seen":"2026-08-12T20:48:55.318195Z","times_seen":3121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d27079043fe8d4cfb8f59fd1ed254174","sha1":"7e3c58c409d4d5f9b159f7f43ff3a3773e16c54f","sha256":"b3d104a5fb7c5d773e59288b673519505f75be07ae59dfe698acdf9c9a4388ad","sha512":"cacca7745efff004baffaf63fde548f6357abd8ec8690a5767166e2065543668da4a81e5b742a8344bc6c3222f2a5db1d50e5e8d37bc97d60039761972d60bef","ssdeep":"","tlshash":"fc9002486096709112225d2012569025b19e294a44947858d14035502e1596c503650c","size":51,"data":"","first_seen":"2026-05-14T07:07:40.408438Z","last_seen":"2026-05-18T06:53:42.048742Z","times_seen":1130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"65b9f1181714f6c932be4cd42de0095f","sha1":"a0042a74f230f1338b4d5d8b2445c63f8fa3195f","sha256":"2a0eec766ec0835a58c6f07210bf4b95d665625db96ee18f6f1a8e7b3a05fe18","sha512":"bd6ccd2b2ed9801b8744d0e59d2ce203feff77084e53638b9c3c3fb89f1d5f6a217d956c38aecad26f4731b518d4223ddfd1742e5b9f9b59040d84eb1bdf6c63","ssdeep":"","tlshash":"c710003000000000000000000000000000000000000000000300000000300000000000","size":2,"data":"","first_seen":"2023-03-08T16:09:06Z","last_seen":"2026-07-23T19:41:46.121183Z","times_seen":2982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4aae7fd3c815b1cfa3660cb3227a214c","sha1":"4531c0c13ac8462f9dd8f0dff0e13b1c3e150bcd","sha256":"cca00c516ba05df351915a75df4db57659d685c5af3622cedbba3c6b626af2a9","sha512":"c2f67d5e011e7ad703ab55ea89f91fff91b4245f5294cb73ded819757eb158102fd038f24b175c1f6eae717100cd63d9e9529cc90d124cd90a26ab4a1f650d4e","ssdeep":"","tlshash":"4d50003c30003000c0c0003000000000303c000cc0c000c0003c03c0c00f0c00000000","size":11,"data":"","first_seen":"2026-02-18T03:26:52.257023Z","last_seen":"2026-08-13T13:51:50.18544Z","times_seen":85845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a931635074a5017da74948b67e16c76f","sha1":"a6799582ad16a7c1ab8221c166268130df6691d2","sha256":"1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c","sha512":"7c96bb515bdba9ad60854b433d24e77982a321dd7ca71599fd8f79acee580802f56829a5dbb7f64932a51ad50d18a9438251a6ad8127ad2b2e332811033d2c7b","ssdeep":"","tlshash":"a5d023cc3941f262d06274b9041704dfd173384a1e1cdf4184154875667c5d9407f4c4","size":206,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-08-13T13:51:50.22681Z","times_seen":210115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-13T13:48:06.649417Z","times_seen":42439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0cdrhlfp_fhgm.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c705e5adaa80aa1b977f46ee334409e8","sha1":"10facbc8522eef5253c8adb53d12cffa6ae0eea3","sha256":"5422187af0abcc3fd31b4c68b93002a09d9e309163ae399711032df39a1f6f81","sha512":"8018623db02481b2522fd8c0f99e68e520853167ecbbb62342cec3b4f02d1d4d0aef56f16f57cbad4dd8705630d3339945fde14400797769027db9cadf36179c","ssdeep":"","tlshash":"901100112006f8e86d3a00cdd076454db6286e34724f16acf1bdacb1a633a04f894a95","size":877,"data":"","first_seen":"2026-05-17T04:45:35.438263Z","last_seen":"2026-05-17T04:45:35.438263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-08-13T13:51:50.054568Z","times_seen":298790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3a3ea00cfc35332cedf6e5e9a32e94da","sha1":"e0184adedf913b076626646d3f52c3b49c39ad6d","sha256":"a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58","sha512":"99c426cc0bf3c465f9c4a49e5a6c3d09a43c4f95631776b354be0727f3f65567ae9357c5d55015e2cfbb27ead98e1bb54f2a0f26042ad267a279f0e3a8c5b2e9","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000003000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-12T09:08:08.495732Z","times_seen":50587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"02129bb861061d1a052c592e2dc6b383","sha1":"c032adc1ff629c9b66f22749ad667e6beadf144b","sha256":"4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015","sha512":"3173f0564ab9462b0978a765c1283f96f05ac9e9f8361ee1006dc905c153d85bf0e4c45622e5e990abcf48fb5192ad34722e8d6a723278b39fef9e4f9fc62378","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000030000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-13T13:32:42.321819Z","times_seen":50568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9b05de73d43f8c4ec1110c6bcc5312bc","sha1":"08ec69f5be3c483fd11a6e14ddd09865343cd172","sha256":"1f34503f65b4a355a94ee54da8e34541007cc66ec548c61b8dafbea21a1a0787","sha512":"2e6018b94972ce4c223430e2ac6db350974606abf22313349248f334cea65ea6c7d4c0b1180184e6fea44579388457c650d574f4ce9b1d6c91aefb79ef5d30b6","ssdeep":"","tlshash":"c7100000000000000000c00000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-13T19:36:19Z","last_seen":"2026-08-06T08:30:24.952338Z","times_seen":3583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0890ab8afeeac8350ca63f7137c015aa","sha1":"965494864268de0e8e71806bac8bc2258c11f890","sha256":"d7fd8138cddcc51cf00919e6a27cd6367790374d92f03fef16c9e4ac8e9dc85f","sha512":"65f8995549baa423787a7059d233920b02eddf2d05a9652d73a019570a1b8356a5852a3b165f976aac9a0b5063515181e8c9ac13ec7b362f565e6ac7f5a01b98","ssdeep":"","tlshash":"2ee07d74ff1917340432235310daa580122eb6cebc8024c8034d80c4213cd7af3b8a05","size":298,"data":"","first_seen":"2026-05-14T07:07:11.195314Z","last_seen":"2026-05-18T06:53:42.048231Z","times_seen":1158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"585323c7107bc10410961b74e1c9e4e6","sha1":"3cdb46391a560121b5e594ec3fcd8520e1c14a9e","sha256":"61fd6d8e0505ae224718e61791fb4358222c0b577e69391a0f780da30b08b9cb","sha512":"e267e688fc348acd1200f0c467613110078776e47b9aefe93ee57a22d62ca0cd3eca3caa5e5e97ea65a512f7e45281d82a07ece1225cd2b32dc6bdf52e74ff58","ssdeep":"3072:2u82gJcBg7MO79bp9t0fFA+1/hnWwet/NoZmg55+5Ar6VKkOPGWS:jzicBg7MOpWK+1ZWweBNo4++5Ar6k+WS","tlshash":"9d744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","size":348599,"data":"","first_seen":"2026-04-21T04:02:24.325062Z","last_seen":"2026-05-24T23:07:10.343258Z","times_seen":6534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0kl4twg7x92w3.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bdd0528388e6e99abab84cff602803f","sha1":"6f10129c11f9531cd622a46b6b59227791f4a2cf","sha256":"b089d3266769d26293b967f3b69b10cd1ba4e8a6ecd86007e514e1e3199c2dcb","sha512":"8cb612bf313b81402c19dc835f6847fd46dc22b9e15fd0558ccd43897f2bb888cb2ab26a56338900e7888e2a8444457b16b441b543f4131701937fbe70c65e77","ssdeep":"96:GeFctuv2CZKGupYlfuJgoGqVW/QFv2Hj3xAKquhSQD9H9JMdqhJqdy63v2P:ACZnuaZuGoG86QFeDBv7hfDb6Cq+P","tlshash":"cdc1a7f530e1b4d1d29b4184843b441ef23a1d3960ae78a4b7e98cf555b085ea1b3fa6","size":5828,"data":"","first_seen":"2026-05-17T04:45:35.44175Z","last_seen":"2026-05-17T04:45:35.44175Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-13T13:51:50.055724Z","times_seen":262514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.hlOHPMP-Qso.2021.O/am=AAAAIA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEcxwUiwDveKGZ0NRxn02w8vBWO4A/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c47b4b262228b7b52520007dc68eb9c4","sha1":"8a079341b4432dbe45f76028650442fd078360aa","sha256":"7c9c21829e4c7afc3bb6141ee4c05b49efc2c37d1032321e14a8a6b23ba1c1e2","sha512":"60fcb703e416e539aff4e9aed3441f82022eeff3f716b7888df8e5bfb93e7cd99221f6d9e1843e218f5c70d3f4ea67a3710fc05188f20682c608e44f86d1da6e","ssdeep":"12288:uFyTEPZ/EjMbvfQTAx5lDxBJTkIE0Rz/5U:uFyIxCMbvfQTAxc08","tlshash":"37e46ce0b392b5b686866966e43f4043b17e5d43f2044838e1fa9ddc15fce48a1b7f29","size":669304,"data":"","first_seen":"2026-05-15T15:18:52.782421Z","last_seen":"2026-05-18T17:21:28.310068Z","times_seen":2076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fa3e7a3f0617fa56618eea73edb934c6","sha1":"72fd1687892e773f24027a81d656ffd86e2fe56d","sha256":"5358545b1fabc82187b26d68472179bbb2450d46bf22306c95df797ff0cc2c42","sha512":"b854936b13f09bd3c23c9e0775edca327e47f3d3813461dc630cbe4e3257e7da894f25806dc985cc6871516d723773b6ecdb7d970aa89f8b5291c5c05cb1f144","ssdeep":"","tlshash":"bcf09e9ff700045043507169990f175f70faa420f9481ed9a175d7714320551285bae8","size":478,"data":"","first_seen":"2026-05-14T07:07:40.510281Z","last_seen":"2026-05-18T06:53:42.058713Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-13T13:51:50.120035Z","times_seen":249143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d715c2b9f1b12ac7a256f0ae963d2871","sha1":"9afafe9375b873933896d28dd05a0dff8c566b57","sha256":"0ce5a07eb14da9f446abfc7edc77b4f8f520aa8c8625fbdf553d2353c23c12af","sha512":"1b8e4eae0565793a439fa7072782259669b6df7d59b2e0f8f1e0b202b7cb717046abcb82c4c99f37ee19e883d545ac9f0973507a2e5b736bcd095af7de38adb5","ssdeep":"1536:BigMXSFu196wofTn32jGDIgaOS9WbaGlDluK1yFYydZPkx3u4V5pfYMrlSf:4DiuTgQG/gUx3u4V5pPrlSf","tlshash":"03a30a6ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106298,"data":"","first_seen":"2026-05-14T23:47:36.068795Z","last_seen":"2026-05-20T04:16:57.49795Z","times_seen":662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d43ef05e57cdeab7895fe8a3b6ee014","sha1":"19671e4e00cc9b5f8f6a6167c1ea8800ee539aeb","sha256":"b7893a0611b91f5fe47ce3889faf375eddbda47517f4e44c8c338eef6d2c41e5","sha512":"535346ebfe272e052e64dfa1845da29662c36e84fa5a946e52dcbb2cf4d894851a102180fb1c04603f86ec920d89fdfb62c1ddc14ea81ba4cec7d4723ad5598e","ssdeep":"","tlshash":"8db092a4a20c0b5812813919ad2b06e950e42704f82994884ac0ae2548e0a41568ead8","size":116,"data":"","first_seen":"2024-07-19T01:23:55Z","last_seen":"2026-08-13T13:51:50.12434Z","times_seen":192591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-06-07T08:19:02.131151Z","times_seen":267242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3da254c47ef0e3316baeb7de6ab92d00","sha1":"bce91fab46fcd15c7ce049a28c6f62cbb8ea4cdd","sha256":"0c89201b75d46e024edc5ac80cb9540b59daa47bc068e2f610e82ec8e580d5bf","sha512":"37b5b82bdb2e5df7054fae987fb648c0b15cb7d1a9a0ea47c9134e0446b7060d9505bb34b0099dfe5fa6d72fad415510ee5ab13e89502cef98125416641d4959","ssdeep":"","tlshash":"3ce061f621004166e39b03e5e113120437915a0767454d5de913ff2af719656aae31e7","size":391,"data":"","first_seen":"2026-05-14T07:07:11.100311Z","last_seen":"2026-05-18T06:58:26.179465Z","times_seen":2525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e9de20bb5f6273609e9d404e68774694","sha1":"6bddae9df8aac47a030f159e7d2543087bac4894","sha256":"4f6713310c2ed31651ad434d3f3a6360575e5bda75db01abcf197aeec65c3f12","sha512":"c3a0af99200c2f794ae26dd83db5cb015826ded0a32d6c9ef65488e7319d10150af8e8ccd14cb0b76e3dcdd754edca347e2ca62c5537de8cc1b4534be91f72e2","ssdeep":"","tlshash":"e5d095893406902cc412daf7403a80016c1e6d25c50ec8bcc423f2897e371543dfff90","size":248,"data":"","first_seen":"2026-05-14T07:07:11.202515Z","last_seen":"2026-05-18T06:58:26.185483Z","times_seen":2494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4f2763cdd6d225a7738fbbdc060963c2","sha1":"8152b9754baa65345d7208c30341696d97b637fb","sha256":"12197fdd8f53efe362f09cbcc71532733177fe5ecb977058120ba9715f3bac74","sha512":"d3a4d5ad5e6a5224210d2ad33a323e2a8044bd463f81834c43b910ffbad07e2324a6a69b0c980ea5559c8ef6a1d631721b05b24f68e8067ea12baa44fb914622","ssdeep":"","tlshash":"bbd0a7e35e621c7789533fd32aefd67c4abb450aba01675a9098a1c4d23084dc35d941","size":245,"data":"","first_seen":"2026-05-14T07:07:11.197138Z","last_seen":"2026-05-18T06:58:26.166895Z","times_seen":2533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"68da5750c408c276e3bcd1df60096ddc","sha1":"7f937a724b241566977f3e66341079029f8269ad","sha256":"c6e211936a6d191be7700a5c4f56dfe301bd9eea317ff6188a7fa9007fbf7651","sha512":"f5f594d1880d3a3e0c81bbc4f5826c09e61b013e81b0108b3a1a6e45319e06c3b2ce325cd5c1a4288295007e233a0cf3ad200db09f26fbe4a48812df7fd52ede","ssdeep":"","tlshash":"c71000000c000000000000000000000000c00000000000030000000000000000000030","size":2,"data":"","first_seen":"2023-03-12T15:14:06Z","last_seen":"2026-06-18T01:31:57.103109Z","times_seen":2785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5cfdb867e96374c7883b31d6928cc4cb","sha1":"0691a664b24b6f15b20cd5aee64b72271db08be1","sha256":"226a193ae269296d44f3efd3d66fead575a9ed15e14320b088c7c3d3cb2b9d8d","sha512":"a0d33b131096a2eace14a936e533a78093e0db96c0fef7f1f950de353a0a19736be2310e43ed9f37b35ee376e0372b061a78cc9a4ab6ce024a531290727eb074","ssdeep":"","tlshash":"c71000000000000300000000000000000000000000000000c000000003000000000000","size":2,"data":"","first_seen":"2023-03-08T14:36:31Z","last_seen":"2026-08-07T06:29:42.400495Z","times_seen":4058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"223815053b891810739cd2ec340486b2","sha1":"c954707debe0cf0cf0b81a3814400040260e6c6e","sha256":"80948584fa16a176e3ddc98d7214dd4af03658af37bc889953374836bb7711b8","sha512":"fc581eede84ed62d7fe3c4b51f68fb518d84c3c4943645d158914f8548785ca2647c6f3299120f61f2885f6a16985a403772c33764d54ad8665d2678cd0710a9","ssdeep":"","tlshash":"a8a0220caca23b0c20223c33380f0008883a3203be0c888802b0c3080b3c83ef033cae","size":75,"data":"","first_seen":"2026-05-14T07:07:11.133035Z","last_seen":"2026-05-18T06:58:26.160905Z","times_seen":2490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bdcca573337872ba2bce977ef33c7982","sha1":"da4efbcfa4a9334c8674302a7f938b979650a4a5","sha256":"8041adafd0584187e5d26e462329184776c2d9aca225af4a752fc1afdf438e3c","sha512":"63ad22a86d199cd11e7ef4311f6d1b3c62cf430f8376b1c00b43296b8dcd9ba63cb7e73df83bc8bae7aa676938535e208f46643c7c5a1d403813deb0e1d10f55","ssdeep":"768:tnAhGD49EWHwCPDgmjDRJumJAftSOS58mqYd8yo4Cu8sgJwhPEOnHuLFIIWpbBNh:hVQRLOS4yxCts+wht62I6viFjJO","tlshash":"f67377244868a872c893a407deb5ff3e9cf816790bc9966dbdb7875c01ec6610e9f413","size":78650,"data":"","first_seen":"2026-05-17T04:45:35.511865Z","last_seen":"2026-05-17T04:45:35.511865Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"29087810a926dce1a06e82beaf27007d","sha1":"68855146973df9cc3bf740f357cb2861dad5821b","sha256":"7c05fd67194219c506e3e6b50c53a2024fd122781e0ac8754eb8312ba93dcbeb","sha512":"5af95e72b76726c11af626ef0fa15797fa8b8686c3926518a5397a647b3244ef863fb7aea3bae20c4ae4d81db0315ee1d4aa0d5a2d4ca4563da562073ed2da33","ssdeep":"","tlshash":"a7b0120c4e961c4988a63533910f02c8d3982444380cb04c41de8380a3f596961138f7","size":97,"data":"","first_seen":"2026-05-14T07:07:11.151879Z","last_seen":"2026-05-18T06:52:50.94774Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"83f214918e0e2a000cc5698ffa6e4c80","sha1":"4dc828387e9669195a7b55fe8682574a825dcb8a","sha256":"d337b75fe4cfc8efb7ccc4d0c370100d0acd86d51c72ac185ba8f58dc1287995","sha512":"a54635d6319add97f6490142c75475f222d2d4637e9e225894b028dc3fdaa741e38643cfa8df845181a4757561b8bcd97856ae511e3892f80c7e23373e9c6335","ssdeep":"","tlshash":"e1a01210cf005a3000529515344b4110423b438ea1605804001694a0483e49f14131e2","size":81,"data":"","first_seen":"2026-05-14T07:07:40.558617Z","last_seen":"2026-05-18T06:52:50.975511Z","times_seen":1160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d87551d81e7185c20c2c5071eee9d207","sha1":"108a1401185f3849a63098616203401de788d09a","sha256":"f930a06ba663b30b474e7fcd2319a0397b0a6577e02afafc504b5d372122d50e","sha512":"3416bc6d7f421597d6a03e773d6cb0b550b0456139dedb8b12c0dbf462bf71891b78bae5e2ae757e48b93da13454faefdee5430d96082e36a35a902b8ee21d32","ssdeep":"384:UJw/U5YK8Hx9KJ3ThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJ3ThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"8a52c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","size":14213,"data":"","first_seen":"2026-05-14T23:47:36.097744Z","last_seen":"2026-05-20T04:16:57.461724Z","times_seen":652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53530,"data":"","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0j2i1qlpiifre.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0ebbfc88cce10e2a65e936fbb7c840c","sha1":"166a767f132e91e54c1c9e38d12827b3305f3a63","sha256":"4c9fb4b14f7608a74f1880e2eec3157ff6b843f5e105c1e60ad92bc21292ad16","sha512":"01cf56ef02daee55a7901cf820dc4c1d2fc1e614d38c4f259f7f16c9bc9f90bc6d7d87e6594d8f5c1f730c678d50b9b5c9e9ca0318397a5d69109539ba7e6f59","ssdeep":"384:JMxyUJQrtg6KaFpY5UG2er6eRtp1cHBYjYvn4MjW1xL2L+kYLoOWfwE6kUkFQ2sc:JMoScHBq04MjME+PorH6kU12s37zU","tlshash":"a9e2d6a472d5f89117a354a4803f100bf23d1c7a256cb4b4a3e1ccea79a059de533fda","size":32718,"data":"","first_seen":"2026-05-17T04:45:35.480055Z","last_seen":"2026-05-17T04:45:35.480055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-08-13T13:09:06.181181Z","times_seen":67134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.hlOHPMP-Qso.2021.O/am=AAAAIA/d=1/br=1/rs=AGKMywEcxwUiwDveKGZ0NRxn02w8vBWO4A/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee51280f97cc71740ddc21599d038622","sha1":"85c806058f6970527a87705f1d9d6c3cb6c9a58d","sha256":"420453769a180d883c4d09100a95b934e99722b2aa41a716d526954887d8881d","sha512":"8bdfedd53c112a7329b42158c657dcac07a2a9aeda9078196bbd1923ac5f4c57ef31bb20b8f9a4e9990c5fd3d8e4f81b79379056133ee4dbd1dc47ef03706777","ssdeep":"6144:23D5Sxej2fLfw8p1IzP2m1RwdYE4ls9lkwIpxWF8XK7Wr/n:C2bw8p1uPZZxXK7Wr/n","tlshash":"90944dd97762706392a2f1a5902f0103b17a6896f40c9cbcb7d8ddd16eb494942fbf38","size":425479,"data":"","first_seen":"2026-05-15T15:18:52.779464Z","last_seen":"2026-05-18T17:21:28.320638Z","times_seen":2104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-13T13:48:06.640639Z","times_seen":93410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f6aa59c7b509c2e7867d17dbfb29bc91","sha1":"520aa4e3c22bee4193dcb0471ac0e50c06210a2c","sha256":"3f33cc73cd6bf3d97263af4c36630e6f5eff14b592b98f6a2120e5a13c396327","sha512":"babffc75f4f765167078267f1c31f8ee22dc37ad9b88b4d860e54b35a46110d17f934533353c73e6cd45c8df2c5337f00ffcb66a1f3b83707d60ffcd312c4af8","ssdeep":"","tlshash":"bf700008ac8e2000002b3022020b00080032000222a20000082c82800c3000aa002828","size":22,"data":"","first_seen":"2026-05-14T07:07:11.125453Z","last_seen":"2026-05-18T06:58:26.19188Z","times_seen":2494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c1624819db27ccc65511629bb207064e","sha1":"2d3aab4aec648a7435443f85e06cdebee281825e","sha256":"edd6420fa8c8e48826664d2f7f4b680dd6d863dbb94f2f4b0fd21b8c64bbae5d","sha512":"3f8011d4e161bff9314f4fc25bdfe78e085a419cc39d24602f970bfeab37b0f05d0bfff783983ce43779359f4abe1b2d0db512739826cda42cc6ed40a61133e3","ssdeep":"","tlshash":"2aa002fd5c7a986451673927160fc184d59d205f7c09840843f9c2c8e73e82f52636fb","size":68,"data":"","first_seen":"2026-05-14T07:07:11.219985Z","last_seen":"2026-05-18T06:58:26.167378Z","times_seen":2504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","size":10918,"data":"","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-13T13:48:06.718059Z","times_seen":14315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4f2763cdd6d225a7738fbbdc060963c2","sha1":"8152b9754baa65345d7208c30341696d97b637fb","sha256":"12197fdd8f53efe362f09cbcc71532733177fe5ecb977058120ba9715f3bac74","sha512":"d3a4d5ad5e6a5224210d2ad33a323e2a8044bd463f81834c43b910ffbad07e2324a6a69b0c980ea5559c8ef6a1d631721b05b24f68e8067ea12baa44fb914622","ssdeep":"","tlshash":"bbd0a7e35e621c7789533fd32aefd67c4abb450aba01675a9098a1c4d23084dc35d941","size":245,"data":"","first_seen":"2026-05-14T07:07:11.197138Z","last_seen":"2026-05-18T06:58:26.166895Z","times_seen":2533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c411cfa3c46c75505f9e91a51d93437c","sha1":"da3e68008ae6ac9ff340e1a69223995c9a18b948","sha256":"4fc106719ea2f43aec0da1b403bab5fbe6019bec0af3bc707ce5cdd1e10d439c","sha512":"73d50c62418bb6a66737824d8da4a269c6658b0dc9fb8cf63d0872aed208e1eefe06eac39d897927880d3309f8fff7d489c6618fe718251f339dae7b08561996","ssdeep":"","tlshash":"ded097d8448c73c4a2276a826c63403d100d1c0ffc003e08e26e0ca1a32a433228cdb2","size":254,"data":"","first_seen":"2026-05-14T07:07:11.216639Z","last_seen":"2026-05-18T06:53:42.105608Z","times_seen":1178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-13T13:51:50.165657Z","times_seen":187717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dd7536794b63bf90eccfd37f9b147d7f","sha1":"ca73ab65568cd125c2d27a22bbd9e863c10b675d","sha256":"a83dd0ccbffe39d071cc317ddf6e97f5c6b1c87af91919271f9fa140b0508c6c","sha512":"32b1786eca2b9f815b4c52b999e2b34dae877a86c00e8f745e7ac23388665c0703a947085bd7f975c5210ffab9b5a8f3931ab40b26cd7bccc4d7690cd19a4277","ssdeep":"","tlshash":"c700000000c00000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-08-12T12:38:44.952419Z","times_seen":56421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/69f7710848ca411c3004e383/1jnn9332f","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecd41dab2e10774ae276c9749802905e","sha1":"d2da5fdc8b6a55bd680abbb1c77cf9e3c2066156","sha256":"8b07001216e989148ec7ae78708cb4e734cd291840516768081cdce4c7d4eaa2","sha512":"710e1b5c3cf5d2f7a80080ce335455a74330b97b03ec7a53b13a1db908c0d1265c805dafa7e25f6fb2ce970032f6c1f6f772b2b94a01b04cd44c33b2f4033616","ssdeep":"","tlshash":"b94110db9b4f1853d22420d80cbefd4eb4b7b1e2489d5c834708440077667ed268dd39","size":2123,"data":"","first_seen":"2026-05-17T04:45:35.432929Z","last_seen":"2026-05-17T04:45:35.432929Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-13T13:51:50.252418Z","times_seen":342245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5c244fde4e6f1ade71beed5c11edb59","sha1":"6bc634a7f8505a2ce340807aecfa1e50c2a578b3","sha256":"d561924e4295103128924509bbe71b3eed6625592d75ba3cc35c365189d6081d","sha512":"6ed66e7a246ab961cedd150553b6a9aa692988813dd4ee30c8b7d78d80bb8765a828112c6860d08eb382cae34e22bdd76ecda5ee1c9c7ee25a49b1d2639474f9","ssdeep":"","tlshash":"966000300c000330c0000c00000c0000003300000000003003000c0000300c0000000f","size":13,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-08-13T13:51:50.20392Z","times_seen":176704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-13T13:48:06.709011Z","times_seen":50037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92caae85b6068c0470f35b7cd9b95bc7","sha1":"4d4937db3d441e377496e244fac167d0be449698","sha256":"f56f6661967357c99e02d53150d8abedb0717bfc2d96847251579e8ec8bc7fd4","sha512":"1fb89a2ad71ae18252bec404205e405845c994eaae3b9bde58cb28e7e17b6325d71928df46be34839939e920ea70d282e2b00127c2982d8ecbb85e11d7f7f66a","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCWGN//h6LiJq:SzP2DASLi8","tlshash":"cb822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-05-14T23:47:36.130549Z","last_seen":"2026-05-20T04:16:57.449102Z","times_seen":673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0xomzdvh6d~ho.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b21d2d0997f9026b4094fac564b2e8c","sha1":"2d0bf5a119f15676c3269da69211588c831fe23e","sha256":"09e5342986c8e18727549c0ee0ec52e7cb056a28a1f9e8f41d2f0a135ad7997f","sha512":"48e5411c9a9acd1e245da090266310eace0e5c4ac9f5bd52e770905eecb6d167d4663a0bd9a4907844a9ebe1395decfa9472fbdd135c1063a1340a260b25ed2f","ssdeep":"96:sZKGupYlfuWeFctuv2HgoGqVW/QFv2Hj3xAKquhSQD9H9JMdqhJqdy63v2P:sZnuaZuwAoG86QFeDBv7hfDb6Cq+P","tlshash":"4ec1a7f530e1b4d1d29b4284843b441ef23a1d3960ae78a4b7e98cf555b085ea1b3fa6","size":5828,"data":"","first_seen":"2026-05-17T04:45:35.467282Z","last_seen":"2026-05-17T04:45:35.467282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9ee9d85a86f0118c40ba2385bb314fd7","sha1":"b4d362cfcf755b811b305ce0f4afaab50fc4245b","sha256":"7021db8687be1dfdbf5705ff61ae83a79d2c04b3d668a819ae13993be51be1e2","sha512":"46017bf458c0ed2656c4822c9075e2562724d7027b61933e4c94c8afa9e3bf858819db0b8b0a9250bb53a8d09c6a17fc7a53c5998a4ee03223824cf6d79f22d5","ssdeep":"","tlshash":"c710000000000000000000000000c000000000000000000000c0000000000000000000","size":2,"data":"","first_seen":"2023-04-03T23:55:35Z","last_seen":"2026-06-24T19:52:17.490274Z","times_seen":3947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cc43ad532377e05783b919d86a896d9","sha1":"69e00bdb15ac21186c8d27764e6311759ba5b99b","sha256":"007cd5f5a967155b6963ac5de46c369ee23237414c3f576b4197fe46229808ce","sha512":"404182f4b51a22a4a35e58480d372a65db2465803ca23913e379199413edf84fa74dcf0f92026d8561dcc35bdff981cb98a38c8f50ae05f7224e5c7b42b30c92","ssdeep":"","tlshash":"2cd022c93c4978d20279238888ba01f7e2fbb8dc78068b40c32442002a3ca3a5464402","size":199,"data":"","first_seen":"2024-10-31T11:08:50.83142Z","last_seen":"2026-08-13T13:51:50.049316Z","times_seen":158522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-08-13T13:51:50.1744Z","times_seen":174438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97491668f9ba2fbcc26d27bac8df365f","sha1":"2b7212f20e04f3a9f307be46d4461c7a5d4e5b86","sha256":"5ae43447a6f4723e9e0331410ee804dc48fbbef530dbb01233e53deff8d52e91","sha512":"9ba8109b48939e2fd2846a50ef1816cf5d2f46c3b7154259f5f6efbb49b41c19fa2a3b7d41b70497282920f2b4b4c8a8a3b1437eaa0ec5b3f9187004042af260","ssdeep":"192:0H9MaRRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:KRb9HkS316xAFKpLZEh","tlshash":"3632a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","size":11888,"data":"","first_seen":"2026-05-14T23:47:36.053411Z","last_seen":"2026-05-20T03:03:29.081895Z","times_seen":487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/turbopack-17dc4m~n-vlcb.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed462a84942b3f8b2c79a882375a205","sha1":"2875d2b9abd8d5cda1dbc75630952250ed2d0931","sha256":"4b0b7d48660acf44f43c700bda1c92488a6b1cb226fa19b1177659758f2fac0b","sha512":"bfde2d79892567664a07e12976c9da152c232925ae9b209b173e4dff2c8246f665ca7fd0d8270c44ffabf354510af883cf3cad73cb2ecdc71af69f99e86a7b58","ssdeep":"192:fl4gMFA68PEsg6d2hEryxlO6yD+03sBT4fCT2cXX6ufH+yLx4:fl4gMFYQJlIy+sqCTPOyLx4","tlshash":"9d32c7ea33a6f07343af90ebd07f4004f1795469145e581c939ce8fa28354aa89e7f76","size":10947,"data":"","first_seen":"2026-05-17T04:45:35.419569Z","last_seen":"2026-05-17T04:45:35.419569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-08-13T13:51:50.061313Z","times_seen":114122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ddcaa5184f117292a8c0f6786560bd36","sha1":"9b2cbabfe9cb8e9a2fef3d082e353ecd67aed45e","sha256":"1bea65338ac2de494f4f9fc2aacc8973594800cdd0bd00a115a3f263e88007c4","sha512":"0397f5ff782a7c370530da60cc21675212ff9ff1c30393b7c397bec0ea0c9c6cb4f226bf2467fbbf0c76a93d78c53715ab9cab3e4e69de1b338852af3722a11c","ssdeep":"","tlshash":"959022e02c3830a002003030c00f003c23832083c08002008080c83bbc3000288c0000","size":56,"data":"","first_seen":"2026-05-17T04:45:35.520529Z","last_seen":"2026-05-17T04:45:35.520529Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b73aa3da7a1494aa22130a7a4d4c04e1","sha1":"21f9be742e57c78928c598b2ab2b9d9d4ed870fc","sha256":"73c88d193b4242c6b7aeedebf628de9c484c2b966ae7df6aa22aa245cdb34a98","sha512":"aec15b67f363a0e608670b69d86eec1a9c967ef62a8b2ca7a7896a5e537bc4081dc0f51640de7f38fdabfb3d5f9e06a1d7cef3449ffe0c9d8fab5c6f8201b2d2","ssdeep":"","tlshash":"07a0244074171c30d4f73533000f00c04015310c3f155c054154410d433533fd0031f3","size":80,"data":"","first_seen":"2026-05-14T07:07:11.155217Z","last_seen":"2026-05-18T06:58:26.170502Z","times_seen":2600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eecbeb72173ff4f5d584311dccad516d","sha1":"5e82e4e074f0bc02ebf86bfc2748ab43e649275f","sha256":"86c66f9c5a249dee459272195412e9beb842572f05d9d49a9091d2a4ff5065c9","sha512":"0e8360b401448746371b7d21a929b2c1837bd9d00b4aaeb0bfa467a1eeae24721705c86989dab9fc89eeda47ca793cfa8e34f0f4d0d1732d11a2642a22b1ae48","ssdeep":"","tlshash":"f6e0c0aa12634c61135054d6d7e3106cc9636670664d9c2c237840810679ef9be8ed96","size":345,"data":"","first_seen":"2026-05-14T07:07:11.161313Z","last_seen":"2026-05-18T06:58:26.155058Z","times_seen":2491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66a4d9708fdb6dd5597f3bbc7d624","sha1":"e10a66fa8a836f6f948941262b70e1fc928a446e","sha256":"3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89","sha512":"06c25bc4dba52367cbe19252c1a013e1714a198141d139939944422266aaaed60ea3953c5d0f890a7f9ce7887c5f2a4cbb47173d06f829d50ac33f6f353c015d","ssdeep":"","tlshash":"ebd023cb729c1114574337141eef0448bc64b4d70dbc941d8649581058011ede03aecf","size":195,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-08-13T13:51:50.127752Z","times_seen":210150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"94a990462684a2fbb5dfc7fab1c8975d","sha1":"320144db7b4b4f405b44085a2317540c1f5c4cc0","sha256":"6612396204354eb1edad994b210abd2880588ea3879854626dd7ee9c106bb455","sha512":"31df56dae6552b2c792825b9322bd8433e18fadc7f5ec53831fe76a73a9e5a54b1270267cd492d4b8acfd8a2d5e8277fe56c84fa8a6ba27c3312a84fcc9db5ba","ssdeep":"","tlshash":"c7100000000000000000c000c000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:07:29Z","last_seen":"2026-08-12T20:48:55.318195Z","times_seen":3121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9b05de73d43f8c4ec1110c6bcc5312bc","sha1":"08ec69f5be3c483fd11a6e14ddd09865343cd172","sha256":"1f34503f65b4a355a94ee54da8e34541007cc66ec548c61b8dafbea21a1a0787","sha512":"2e6018b94972ce4c223430e2ac6db350974606abf22313349248f334cea65ea6c7d4c0b1180184e6fea44579388457c650d574f4ce9b1d6c91aefb79ef5d30b6","ssdeep":"","tlshash":"c7100000000000000000c00000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-13T19:36:19Z","last_seen":"2026-08-06T08:30:24.952338Z","times_seen":3583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"29a44585c632fff8f8d6251dbf5e81cc","sha1":"b5d634187f4ddb487b4b3fd5393263a5f3da707b","sha256":"7d4713b93264dc1960951dc1e80663fd3e91efcdd51cd42acf8b1e9ab3effbfd","sha512":"bd7e1c4667f28d3702a2caaf316294eed10c852889e1bb1555e132072ae8fa9e3aba1a33609b6475961148b784a52d857cef4146f8082210a72f16083d1c6659","ssdeep":"","tlshash":"62e0d8d0a5819151f653a3e5d12b631062541f27a97eab1de802ab0b98340835bf7995","size":348,"data":"","first_seen":"2026-05-14T07:07:11.190585Z","last_seen":"2026-05-18T06:58:26.181474Z","times_seen":2496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f77327bf3961b9130948b806afffcadd","sha1":"3e5157d40c30e432b8207f87b316ed12705ab1fe","sha256":"7558a2f1b20476663e0bf9c312b5cf6479432cec197dc5b9b1094fea37f94d44","sha512":"2039216f57079b605955b7136e05ce14a667e1671197bcf4973396183940623f450564853f59a29acf3aeb90e836d7cd8aa22998725ffa11194c8cafc6ce363e","ssdeep":"","tlshash":"8e111250706913319df636624047c252daa4d3473cb37058921231c31bbbc56de2ce84","size":1039,"data":"","first_seen":"2026-05-14T07:07:11.210196Z","last_seen":"2026-05-18T06:52:50.93606Z","times_seen":1124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bd4496eb0285aba06273987971f6063a","sha1":"8c7d085c9d54b41debd437430b6852de7f898857","sha256":"f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b","sha512":"ac6567c456643fbfb8ccc60e9f3695cd5b6fd80f8699277093e0d9ca898bfe4a0fb6dc848ec48f6255d0a9eb82a6e699cf2f977aa502120cf9b8caa121f6f3fb","ssdeep":"","tlshash":"5580000000c80a2eaa80822333b883a3b8a80aefb032200080a88c28800882800288a8","size":35,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-13T13:51:50.047718Z","times_seen":111909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","size":4,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-13T13:51:50.091162Z","times_seen":283518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fd2aaa8005ea0ac9485319f5cebfe3a","sha1":"62b1485da2343ca83a89cb3b74a10a81aa4db13a","sha256":"fc572e928cdf9450de73c2e078ff1dcb4ee8c9cfd1c7685f039e72c4f4112c84","sha512":"d0e3af1dffa1fcda6426dd9b88482d58650ec99c7801ad1255be4414421eb84d48662c1918916e46f6a6bafe28f8e6a35a80c223aae6cd627ea636557079f289","ssdeep":"","tlshash":"9ab0129c6c166d5230532637141e0518ec3a920738414198028cc300033c0fd10114fa","size":92,"data":"","first_seen":"2026-05-14T07:07:11.189187Z","last_seen":"2026-05-18T06:58:26.196125Z","times_seen":2506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4efc6436bf7fb6078171376735b85588","sha1":"afe1b0e14f0fb9704af1bf8bb80899028773c93d","sha256":"3c446a7acea9dcccc99fa1ad613808b2980d3b091867c91c49c4784e71549354","sha512":"1ae6dcd88ae7a52b7e4dada98b5edb62f34ea06eee6acacefd5da889c1b5e476136ef37a7ad5caadb9524368929995c5aab27ff988c8ca4c77ea5eedc3903678","ssdeep":"","tlshash":"c71000000000000c000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T05:58:52Z","last_seen":"2026-08-12T20:48:55.204365Z","times_seen":3816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8c09b8ed475bf4a08c5eb72c501b8cd8","sha1":"92dd803f5414324725bcc3a7627a0c1fbfe4909e","sha256":"6e605dc54a455da222d8d89db637207de910e929396f1c3df84eee5e29433b12","sha512":"0a362ed9e39622642be660ddfd4bbe48927e5e2979efd47a4fab6a2f62a3e7708d098149caf7fa84991b0f2228517c421f6ddf5025d022a3852fea3aa4e243de","ssdeep":"","tlshash":"36e061f62100416ae39b03e5e113120437915a0767454d5de913ff2afb19656aae31e7","size":393,"data":"","first_seen":"2026-05-14T07:08:04.367372Z","last_seen":"2026-05-18T06:52:50.933058Z","times_seen":1125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2373e1477bac35b151fb03d545b18944","sha1":"6eac973b58c2a210360576555d17860258fde6d5","sha256":"3c10b50e58e3bca78cdbb45f5bd6b941e9ffb8956da6d096c031d59289178fce","sha512":"7dfb89659c1ac8ada989f874cd7f8056aec88079eaa09a69dec5ff81283d96ab7871e64fc015877bc65098c43e4fbb21d618e8b83323e3b2214ab2ea723fe4b0","ssdeep":"","tlshash":"c570000aac082002002230a20a0f0008002208002a020c00082282c00c3800a002ac0a","size":22,"data":"","first_seen":"2026-05-14T07:07:40.463031Z","last_seen":"2026-05-18T06:52:50.834548Z","times_seen":1178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec7e53845feb375870343182efd0b929","sha1":"63e71d0c5bcadc37a725d971054eb55e017f6989","sha256":"a2253e1fad60aa1ccf31416ca8cde6ffaa5af2510733c7186adc04a503346c5b","sha512":"339f50fe30462dd6204552b2d3d3fe5cbaeea2cadcfbde096f16b40f1d985a5a68ebb227dbbb9f37c9451a36376ed392b7fb50c6e661963124146bac7e03284a","ssdeep":"","tlshash":"cf50003cc00000c0000f03000300000cc0000c00c0c00300c3cc000c3c0cc00c000000","size":11,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-08-13T13:51:50.172673Z","times_seen":175553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-13T13:08:52.985338Z","times_seen":51626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/17u9rrasdmbe~.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"75f896d3e71c044d0ddd97f17b9b8691","sha1":"77f9c57d18f75a915449fa5719ff7f9f0bf5c8c8","sha256":"964d2a42d09b984ac9a471229642a307f174bdb1c6670c92264fdac718b2b942","sha512":"3c0991896643a8836d63f1ae4d0b06f8314d061f8d28487cc0f92f0ac6648492fca8a7f4307472634bb7de7f879022f4757c1b6eb5afe9239597ddf1a4a6e562","ssdeep":"3072:bLLtyhMDyXcY7E704KAtBGM8BsbgISmZJ7XkqMA2i9nynDTgXi:bLLtWOyXcYwAAJv70yn9nynDTOi","tlshash":"c624fbe83995f6626ab302b710af18037338252b280d4d60a351fd9db57845fb17bf9e","size":227300,"data":"","first_seen":"2026-05-17T04:45:35.405369Z","last_seen":"2026-05-17T04:45:35.405369Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6ee17ea1884405236677a77bff128ad9","sha1":"2b2925fc7d5bde470ee0327653d2a0e1a6e2534a","sha256":"9e75f4ce25d750d0e40359d152b8531f4cb74328e5e6c787de0faa5404a10e6f","sha512":"07a4d4606ec8ca05d5d6afa1c91b530286e497929c839124b07dd45753c2e18af5c6f507bea82ea0f916177de4abd47dfc2414bb9efec375e57748e3aceb66df","ssdeep":"","tlshash":"5cc02bf4302920b0154be441eda74e00c1cf3566041e3c3c486daa470d11ad49a73c83","size":146,"data":"","first_seen":"2026-05-14T07:07:11.201003Z","last_seen":"2026-05-18T06:58:26.169457Z","times_seen":2478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8dca2a9a56e16b42ba139a4448842dd9","sha1":"22198990f840dc664f6aac995cd8511be4042969","sha256":"12ae5039bc7af3ed517a579e7e47b50fe9b59db531fcf60869a0bd4106770951","sha512":"364686bb8fa6d61d650f3c8125312f1d6f46e941156365a8414b03bde0ede9dcac0da6ee92d37e2cfd2109e7f2317e945a7b6c9053e0bbb7f80e392c973012e0","ssdeep":"","tlshash":"03f020500431322cb6807a2b4e63f13c2a583333bdb4f8a8df45f2758f2a8a2b48d14d","size":544,"data":"","first_seen":"2026-05-14T07:07:11.253971Z","last_seen":"2026-05-18T06:58:26.190864Z","times_seen":2513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f5a1995a45a88881effda19db87b4d9","sha1":"b0f6ba66a502c91244988a9bf1e9b9237a0b84f5","sha256":"ba242b6e255eab2b5ada3c2a285188c733f089a60af25b58b129d7c3f425b579","sha512":"16ed54d6c7dee3fa1b7fa9192499bb8a79f8b33a51b2419f2e215cd49a68d83cae680dbfb4aceebcb51b0c3f176630ef8ec949fdcd16a93cf4a531e09a889558","ssdeep":"","tlshash":"dbd023a470459d310335d03d577b0c84587d31534f7d6c2d5e0852c59b76a408f8ce55","size":208,"data":"","first_seen":"2026-05-14T07:07:11.108609Z","last_seen":"2026-05-18T06:58:26.194406Z","times_seen":2485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6ae55c7f8f0fe51f3a4d28ff04e028f3","sha1":"4ed62c672f5488fe0374dd48b8f53f8544e85246","sha256":"e9caab467959c9e69da88827cc38bbc45f667b255b3993682ad3146736a96c9b","sha512":"567d933baa1452bd116ec65b90e0a52b0101a83625f5fa85c590614edace954b467712a9e4a302ec2c16af6213815c8a260a5043e6cfea5ee510fc882326b199","ssdeep":"","tlshash":"f4700008ac8e2008082b3223020b00088032020020a20008082c82800c3000a2282828","size":22,"data":"","first_seen":"2026-05-14T07:07:11.163482Z","last_seen":"2026-05-18T06:53:42.063245Z","times_seen":1113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4efc6436bf7fb6078171376735b85588","sha1":"afe1b0e14f0fb9704af1bf8bb80899028773c93d","sha256":"3c446a7acea9dcccc99fa1ad613808b2980d3b091867c91c49c4784e71549354","sha512":"1ae6dcd88ae7a52b7e4dada98b5edb62f34ea06eee6acacefd5da889c1b5e476136ef37a7ad5caadb9524368929995c5aab27ff988c8ca4c77ea5eedc3903678","ssdeep":"","tlshash":"c71000000000000c000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T05:58:52Z","last_seen":"2026-08-12T20:48:55.204365Z","times_seen":3816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-08-13T13:09:06.181753Z","times_seen":51467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/2d01abf7/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"406f9994bb09ae5dd32f2e99b103d2f3","sha1":"0cdbfa913ac223a3e08b251c3c1a2c56641022bb","sha256":"f9a7037a3ce47cb0f89dab0cf4298c613ed36fd8b9fb9cb3461a6d6a2fdd5262","sha512":"2f5b4f53a57998691047d82e2ec2da14893aa5b5dd35381d3f3acc00dea5fd55ea9353d9260626cb8f230928e488b3da4ab8170407518874befbec6f14328bf9","ssdeep":"24576:Zlx4f9VnANpf45JcHOPYVetCf8Kc8AYLcevI09ckGeZ2/3:Zlxc9V645JcHOPYVetCf8Kc8AYLcevhc","tlshash":"52656cd573d2b4a643a2e0b95c1f120af63b6848400cd12cb97affe95db4d4a51b6fb0","size":1493991,"data":"","first_seen":"2026-05-13T15:01:20.138943Z","last_seen":"2026-05-18T16:10:51.311917Z","times_seen":2835,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-17","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/2d01abf7/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"870b4c21015c8cee30fea763bd76edb4","sha1":"e07d5a926bdcf1cb4e76d8755a0b46684c2f18d8","sha256":"3208b3d3008cc769762efa15764fc3f795de4dca2303bbd95d982d63d29c264e","sha512":"545392b69ab000b4e793a38f436ab2c1505c2e2da38759686e831af4af2b3961a4ac8278b3a33821cdaff4e4379c6694a3cbac0613f1e18dbb31c25c2cfc4818","ssdeep":"","tlshash":"ce700088be2820030082382202cb200800a200002e020c2020a080888c3202a0002c08","size":25,"data":"","first_seen":"2026-05-14T07:07:11.252237Z","last_seen":"2026-05-18T06:58:26.161364Z","times_seen":2596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"918369f8279a77c77af3f972d746f237","sha1":"efb1bf87061f815fa1f16014a4bec70d97808b85","sha256":"6ffc0da201f809073f818679511f76e3cd11bbebb0bd4f34bff152fd42a13ad7","sha512":"cd20c128c7887c392c27aca7e4bdecd6c7383e8f0120d420b5c76ca179805b68fe7364189924bfc96a4a9b73c65307339148bfc085c8871f91480d7a56f8ae06","ssdeep":"","tlshash":"c7100000c000000000000000000c000000c00000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T09:35:52Z","last_seen":"2026-06-02T07:00:17.257136Z","times_seen":5808,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab54ca72c3c39c91c49d4f94616e09d6","sha1":"1abf8ba59878edc7d91a4e0c6264a7ae36dcf7d0","sha256":"8ee7e5b006ae2ca5e35a3b9f907486d778268bafbf62a7fd8bb4da15e1a0180a","sha512":"4fa9cda99be9dfdff6349f309a1bd888e5c7a9d3362ac34047f28ab8df4b857482bb14ab743d0f5e02facb0a4279f8e993472b20cdcb22869a1836728a18631c","ssdeep":"96:zNC9Hqt7pEma7hY/rcKJJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYfLRIvgx43nVY","tlshash":"a2b1859ef247b456c156225150ef3b1df33a281ca61ccdc4b66565f218784cba077f39","size":5261,"data":"","first_seen":"2026-05-14T23:47:36.142565Z","last_seen":"2026-05-20T04:16:57.454174Z","times_seen":674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/070ozpw_th3cv.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2316f747a96d0407b7d7fe5009efe5dc","sha1":"9712a6fec9d4b5104ec66dcd6334830112866dae","sha256":"ce21b674f3e2c2a66a5f8ce51d46e1cef5d1471f0aab4a355d1fd5a30bb7021c","sha512":"b57ac9dfc356921789f2f0eba89fabf6b972a1dac4057c55873cadb27ed9578192bffaa56a8abf83a2715b89961ad4598303e280bbfdd6abf9191dbbdfc8a70b","ssdeep":"1536:98I7q8vh/6zMjyOEmgzxOCkFSaH68Hk68EMZodZjKp2ruXYhz/0D0z6esyrknL:98I7qgh/6WyOJ68Hk68EMZoHKp2ruXYu","tlshash":"2c731ac57761b02603d761e9507f040af27da629680c0868f2a5e8fb38b598d97fbf74","size":77044,"data":"","first_seen":"2026-05-17T04:45:35.45001Z","last_seen":"2026-05-17T04:45:35.45001Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-13T13:48:06.705275Z","times_seen":93439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1837f943e45276041318f380711d9d46","sha1":"244c954f93ebf7e4e5ae446b5f7b48d60e39dd8b","sha256":"7ef0fe1d58f3400ac78e89ac6a1023e4e234d9afc69f58b4c7bf55f07a772e40","sha512":"208c2361b300a5150c70931765a56652556f55eb0b70fe2f44ceb9fa3759f42aff61521c0bd68f8fdd9f6ee1ea9cc7effd64a66ccf2c940ab03267bddfe1a306","ssdeep":"","tlshash":"c710000000000000000000000000000000030000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-11T12:48:39Z","last_seen":"2026-07-23T20:03:36.208823Z","times_seen":7093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-13T13:51:50.120035Z","times_seen":249143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-08-13T13:51:50.119029Z","times_seen":205145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-08-13T13:51:50.182476Z","times_seen":169910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"83878c91171338902e0fe0fb97a8c47a","sha1":"516b9783fca517eecbd1d064da2d165310b19759","sha256":"148de9c5a7a44d19e56cd9ae1a554bf67847afb0c58f6e12fa29ac7ddfca9940","sha512":"929872838cb9cfe6578e11f0a323438aee5ae7f61d41412d62db72b25dac52019de2d6a355eb2d033336fb70e73f0ec0afeca3ef36dd8a90d83f998fee23b78d","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000c00","size":1,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-08-13T13:09:38.807183Z","times_seen":75351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fa05f79101a2d00f67fe1f8f903616e6","sha1":"19ef8938e7b230112271f15c1c0860085e965887","sha256":"fa6be4b933cf068cebc24d46abd86c035a8461805e5ca05aa8015a2275347306","sha512":"bdc484ef3490deea55927b844599851fb13d4536038339e6727c109ed884e10282162654179e85c1efdaceb79f60bd23bba76618cb8f618a5d9394dee150700b","ssdeep":"","tlshash":"1b8000882c082c2000022aa2008b0c8e00232aacbe30283c28ae83c20c3a28a2202cbc","size":34,"data":"","first_seen":"2026-05-14T07:07:40.616653Z","last_seen":"2026-05-18T06:53:42.103332Z","times_seen":1963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-08-13T13:51:50.134392Z","times_seen":178807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-08-13T13:51:50.171803Z","times_seen":177677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1837f943e45276041318f380711d9d46","sha1":"244c954f93ebf7e4e5ae446b5f7b48d60e39dd8b","sha256":"7ef0fe1d58f3400ac78e89ac6a1023e4e234d9afc69f58b4c7bf55f07a772e40","sha512":"208c2361b300a5150c70931765a56652556f55eb0b70fe2f44ceb9fa3759f42aff61521c0bd68f8fdd9f6ee1ea9cc7effd64a66ccf2c940ab03267bddfe1a306","ssdeep":"","tlshash":"c710000000000000000000000000000000030000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-11T12:48:39Z","last_seen":"2026-07-23T20:03:36.208823Z","times_seen":7093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-13T13:52:07.659286Z","times_seen":223286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/02d6f2-8_s-0_.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cb0651229edc4f7f2e5eaacbc0fa079","sha1":"10df4470dff22c583e9c87be9454ae9ce5285f1b","sha256":"149d127042b04dd6037e1db14a952df24d28ad7eddbbe68493f34f20875c9330","sha512":"747e9b0f9a99828416f22e417ff6b1fbe75d8ebd2245223e3b90baa724ecb93708f8dee1ead1f17007272188ec2465d3bdeb793e3e7196558dffb7611abd3b67","ssdeep":"768:bJBWstOoGyfwqD9Cmh6FTzVr3CDFZ0vGqYcztV:1wJsfqB3TLYotV","tlshash":"f233d9b53395faa302db91d9c0370012f2780d71309d64b4b394d8af799dd8a92f6f6a","size":54647,"data":"","first_seen":"2026-05-17T04:45:35.431418Z","last_seen":"2026-05-17T04:45:35.431418Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b2f5ff47436671b6e533d8dc3614845d","sha1":"54fd1711209fb1c0781092374132c66e79e2241b","sha256":"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29","sha512":"19f142b018f307bfdf1c7009d15a29417c96d8678d2982eebce4961b2e67eeb118a8ebb1d75b70087c3e65bc793450e3fe4a10002befa2d038e5aed4796937f2","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000c0000000000c000000003","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-08-13T13:32:42.122184Z","times_seen":53450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d6676b5221b7e78ac1af9b309555c18","sha1":"95a174704c21deed2a8309f2c18adbcc8ebfbb2c","sha256":"4cfb9cdc4d5bbaa1cb28f4e3f6bf7407c007d0c5c88b193258c9a334bf366de6","sha512":"229a5a5f750800198b17867e7f9a911550d800d1c967c48017a4a01a5aaa3222d23f0e0c9892f3ccb8295381ad99fa9ea9ca202d2929293f7c943d7f7bb76cde","ssdeep":"","tlshash":"34c08c8636208384626b2296940b0eadc260a937785128bad3814406e3998de02fbd2a","size":168,"data":"","first_seen":"2026-05-14T07:07:11.240074Z","last_seen":"2026-05-18T06:58:26.173798Z","times_seen":2486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f09564c9ca56850d4cd6b3319e541aee","sha1":"c3156e00d3c2588c639e0d3cf6821258b05761c7","sha256":"4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260","sha512":"2ddcd5fd66f62c38135603defc728493bc9012c9ea6abc8a9823165792136513b2c53722d2a79c0d6ea31467308bbb49eb217d151d79baf4b2085f487d0abfae","ssdeep":"","tlshash":"c700000000000300c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:12Z","last_seen":"2026-08-12T21:59:19.474497Z","times_seen":58625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7af85e4bd3e1d7d5160c6666e40d2fcd","sha1":"24eaf0a2377063de12f158fa54470b6ca6299af3","sha256":"4c496fe4bfb155c513718075fb7fdd09d4f6560165d926e1c72e6227f2106c2b","sha512":"8f02d1f5f3d50962d22ffbbb50807471ee831014b10fb189bf157255499a7af09773d97985ff34cc8ccf0ffbbe60c066257400e67bbd3012829730ce6504c7a3","ssdeep":"","tlshash":"aff0d3bf66c4c315c98270c291e3a4889476d6615ec8fc4e0d2181a4867488b495dc10","size":633,"data":"","first_seen":"2026-05-14T07:07:11.147562Z","last_seen":"2026-05-18T06:58:26.185986Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"721a02c1078734d2e9fa3b4ea2f06c11","sha1":"0288ef8bc5d65d2ee6a53627851dc01b7a27af80","sha256":"4c993740b3725f9e796ac7eae1d975f5f273bf2e6a7a166d42f47e103f19fa30","sha512":"7cc4c65837ff3c7f7c548f1122324a01beebadd7591c524dfab379d578ce8fe812a08c154a6a5d02b32a088c7094cbb67c3878352cc821bb99829adc6ac5b4f2","ssdeep":"","tlshash":"b7f02342d0ab15b0f4bc7d8304431f09898d50880cd036b7a25de824c7a2c7a942dc44","size":457,"data":"","first_seen":"2026-05-14T07:08:04.352841Z","last_seen":"2026-05-18T06:53:42.077688Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"667d95b4fa0fbe129f406176ffb7715c","sha1":"a0e8494084e90b0ed09de9313e2b58926806d15b","sha256":"b127512fe866a44e62eb1c37146bed4b58aebe9a4a2fff6f509566acf92cd272","sha512":"70e3af07cd8d100cc95ddfc8196c29920c370f25340215f7987995f584e27c4cb9bc96b2a094f16219b5e67e1fc94560e50d54fec726e5e25d2b67cde2bc85a4","ssdeep":"","tlshash":"9d51780ae88af8526c30cd8f552f2f33a9c5de738975412cb68ddad901a283713dacd4","size":2800,"data":"","first_seen":"2026-05-17T04:45:35.543198Z","last_seen":"2026-05-17T04:45:35.543198Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2787227d0d593160dd7149345e4d4d5","sha1":"b93330c4aa88057dcd37e8798de88dc930597d39","sha256":"073973ccb610f00698ae5882dc3b18b5107d33f0eae6078d7e32036c84810d17","sha512":"a1d5d03facba95d9a6639b60f5d487689a58e84e91de8b8c174527abb21d3873dc9c72cb9fc084f2578a34c67d2f5f894248744e0c65554f62afa57dcbe623b4","ssdeep":"","tlshash":"ad700008ac8e2000002b3022220b00080032200020a20000082c82800c3000a2002828","size":22,"data":"","first_seen":"2026-05-14T07:07:11.22652Z","last_seen":"2026-05-18T06:58:26.193913Z","times_seen":2497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2b5526efd810308ba2d3ca2d181dd353","sha1":"efced755f8a48921ea4226c86f51a7bc00d248f9","sha256":"0424fd506d37a4ba343b59c49ac4d330cac487e62b6c6df58528f6589bfdc7db","sha512":"1e4078afd227e8f91065a4eebed08ed4e3e9be259bfc4cacd6b375dc9327808e3df4685afed5252350a0d1f25e604d627a29db917450b9d47b135b0e93a7eab5","ssdeep":"","tlshash":"c2c080d3f555543c82926457413f5209d7452c859408515e8353f4595271145063c5e6","size":160,"data":"","first_seen":"2026-05-14T07:07:11.204408Z","last_seen":"2026-05-18T06:58:26.158895Z","times_seen":2489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0cc175b9c0f1b6a831c399e269772661","sha1":"86f7e437faa5a7fce15d1ddcb9eaeaea377667b8","sha256":"ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb","sha512":"1f40fc92da241694750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252aa5e74210546f369fbbbce8c12cfc7957b2652fe9a75","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-13T13:09:38.806702Z","times_seen":79661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2e95fb57c68b84b18fffe1835cb3efa0","sha1":"b077fff491a57ced1a52886eb857b4ba7cea3dce","sha256":"fa6d0240a336917ece2723b6e31a7205184f83f48b33084b26b197da55ffcb64","sha512":"b2211064a60efb667ded5305d812751c000e7ba7c48573f48fd6accb6ecc975f69d3400fb782f9f1337566d775c30598ac94b795be421f24ed251e7d15f76352","ssdeep":"","tlshash":"c0e02bc1a5044545e593d3f5d11b735067211f23643ebf2dac11eb07e87104356f3599","size":385,"data":"","first_seen":"2026-05-14T07:07:11.08812Z","last_seen":"2026-05-18T06:58:26.202457Z","times_seen":2507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3690149b5b0dfce90b57cc2f3eb312d2","sha1":"ccf1d39c5cd40c28d2e5318474f8c5ac5b6a714b","sha256":"636cd40cccc7ead654b065678d74c5739595ae8d94e2e76370a143b86fdeda03","sha512":"e364c535a48609cdda1d88243609af56ee64db181788ce5b44c57601cb5d42e673d12ebabbc65b64ad43639d8f7a9192ad1edfb3f28636672e58fd15671f7282","ssdeep":"","tlshash":"59e02df2f79725e7801836a160020cc8ca313a3bbc383ce8861087248c31fcb84adb83","size":322,"data":"","first_seen":"2026-05-14T07:07:11.205754Z","last_seen":"2026-05-18T06:58:26.172516Z","times_seen":2269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b1d7bd924588d75ad2c36b1854b9fae","sha1":"baf901e70f15ba0107ace334bfcfdb8e369c6c63","sha256":"2b39505f1855f3110476e70db22519fdae85b0f040d22de27a48d4825a9874e1","sha512":"83bbe7fe91a515f3ddbeccface614ebab63a8ff6597cb9b784a92c8286aae818014b94122e9c08f37c0779132c5564004c5359d0817adade08a58d2cdc54ec01","ssdeep":"","tlshash":"ddb09bc0a2c02461500591c940735934f6e43dc216051b7ec121dc365450729467d615","size":118,"data":"","first_seen":"2026-05-14T07:07:40.469585Z","last_seen":"2026-05-18T06:53:42.079744Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-13T13:48:06.627904Z","times_seen":66911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"518f4a738816e5ef78463929ef311f26","sha1":"23e11759d38d05befe68938e30bcabbafc05f9fd","sha256":"b5e22fb36ea0760dffd2f186c3e64b15efa56e0c0a36a1136d3884b4cf236403","sha512":"f1edb4b0f4d4dd6e54ed4ff8cb68174aaff9e5cba67aa3037bca3e488033ded20b8213c2ca34c2e4da4d3f04679e18f5d656fb209b59164fd3ddf26094d61564","ssdeep":"","tlshash":"c710000000000000000c00000000c000000000000000000000c0000000000000000000","size":2,"data":"","first_seen":"2023-03-11T13:35:30Z","last_seen":"2026-08-11T05:54:46.979098Z","times_seen":6863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-08-13T13:51:50.08642Z","times_seen":187064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3de1f3d674e2ee46449100345a7d0658","sha1":"a2f071002ccadef0b79bd29fd22df58b8ac6eec1","sha256":"5978e543096544faf16118a324bb022fd49caed8f98ad831bcff892dd4e3f63f","sha512":"286b0933fb9f3e393d8c6ced606b26e6e95cb1457b4381a7bd0de9aabbda7b80426a6ef8c6edcd146cec62e1381138bca6a202df58ea5e17a4bfef1d3e306c01","ssdeep":"","tlshash":"c7100000000300000000000000000000c0000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-26T06:38:16Z","last_seen":"2026-07-12T12:15:53.48587Z","times_seen":4665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-08-13T13:51:50.044811Z","times_seen":269754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7a80672c8cce0a104085792eb5b367c0","sha1":"f33545f53b716fdcff001591e7e7c3dd2256fb31","sha256":"1da19dbd0e0a3899c72deca2f437d3ece8600f782ab4af23445ed39edacc9f18","sha512":"66e06daf3936a2e8655fd8b031187624ec4c13464fba96f32a2a41cba3fffbddf70e8a850c930cbe9a32125d282a8f0efe1677750d379a38bdb1dd508f19f333","ssdeep":"","tlshash":"6cc02bf4302920f0194be441eda74e00c1cf3566041e3c3c486daa470d11ad49ab3c83","size":148,"data":"","first_seen":"2026-05-14T07:07:40.592811Z","last_seen":"2026-05-18T06:52:50.991265Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e14da64a5617a7f7260ccb29c48fa866","sha1":"e7ef3e008e71f9685857108a5bca1a9262c47783","sha256":"576123d7a7d57a6b3bc169802313fa3026181fe8b86121e5bee2602af0f6abc0","sha512":"58f10355a3f03f91d8de38f8140f01d794c9f1af321002ee46806f2306cfcaa617ee37cce98c9a3579465269147a03f165c8efdffa8edfd9b24ef878d80c808a","ssdeep":"","tlshash":"c71000000000000c000000000000000000000000000300000000000000000000300000","size":2,"data":"","first_seen":"2023-08-10T15:31:43Z","last_seen":"2026-07-20T07:00:17.620323Z","times_seen":3823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0_7kqmlewccf1.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d0fbe6e9059a40108616f955276c91e","sha1":"e2b8ebe91472b14dfc89dab27f9cadd2c45aa0a4","sha256":"3c16ec3fe9f3bfaec16b81d5b7cfa6bacdf20bf1b63e0c9bbdd26c0ef4e2e7b0","sha512":"9507ba32d39070dcacbd0e9f49c71511f546873f0049172767236c44782b688bf6fe34dc6e6228e5d4b296b6269e5bd50684e45e1c733c769b3b5401654e63f6","ssdeep":"384:ZhKo3OyX3T2GupvjdhBYyH0lIymiIz/aEIx+i19pEftdBFJfob0lWqHey9gUDABz:jKo3RXXMnBHHqkzzI+KahwrqRZw","tlshash":"05d2a5f4e1456eedaf725288695e001c301dada7de3e0c34bee8fe253a1144d6931b6e","size":30565,"data":"","first_seen":"2026-05-17T04:45:35.475868Z","last_seen":"2026-05-17T04:45:35.475868Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"65b9f1181714f6c932be4cd42de0095f","sha1":"a0042a74f230f1338b4d5d8b2445c63f8fa3195f","sha256":"2a0eec766ec0835a58c6f07210bf4b95d665625db96ee18f6f1a8e7b3a05fe18","sha512":"bd6ccd2b2ed9801b8744d0e59d2ce203feff77084e53638b9c3c3fb89f1d5f6a217d956c38aecad26f4731b518d4223ddfd1742e5b9f9b59040d84eb1bdf6c63","ssdeep":"","tlshash":"c710003000000000000000000000000000000000000000000300000000300000000000","size":2,"data":"","first_seen":"2023-03-08T16:09:06Z","last_seen":"2026-07-23T19:41:46.121183Z","times_seen":2982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fc56270e7a70fa81a5935b72eacbe29","sha1":"6dcd4ce23d88e2ee9568ba546c007c63d9131c1b","sha256":"559aead08264d5795d3909718cdd05abd49572e84fe55590eef31a88a08fdffd","sha512":"21b4f4bd9e64ed355c3eb676a28ebedaf6d8f17bdc365995b319097153044080516bd083bfcce66121a3072646994c8430cc382b8dc543e84880183bf856cff5","ssdeep":"","tlshash":"c700000030000c00c0000030000000000000c000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:06Z","last_seen":"2026-08-13T13:51:50.204866Z","times_seen":74600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2d313f78f5f872402ae8c0c149bd154","sha1":"1d405eddafbf3e853ec1df577bcfdce311341014","sha256":"056004b9721449eccca45bc830a26edcb390bb954f9ff38131c6a84a0b5b4400","sha512":"621a69a27a3f0b3345039fbf9083ac5e548a309149a896999638303c176a8c5362fbec322dde74cb2e9cb9b4c31e6e22c616333b16dafe55cfcb8b9dea4b6a17","ssdeep":"","tlshash":"f1c02bcce9482c19f2107308a08bed8050d37f300d03b828c20ca1104f2117822384de","size":134,"data":"","first_seen":"2026-05-14T07:08:04.342047Z","last_seen":"2026-05-18T06:52:50.907455Z","times_seen":1135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2284743fe8a6178f117d584e3091d6e","sha1":"93d24c83d4a695e2a463bf66ea18a3e2147e9148","sha256":"8cf878073f71bf93dd67f56aab913b4a584f5ea15c56ea7030f96b9f26f23a4b","sha512":"7aa1cd340f7dc20e2259c9ef76fc6dd184133548d47ee9cf1c300e8ded20ae3e298748b874bb735dc639bb025be759096e3edfedd1c0396a094748bfe2734cf1","ssdeep":"","tlshash":"28c02bcf30c6da74817d001203179dc48107349f114b808743d040e400174908c1dcd7","size":138,"data":"","first_seen":"2026-02-18T11:53:38.7823Z","last_seen":"2026-08-13T13:51:50.1253Z","times_seen":81039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e14da64a5617a7f7260ccb29c48fa866","sha1":"e7ef3e008e71f9685857108a5bca1a9262c47783","sha256":"576123d7a7d57a6b3bc169802313fa3026181fe8b86121e5bee2602af0f6abc0","sha512":"58f10355a3f03f91d8de38f8140f01d794c9f1af321002ee46806f2306cfcaa617ee37cce98c9a3579465269147a03f165c8efdffa8edfd9b24ef878d80c808a","ssdeep":"","tlshash":"c71000000000000c000000000000000000000000000300000000000000000000300000","size":2,"data":"","first_seen":"2023-08-10T15:31:43Z","last_seen":"2026-07-20T07:00:17.620323Z","times_seen":3823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"26e08eb63135b4314ec44f73b9326ae4","sha1":"5f50789f68e51fb60eab039b876e3b50ac6e0914","sha256":"8e28ccdd601bed5b7b6fb055bf37f67620d8ed587f0d8bf1179caf2663477c74","sha512":"18815f240c4e54b1264d0ae464d37d900f3c255536c8942a14c9049001a1ed3a4127d6ef8caa9bb958492f6c6cbb7383fb65ddfba58bc486852ed2c43b5b6b2b","ssdeep":"48:LZSGpKW/+qjDqiLsAh7B4xu90rnBn9G7cHA1xqzFfRa1/xm0px/Qg65pdn/+uj4P:LNKNiNGxu90p87cg1xqzc/xmW5gpvPy7","tlshash":"28a19d2e7805de4bec6e7d2d023e9d3a10cc897b47a4deb886ddce050a465b927d6dc0","size":4901,"data":"","first_seen":"2026-05-17T04:45:35.563643Z","last_seen":"2026-05-17T04:45:35.563643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0yl72.zxnawu~.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f11add01cd603a4ea3f2fe2a142f557","sha1":"f3aafe144d93ee7596f813afc5de52c75d50ae2c","sha256":"c03776afc2aa47223e379a27465abe10784bb860952d3ebc897512d5bc6131d7","sha512":"db865b256d94a509aec58456490d566cd6bf2f33648ff7a091ad3211d479c5a08b29f67b89ffae273189123ada9ccc4011e210347f90f4a5ea62fb4a4323dc9b","ssdeep":"3072:vuewD5IYzppPbOfR25Htudg+ZbIlbS75B:vuewD5IYzp1bOfo5N2g5lbyB","tlshash":"2bd3e6f935d1f4420bab50aac03f0006f22c4d77189e6860e3e5ddda756469de1b3faa","size":140757,"data":"","first_seen":"2026-05-17T04:45:35.461349Z","last_seen":"2026-05-17T04:45:35.461349Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-06-07T08:19:02.155739Z","times_seen":241207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee689ef2937fa72a8a3c44e1d74735c9","sha1":"63cea284ef0cf3bfcc00b8ad2ce53ab1ae2aada8","sha256":"aab2bf8434920df8cf062c642159a9d68b914300f53a96bf2933e62ac9d94d40","sha512":"640b8a211055a9a7dc964bdb9b0100922fd491b27229dd1c353278c90a58aa5fbdcc16d5d17451f926a2f5aec1d26aec12e93f4337968e2f438d357d0a61a780","ssdeep":"","tlshash":"bb4195d936e8f9b6834328e1043fa016b6353976497be8c0531dd4f9bc79c45811afb6","size":2306,"data":"","first_seen":"2026-05-14T23:47:35.992444Z","last_seen":"2026-05-20T04:16:57.466379Z","times_seen":737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"79b27840a0703a76a657e8c3cb86d36a","sha1":"bd2bf23180e9f951a8410728d413beec6622b2ba","sha256":"4d996ab14e622fe030c10eb51e795cf0b5cb23aa413b96c65a55d234b2ca2234","sha512":"974386bc02e94e6baf34cdd78e9a681182cac482ebedb4aa486bc89167f166fab6aab290fcc828eacbac5182206b43b54d61c7f1b824eff98aa95f910501a331","ssdeep":"","tlshash":"31700088ae3c200300833232020b2008082200003a220c0882e08a80cc3000a00a380a","size":25,"data":"","first_seen":"2026-05-14T07:07:11.232137Z","last_seen":"2026-05-18T06:58:26.182423Z","times_seen":2596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ddf96839223c77ec83bd264d99af0655","sha1":"bc47ec8fb922d052b4e47cdc4d788a1b43c0e738","sha256":"46ca80347bb9209b20c9edddbd2fd18eb3e946c50179bc539937aa20c3fed869","sha512":"ff57d467bdd4e38609039c96e4b408fd54f3d4aeb5612991482fe5afdba6d34667090c19557483a783e4571feb51afac112e28f10351ea138c110b7d738f394a","ssdeep":"","tlshash":"f5b0123d3f1490b9595972950ddb1470dcf619615454d114835200431c71fd500dcc54","size":106,"data":"","first_seen":"2026-05-14T07:07:11.180614Z","last_seen":"2026-05-18T06:58:26.187036Z","times_seen":2591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61e9c06ea9a85a5088a499df6458d276","sha1":"e2415cb7f63df0c9de23362326ad3c37a9adfc96","sha256":"fcb5f40df9be6bae66c1d77a6c15968866a9e6cbd7314ca432b019d17392f6f4","sha512":"61037724a2fb00a12fa8a53ada233f54ff7fc6ee02048e579b83a127ce79fc03906c35b5307beb18a3cf5021fe031ae6587448d4d60a082d73252fe2e2f4ae7f","ssdeep":"","tlshash":"c700000000000000c00000300000000000c00000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-13T06:59:10.874765Z","times_seen":79949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"18a4b01bf4be97731c1a03d0cfcc67c2","sha1":"d51397aa92da59df0cf17bbb3065046a2c76ff0f","sha256":"e313e79b00e9e4a5a97e8130438197c615dd839c57b74eb7d48a884c3a362a5f","sha512":"e9c8937af5a2d098c73b572da6589a5241e3c26c27b63750d88137343e5e21ade7b381ca3092b2883b61f00f4e44b4aef9b34a0edc2ac6878cdd9fceb25f780f","ssdeep":"","tlshash":"bba011880c2a8c20aa020a20002a000c880e00082008082a80acc2c083288fab20a0f0","size":78,"data":"","first_seen":"2026-05-14T07:07:11.170472Z","last_seen":"2026-05-18T06:58:26.15744Z","times_seen":2514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-13T13:51:50.064031Z","times_seen":260601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8c6e3e1e199cb9338d83466b68417a74","sha1":"843cedcb438187da927264200864593d5c769d31","sha256":"4fb36eca86b3c3adf67ca055ce4808d3b70554e50f3d7a8455f7e23f24122131","sha512":"1e401259e518c5de5e00e72bf4e566a03ad605fff61300fa6f149cdda002a12983ba5bc223b16aafe876afaa607b40015fef4f0489164eccea856f9acc3bfcfd","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-06-22T14:42:52Z","last_seen":"2026-08-05T06:50:42.980054Z","times_seen":3699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"77ebc5042a67003c589b5cf90a18a7d6","sha1":"34a5938978df477069dde14a96fede160e095828","sha256":"db527dfc5802ab71e53c69b1d3cedbc833c258a60b77f90b9b6c9b7f5247ce13","sha512":"b938ab01fcf4f72b6161bb06cb37fb33dc132c9e60826edcc57dab8caa5c0bfbba486b43bac6a5b7390b1bbb9b113026350de1dfb5090118916f63bf88bd3c9a","ssdeep":"","tlshash":"aec09bc2f659541cc3927417113ec305df9b1d18940c529cc397f85a5a715054f38be6","size":130,"data":"","first_seen":"2026-05-14T07:07:11.158608Z","last_seen":"2026-05-18T06:58:26.180933Z","times_seen":2506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cb057b846b0f80c3bb7ae130530b3a27","sha1":"47276cf03673a089c18f5f0d6f5be4af4d393239","sha256":"b21eefc9fb43d7eb09a7df2f759e4fd005679a4c1cb4fcd7ddf90d8a53f714ba","sha512":"e411033873278afba7275bc7e4d0f8634dd0cfa270f6b8fb70f75893e9fa74b781cab9dfaf4300589eb6e6b3edd54bf68a75d314e0e5040eaaaeaaafeb225f01","ssdeep":"","tlshash":"c7100000000000000000000330000000c0000c000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-04-13T19:50:25Z","last_seen":"2026-07-31T17:46:30.897721Z","times_seen":8046,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e4e135f880c86073935a4f8a6ac3c6bb","sha1":"aecec21776761039148ccd082c8263c9cfc4000d","sha256":"766cef73de8374a6c623a474db75098dab1ee5666f591296d3c95f82ccdec10c","sha512":"9a49c9dcf1bb3f1b61661e196c7f348c01244572eda9d843b769dd9d84a6b49ad3ea73b53abd559718e6ed2a7e5c7b4a04739d93b3e39a0957b3f27ef23d0190","ssdeep":"","tlshash":"c7100000c000000000000000000c0000000000000000000000000300000000000000c0","size":2,"data":"","first_seen":"2023-03-08T14:33:43Z","last_seen":"2026-08-04T15:02:50.342967Z","times_seen":3872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1a39c228bf73ac6c7dca2ce491ed2710","sha1":"5a87b7a1594035a5d6911c58a85b60c4f0af78dc","sha256":"1ee54f8d85b37e2735f658a76fefa7c3055782739121fddd970c704014278e86","sha512":"b24f87f9edf1f1f92e258acda619d1b09efce9a3c26ece6709228924dc943fb2ab4b0b6909b0a84c83b1a76ec580e30f41e17ad9c6c1e866ed097d245dd2bdd4","ssdeep":"","tlshash":"5cc0809c6b4d51ce321630714057111c915d54487c1855245c9451539634467d0a145a","size":160,"data":"","first_seen":"2026-05-14T07:07:11.13472Z","last_seen":"2026-05-18T06:58:26.175483Z","times_seen":2537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"817e6a4cbcbb30512a9d70137cd18596","sha1":"d161ca856e31fbf389c65b834ddd07128468c6fc","sha256":"c3a1c8ae7ca9d0d20b041b826b7197b3962814d991732e0ea875360eb817c3d6","sha512":"e4df1721b412595d45f8a6536f18f3474224e9f4b39d468f99ea7e4daf4e156ca7b6c7cd349b067af436fbea67680ca5a7f2ea7e20a31694bc4dc59778321964","ssdeep":"","tlshash":"ffd095893406902cc412daf7403a80026c1e6d25c50ec8bcc423f2997e371543dfffa0","size":250,"data":"","first_seen":"2026-05-14T07:07:40.447514Z","last_seen":"2026-05-18T06:53:42.086367Z","times_seen":1138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0h.y9cwh-yq0d.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ece9d4a180d45e2fc81c10bd7740b90","sha1":"b18379d5f4fffcf1f1fb85f3a429d9b56ce2da08","sha256":"5a33a9c0f5a1d181010e6da5353bf81f2c6587df47c13e5bfc942e62709329f9","sha512":"b7680e803e93d44bfcbde1571efeaf71e5fd7437df3ad969e99b78d8e456c9ba3506c5ce5b9738baaf44d7203f54c968efd523ad5b23b4df8c219852f288ece9","ssdeep":"3072:S0h8RiPAqJOH8ofeG8gVc3quoVBEiv4Dp:ScvPAkOyfb3quo8iAt","tlshash":"07c3f7ddb242b472069b62b1403f060bb23b9998740f44acf269d4d97d3c89d917bf7a","size":119620,"data":"","first_seen":"2026-05-17T04:45:35.407828Z","last_seen":"2026-05-17T04:45:35.407828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd7f8d66615c4800e8ca73f9dde98b5","sha1":"2a7d216e9612776912f8e5b9aebb0521f436dc12","sha256":"aed9e2090079aa62490d679a4370d8c1ef6a4f968d693b0e772ccb2061e527dc","sha512":"8500c7832de78d336648f971c0f02746ab8087a36557ea216d6214ce41630dbb6e09fc457a3640d259937a3bae97cf6ace4cab57a8efafb5ec78f080c29cdbf1","ssdeep":"","tlshash":"8701761c06047d9c94068cc8c7c6aaa18b9c9237fa413224f82f454dbae3aeb983085b","size":739,"data":"","first_seen":"2026-05-13T19:22:34.056691Z","last_seen":"2026-05-20T00:58:23.493309Z","times_seen":4484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c56d07a09398d5156de8604318877d6","sha1":"43d8184034ca6a8480ad9ff40d89ccbd61127014","sha256":"d95736595716284f463597a9d224d639b154504804c6d8f8d7f516bcd00da54c","sha512":"35b0441959299d6bd76a907b43b2ded68c4b06c7e5ae9e06b2ad87be64577ecc511316b78c2e99d78b2d95d77c0c7aec41a617f5f40a6c8363056bd25a71403f","ssdeep":"192:yzEjQfb/44Tmlavb+Nvyv8kYh0sxVjocbVW27sTM73gcAKc3Udq6bRXnLNy9nwQ0:+OQfbwxavBv5YisxVMcU27sTMDgcA3X0","tlshash":"2722b80fa38579fcd7d15598b7a36b036cf4821b53082a1888cba0542cddf19425b9ed","size":10206,"data":"","first_seen":"2026-05-07T20:51:08.743132Z","last_seen":"2026-06-16T17:46:19.125675Z","times_seen":20720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"23687da7ae35f128538a3a2a9cf37bd3","sha1":"8a9d69baadf26c3aadd83c9b154de54f604918ae","sha256":"bc57038469930db3cd57065f0f767813a340285ca1ffc8e44e3777e17765bfb0","sha512":"a607e4a8db7fb031f4318f49b4348569665af0ce79622ba9ce24eb96a918ffc22889d6db7b7e666bcf0b91b93e5e61c20d3f4abc28ad39a191771da2772132c0","ssdeep":"","tlshash":"c6a0228c0c2b8c20eb020a30002a000ccc0f0008200c0c0ec0ecc3c0c33ccfab3080f0","size":78,"data":"","first_seen":"2026-05-14T07:07:11.143301Z","last_seen":"2026-05-18T06:58:26.188594Z","times_seen":2503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aff35a0b5d8269f8fce61b295fab6152","sha1":"384db53c71616c39b605752e7fb848f20792b678","sha256":"4915f76f743a9fc9185bb4f2d1c11bc6dfe22403714a495f482d7023ab7c9edc","sha512":"855cf67a62dd89be61607d5f788856237175d7e368fd06ae385ca7a17393f009143552c4d20c69e49a385eb12f9442d7d6408054645396658896d52799ecaa8d","ssdeep":"","tlshash":"01b09b68e005fde655a505616529e495229f504d195414501113915516499141717dc0","size":112,"data":"","first_seen":"2025-11-24T09:34:07.539246Z","last_seen":"2026-08-04T02:43:09.066552Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/16fgid~momoe6.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0efb9e308b515b53ff9cd960eb649730","sha1":"97caf37afcdee78fe81c99c44b034f74efdecbb0","sha256":"13169ce7e841c2254ca4b8e07bd9cf3e802fb13d0a00fb26c5a2fcc83d6be571","sha512":"85c3fa876a5c24867ae3dfa9c00082c4f87e3334a72fa7230d9308ccc02bf37279ab32162dc795aee3578764508160c1973da5bea9bcd4c0489b3af0033c3d10","ssdeep":"384:R7KdkTd9WjBTBdMcTXIpo1bIBqjac/s+rPYjDExpCkKMny1V0UchwQhVHAlweql:KNykSo1kpc/s+zYXExp7ly1V0UTY","tlshash":"c513d7b132d5faa3539341e1e43f2016f2780c7520ad6470a7e89c9f754c88da6befa5","size":44411,"data":"","first_seen":"2026-05-17T04:45:35.481307Z","last_seen":"2026-05-17T04:45:35.481307Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c5181ac25d99303778d3f800ae285ac","sha1":"d6582cd7cdc91b8bb76eaf5afdb01281de716657","sha256":"72badec5bda7d0dfebda13afec11fa666ac4cd56b8523d26bc68df4f67e4d061","sha512":"6ffc761415f13ca2ec42fb1ccec72d7e76b904efe1430366aacfca9322ddf5bc342482313ecfca434c3468b72a38459a410596dca147478d4f6aac14d4f0a5e7","ssdeep":"","tlshash":"3bc080d0cc42cc2dc6670f261c3a1c3521dcc574174555469dd5d9291985b3505b5d89","size":178,"data":"","first_seen":"2025-03-03T03:33:30.05513Z","last_seen":"2026-08-13T10:20:06.479036Z","times_seen":1622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0hzlo8bbal5fx.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a3b866c82de920b3d76bec40b06a01b","sha1":"27fea75d54fe9ed9ebc9ab1e76d29b00a379cc76","sha256":"1845886ae7904b05ed345a5ce5000c321aec328a9b1b12d2da3560884cdb17b3","sha512":"6a1ee150bb0f149e5fd8a2b69f1c4bf8459f5b8c300b1ff394232c4bcfc531fd7687014b592074b57842b7116934a56db5310c490a20e0926efd22bf17d09c12","ssdeep":"384:duUmV/xAUG2vbWNXS1uBqyH7iLSvobagWCU3U4n58:1G/+ULnIBdHn1x3i","tlshash":"1d62f97031d069e8a55780c9d12f900c702e9f3dd51f6968ffe8bc792662889bd52f87","size":15810,"data":"","first_seen":"2026-05-17T04:45:35.470576Z","last_seen":"2026-05-17T04:45:35.470576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0frbt74s_bhb9.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24d9c695870dc2e20232feacc12b1e30","sha1":"3f5ee0799a652f9a2fadaab184db47dfc2d2c21c","sha256":"26e6a62ede5156d0a3a8baa8bfec124f0b8a624a45cc6167798ba3c7b5a87821","sha512":"757fc38a2b558c06e05d20c815c41c08309d87d5ed177fb7c7fd32bb3c84ebd50b7c94df8a4d4ad3c92db4f79695aac90a85ec73e601ede669bea27609cda7c0","ssdeep":"1536:7zDRq1Er3bsgDNLKmQx1lGIH80Vc36vGdWGI+/ENVNxRI0KPf0NsETUIgpwce1+:72CeUIH8wGJ/E9boHh","tlshash":"aed309a673517122d3cb5199c4af4b41b33b58d82009443cb6bd9dcb296098a62fff3e","size":137925,"data":"","first_seen":"2026-05-17T04:45:35.439263Z","last_seen":"2026-05-17T04:45:35.439263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"641868c94d138b2699c5fec74f823349","sha1":"a19375a164806474f2ac5a7f7afcc92f800afed5","sha256":"892cb18a947683d1a9f0027623c8af3290ed84ef989a8bfafa5c5874da3f6a69","sha512":"90a6cda7b0071789999cd41315fbc3cdfb7b5c40aed093610cddcc3ab05a0da45e55ee273557c997eb76cef93b625d9ee4d6b987f52bb131b92de5148bd06059","ssdeep":"","tlshash":"12e07deb940141bd52bf20408ef3ecd109ecfc3925e01f291c776091265054894b8f83","size":319,"data":"","first_seen":"2026-05-14T07:07:11.237123Z","last_seen":"2026-05-18T06:58:26.177448Z","times_seen":2527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d0be87fd61da2ac0fa04b109baaf3d3b","sha1":"9ff09eb114b17f299f2500ae50249bc53bb9b553","sha256":"69656a7507b88240a820124d67e04463d3d001dc61cce44b069890c1f8e75a5b","sha512":"840d2cf8fda109ac6b5f76b851a65f2a8f1b07d388af13236d87822343ca163d1171f0dbff45067b6c8003bce62419cfbc48df0255edbf89d94cd0e960dc42ca","ssdeep":"","tlshash":"74c02214005822a9821f1ecf90ebc83a50d2410f1a01b68083005b5481ac427139a784","size":185,"data":"","first_seen":"2026-05-14T07:07:40.399757Z","last_seen":"2026-05-18T06:51:40.280306Z","times_seen":1130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/09enb.fl3b7hr.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"543ceff74ed25d27b7ac8bd0bcc1fba9","sha1":"6bcf5d30393850d35e903bea4e29f406597ae301","sha256":"411b5a156c803c173d5873a8862ff352b9470279e535381848ea0c1e2f73f7b7","sha512":"29fd3667c41ef2f0cfde00535d8b351d8ac21335047c9d04dc0312fe67392323d35e6b49d504f705c8805f6e4add506ba7e010ce35dda2329837a7ce89d508b5","ssdeep":"96:DzKgba8/WaEVVqVuVOuk5ixyoJ0OlLCgZc6xC0uhnOZGjl4h8t4:S1EyBC0Hwc","tlshash":"82b183406504bafc695b00d8647bd05c303e6fede60fd4acb6b86c2523154e8b953b97","size":5541,"data":"","first_seen":"2026-05-17T04:45:35.445834Z","last_seen":"2026-05-17T04:45:35.445834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6850bf424bd9a30bfb58b5a416aa1c90","sha1":"bb094c0fb8918b79ab60956094b6bc0c98946b59","sha256":"4a391ef3ee37c0b87ca8b39962399bc8e483f95cba7cd700f7d83ad1ff35daca","sha512":"a65717f240a09ac3c0aa64c344741de98eb594bc1691252b5a3a9ff15d2878abc30755d3d827431d816641911aa37188d44102e21c5795d9eda7cd78bbb3f978","ssdeep":"","tlshash":"42a0126c9c46e20461691015001b808d4420880e20c19808477c9c04432b036050305a","size":82,"data":"","first_seen":"2026-05-14T07:07:11.150107Z","last_seen":"2026-05-18T06:58:26.183413Z","times_seen":1124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-13T13:51:50.16389Z","times_seen":238441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0warocfazi4nu.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d50980f20b229fdb11bbdc868fff6990","sha1":"bbbc5540985188fa767e2c3b6b0ae22bdb5b5023","sha256":"febfd8abb033e060cf510a28f48e529ef22f42852732c375a6bde58d472bd73c","sha512":"47bc511a2c75870d68ea744327955b129043660f601ad7f9a782accb9729960fe9bebf4a1f134cb4e796d05764448ceac9d750cb801511688487ce2e98cc2554","ssdeep":"384:wZA9i3CGXIM6Mr7d4UhQBBnEO2sue7b9kOwOcdTbsZnOW0wM:wZIi3C7M6Mr7d4UhQBB/7hgdTb+mB","tlshash":"7192f8a8f3a1fbae23a7105e706f1014f0762960696c41607359686b3f75d0c6ab3f5a","size":19937,"data":"","first_seen":"2026-05-17T04:45:35.448637Z","last_seen":"2026-05-17T04:45:35.448637Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eb5e48e74123cacc52761302ea4a7d22","sha1":"80f6b1db5d2c25e15a77836728a708218a092cbc","sha256":"712dd58e22b0bca040fc9250038f84827f85593ab978e596ed75b3ba48bd1b23","sha512":"c128d41682539e573d4d66209801b04a95d947dafde42f726c2f96d9f5351060a67c0625f9fbc90442d7f9846fd1e1a586acc4411a6f508a9652a84b03aa17bf","ssdeep":"","tlshash":"c710000300000000000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T01:12:09Z","last_seen":"2026-08-11T05:54:46.902646Z","times_seen":3054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"39e9c217a780513eef00aeaade6ad5d3","sha1":"1c7090ffe4255ada3680bbd8ee226cc7ad8d6330","sha256":"9e40c3e5ea100e9420b9273e344a86fbcf7842fcb79292a306a3e665e3fa9674","sha512":"e61792b15e7194d13a6eec82ae5aa4357b82f16066cf20db1878e477250f3f46104df871f5b5260f26fc808f055a735165e683f069a08cf39bd7df9308aabb37","ssdeep":"","tlshash":"800144dcb245d0239b95d49128df3a3d7087b4c0e91417081061c2666f80cbc5133e2d","size":686,"data":"","first_seen":"2026-05-14T07:07:11.140058Z","last_seen":"2026-05-18T06:58:26.201881Z","times_seen":2505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2e2859e5289e2ce75e64cf4ef8e35ba6","sha1":"01e9bb9d3fd5a627da7ebaac86ddaacfa4af04ab","sha256":"c61f9902ddc79ac4aa0de511945b890abbbeca74b9abcf756a9ef01f41f3a013","sha512":"87a62f61f10282286ed9a1da609c759f031ae3c7ef59603e6a7487f4bb8aa8bb2319ea9f941e75eb24f136c2925d919bdd944197b3297d009a1f390ca972e865","ssdeep":"","tlshash":"c710000000000000000000000030000000000000300000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-07T01:42:46Z","last_seen":"2026-08-01T17:56:01.726085Z","times_seen":4769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8c6e3e1e199cb9338d83466b68417a74","sha1":"843cedcb438187da927264200864593d5c769d31","sha256":"4fb36eca86b3c3adf67ca055ce4808d3b70554e50f3d7a8455f7e23f24122131","sha512":"1e401259e518c5de5e00e72bf4e566a03ad605fff61300fa6f149cdda002a12983ba5bc223b16aafe876afaa607b40015fef4f0489164eccea856f9acc3bfcfd","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-06-22T14:42:52Z","last_seen":"2026-08-05T06:50:42.980054Z","times_seen":3699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"234fda16ee31dd96d8e0ced07fff84cd","sha1":"1a5f7a3c40ac74e6df7bf1f7716776ce3464defa","sha256":"9801cc082bd0aac423fe68982414b088a5dc58175e405508d68b416b30fc8efb","sha512":"ac123f7b8cca923f6192c11c4bfa99920244662b56ac2d68b63cace3c5bf8645b9669fc559884ccc4a7263c22e5d4a297bb0327d2844afceeaec5602ab22efb9","ssdeep":"","tlshash":"03c08c8a36208384626b2296940b0eadc260a937785128bad3814406e7998de02fbd2a","size":170,"data":"","first_seen":"2026-05-14T07:07:40.579825Z","last_seen":"2026-05-18T06:53:42.074356Z","times_seen":1152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dd65ef9a5579d4e518c6d4abbd0cb1c6","sha1":"7b3ebc324268e66c2e58d3ac733f5dec5827eda6","sha256":"23cb4f8ae6f35bfb8cda975872f600d5cbfd7e34f3d4933d3861949a689e2cd0","sha512":"122df17f6a49162e17dc25c9ace2a2ffb834d47e597cc186e905cbff56ef207d03db9705b63a73af0c8eacfa37e61c7424444488caf97d716ed034f269ff2e0d","ssdeep":"","tlshash":"c7100000030030000000000300000000000000000000030000000000c0000000000000","size":2,"data":"","first_seen":"2023-07-08T16:49:27Z","last_seen":"2026-07-29T08:09:12.619418Z","times_seen":3183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0uyemsny99wfy.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"437642aa30a112373abfaebf1c31b2db","sha1":"bd12fdfa450845cff3556c46b122d05448c0921e","sha256":"f7d825acf34802e2ec1e550f7a13ff4cbea6f137c6416a3844f8e9a1033ef2c3","sha512":"f532e478342572a1761d2454bff302283d1e5261c4ffe2e081f36dad8d2495fa40a107e7a7bdec6748a30ca3cdc13fbd90a04f748321e3c847105509c8e6141e","ssdeep":"1536:8DRq1Er3bsgDNLKmQx1VfGIH80Vc36vGdWGI+/ENV/xRI0KPf0NsETUIgpwce17:nCeheIH8MGJ/EnboH2","tlshash":"fad309a673517122d3cb5199c4af4b41b33b58d82009443cb6bd9dcb296098a62fff3e","size":137925,"data":"","first_seen":"2026-05-17T04:45:35.482496Z","last_seen":"2026-05-17T04:45:35.482496Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"27a5773a603825cc6999e48cc2b1b270","sha1":"9f46ca3ef617166776ef6014a58d4e66859caa62","sha256":"6792a7378ad3efaa577aaa68a96880aed193e09ebea3ac5f6e82514ff7d90c3f","sha512":"24202988a57d7b884ebf309eb4abbf956ede0e6883421c1ea723931cf5b53bcfc7540f8806359f9d1f8c1d2ee7c50e0f690d9d5a02e57d8c722bc27ca756fb2a","ssdeep":"","tlshash":"c710000003003000000000000000000000000000000000000000030000000000000000","size":2,"data":"","first_seen":"2023-06-14T19:29:56Z","last_seen":"2026-05-24T01:20:59.606006Z","times_seen":5623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9c544f4a35800554f427fb46666887f2","sha1":"248490b624d61b4254a83aeac683e20eda132e1c","sha256":"60a9f9aecd8b9fbcdcb3fa5b7980af1cc8a1bb0047ea332de239d78767773fdf","sha512":"c5eb74931b38e94b64482ac019decf43750dcc7eb0681deaf55c88ebea8b57807afd1bc250f418dffc0678df23c1bb29d51a607dc22c0ce5e9d5b1dda4cdc48d","ssdeep":"","tlshash":"2f70000abc0a200a002230220aeb0008002208002a020020202280800c3000a002ac28","size":22,"data":"","first_seen":"2026-05-14T07:07:11.187935Z","last_seen":"2026-05-18T06:58:26.164443Z","times_seen":2503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e71986b637f5ba004903aed4aad27305","sha1":"b3fbb5d01f0c7ce96cce8b03655238123281d132","sha256":"e246d5314827a9ff8e3c8023f83accef94f84906a0b5b964f7fd2049e8f69ea9","sha512":"37a550c6edec5473a81cbf26291dedfee893459f03425d62919f13a76c316f06a36aad47ce07cd62ef0e6cc6ba53e1d9e6e1130cc8a9c12ee79c533bf27fbafe","ssdeep":"","tlshash":"38b0129c5c166d5630532637141f0528ec39920b3d414488828cc300033c0fd10114ba","size":93,"data":"","first_seen":"2026-05-14T07:08:04.413107Z","last_seen":"2026-05-18T06:52:50.932486Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f502ac14e14405587d798139e860b5f","sha1":"b267cfc679f39f2d95f9d3fa41bca0eafb931aa6","sha256":"39d2483e41bf71db160191d9a148b4bc26c0739e732727e37be0f18bdc8cabca","sha512":"f5bc3d4834c9c4ed165d49476795fb1170fdc577b58fe4b21dfc67cfb4f6eebf045a3812ef48a2f15758e790ce7e111cf9dbd9ffcc3438288c7340e6eeb7661f","ssdeep":"","tlshash":"b1c022ccbb3e600d9121f90031f84e46cb4125ac4407ede3a70128b4448180aca1f406","size":194,"data":"","first_seen":"2024-08-23T10:18:17Z","last_seen":"2026-08-13T13:51:50.191274Z","times_seen":177373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c62bc4fd3c4e105cb3fb62fb748d59c","sha1":"f6e2d1e74e35ec4c4740ba02e890b98bda11417f","sha256":"9f4a6a370cd350425d8ac08047e7646116468672e99765ca198e6d463ee5286d","sha512":"5cb125ce0b7fdde81c6df58f6e27943a130f0d9e2a366d94ea8ed926da635dfe2b2c5778a14ed99bb35c7b2a48dcd12090cbac18370611d1c0438e1c2621efb4","ssdeep":"","tlshash":"6cd0129b738060e3d797fea709580020c1ef0b8402d2753d42d5d51070fe9ce83461e3","size":203,"data":"","first_seen":"2023-06-16T07:31:00Z","last_seen":"2026-08-13T13:51:50.093159Z","times_seen":193377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-13T13:51:50.067478Z","times_seen":257267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a57ac928a4a773e89a33aa8a0daf119","sha1":"361ceb464c7d7fac7ad54cfd5fe8c40648b05c29","sha256":"30be8c212723119dad38a6891db7aadedbc91b63583ce3c602051337dc58a17f","sha512":"0227b120d75134f165fb3e0f06cdf61ec737e5fe7ba3aeff3c9d42d979a818b34ef340b9040e74516a9b2dd0bfe9017f84218156975d3631de7fa56a5d6608e3","ssdeep":"","tlshash":"2cf097109c0bfc06de659c4e097e2c3680cccb768574cda9a1cccc4800629722bc1e84","size":509,"data":"","first_seen":"2026-05-17T04:45:35.594554Z","last_seen":"2026-05-17T04:45:35.594554Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bc93080ca45af811522ff869d64b31b6","sha1":"586b72412db7e416043fd524e3230e9e85227d15","sha256":"944e388b644ca7a45768df41d6d52ee0ac09e86b37ab34e63983b5ae60b89292","sha512":"edbb81feee16562274dc6e0116e361251b868c2e4094f08ed343a955bc2cebea989b05c971571deed37509521b5679e980749795f0ad677d1d85b942e7faf162","ssdeep":"","tlshash":"be9002486096705012225d2012569025b19e294544547858d14035402e1596c502650c","size":49,"data":"","first_seen":"2026-05-14T07:07:11.19377Z","last_seen":"2026-05-18T06:58:26.168897Z","times_seen":2503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"aa63d5477bc1539bafd1de83b3c0d5af","sha1":"805f0e06cc24f8c07dcd0923fa1a40cd95493bfc","sha256":"f8ceace2fdb70276bf5d59cfbfc4cc80c01ce881b0a0c7f7020e240b8cd7ff20","sha512":"582aec479f629d71ce1506dc14f63787724aaa50d4a8b6111b715def7c3b0f996798d3bad9682f99e1c72e460fbac86fc9739cb940b4df8bda7c496841585ca0","ssdeep":"","tlshash":"c2a0228c0c2b8c20eb020a30002a000ccc0f0008200c8c0ec0acc3c0c33ccfab30a3f0","size":78,"data":"","first_seen":"2026-05-14T07:07:11.106195Z","last_seen":"2026-05-18T06:58:26.199107Z","times_seen":2509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dd65ef9a5579d4e518c6d4abbd0cb1c6","sha1":"7b3ebc324268e66c2e58d3ac733f5dec5827eda6","sha256":"23cb4f8ae6f35bfb8cda975872f600d5cbfd7e34f3d4933d3861949a689e2cd0","sha512":"122df17f6a49162e17dc25c9ace2a2ffb834d47e597cc186e905cbff56ef207d03db9705b63a73af0c8eacfa37e61c7424444488caf97d716ed034f269ff2e0d","ssdeep":"","tlshash":"c7100000030030000000000300000000000000000000030000000000c0000000000000","size":2,"data":"","first_seen":"2023-07-08T16:49:27Z","last_seen":"2026-07-29T08:09:12.619418Z","times_seen":3183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"248f0e0cc68707cbe97dbb5565abbe93","sha1":"cfb3c4c915dd869209ea8c32a67d843ffd7775a3","sha256":"e2ce41c2498588c2ec58530b116af44de526c31af33dc25a0be64cefd3b8de93","sha512":"bc712d8a943ef27e649f6b816335954ad45045327a1a44d195afa9801502d7e2078b8dae2e880c12d5bbd77d9a11297139671b15872e0048f558c7ab042af241","ssdeep":"","tlshash":"c7100000000000000000300000000000000000000c00000000c0000000000000000000","size":2,"data":"","first_seen":"2023-03-10T13:29:46Z","last_seen":"2026-07-01T19:06:21.853047Z","times_seen":3627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5f3c6a11b03839d46af9fb43c97c188","sha1":"a7ee38bb7be4fc44198cb2685d9601dcf2b9f569","sha256":"86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177","sha512":"dddb9ec4c4ac04a2559d9b711eaa8e35475db3c4d6a7a06dde785dc83f3ed121710cb512733c8095ff346fc8601e7a73ecb53fac752010116e692b1ce73c8e59","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000c00000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-08-13T13:51:50.176111Z","times_seen":87013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"df52ed8d8a8beb90b56612bee1445107","sha1":"8d00ff76645323c937c239a6cf6130e751a6a333","sha256":"c23f160359a6bd2fa0798300601734ffc6a927dd2f3f4b63e3f9fe51f479bb8e","sha512":"44748f0b2fcb149050e3378b4728ac6214f20f1567982919a49e2532e5d7e11c09cd4a531393273ec8cf252d7251a035d6959abbd526e51a15a9cfb8c5857540","ssdeep":"768:v6SSywdIfsVcaPaZFTlVX9HmIua9SVjs6I9UjTU7NQoKVfgZ8uMnHyODkrpT:qcOaZlNmIua9SVtNU7WoKVemHyJF","tlshash":"a1f2c093f6f4cbd644248f1a2c7ed52fb26e856bd0250dcc4ec02606647ec29ca7f8a5","size":36613,"data":"","first_seen":"2026-05-17T04:45:35.600053Z","last_seen":"2026-05-17T04:45:35.600053Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"819d7a938dd7dcf576288542c3293053","sha1":"8de08c839d3024c902985c27a2dfd2352d0bcd49","sha256":"c22874b84f1c3ae90b2639a7b206855414d38377347aef5f8182a2d8af8c131f","sha512":"6ebd3a70e8a2ef35475e617fd51f3a8d0257eb037bc86cda1965e800198046597df7cef13253f2ad5131caaba3159ce569593623f96864f7a8b4e257eec26ff3","ssdeep":"","tlshash":"43a02223c028c8232038002000833002e0080320a800a00c030a830830e880bff8888a","size":62,"data":"","first_seen":"2023-12-24T00:07:31Z","last_seen":"2026-08-12T13:29:04.268263Z","times_seen":5967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/SXktXD7IgssctB1YeRWb5dtLTLR1yj8LSKAl5tlYnuY.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bb4a30d5906cfd5ac25418b157ca8c0","sha1":"1df100a9b49d74ce46c21b1d2bfff9451e38ada9","sha256":"49792d5c3ec882cb1cb41d5879159be5db4b4cb475ca3f0b48a025e6d9589ee6","sha512":"c364f8621e0734e019ca04f9355301a51da4e043ab7d3effe7ae3a088a95702a68b399c975cd631cd3502f9cb6e9a0b2b85dabf3be4d147fd37b4c9fe72b7101","ssdeep":"1536:jzTo85b2YjSnb18WOmlEpmpp6BilewF4Isz:5BnqEpq6gC","tlshash":"c95308dfb2c163315af331e2405b410aa2bead255c84286eb914e7f45b30c8b557bf7a","size":62511,"data":"","first_seen":"2026-05-14T07:07:11.078777Z","last_seen":"2026-05-18T06:58:26.135753Z","times_seen":2606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4f9f9ce67a2590c10b2e89a3ced8b428","sha1":"a2dc2adb39e07ed8cbf3d685e6b12522de2cd0b9","sha256":"5b72c2321040bf23a751f0798bc4c4763dc60c450a19b3d9f69de99b7f59d049","sha512":"789de7719aa6e44588fbce5f44417eeb606f711d733b56b5df927393cd86c4d79b21afae6a6e8cf1587e809fb77cb50d4eda21b5432041313c3f72aa2f71d35c","ssdeep":"","tlshash":"63d022a1958a502a31142286ca8b17c816b4ea037eac1961a7c8e8cae83402ac13e108","size":202,"data":"","first_seen":"2026-05-14T07:07:11.24471Z","last_seen":"2026-05-18T06:58:26.157931Z","times_seen":2537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/media/797e433ab948586e-s.p.09zddjkbdep5a.woff2","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/media/797e433ab948586e-s.p.09zddjkbdep5a.woff2 HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230614\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"797e433ab948586e-s.p.09zddjkbdep5a.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: \"075226e68ad06f734d7920a0fcd35b39\"\r\nlast-modified: Thu, 14 May 2026 12:41:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/797e433ab948586e-s.p.09zddjkbdep5a.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::ndfnx-1778993088002-8950a7879778\r\ncontent-length: 29972\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":29972,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29972, version 1.0","md5":"075226e68ad06f734d7920a0fcd35b39","sha1":"ef6dca3a2a3646c3935f3d46a0879dd780ea7f9f","sha256":"d862e0cb912309b51e5408427216d449095092c53345af79ae9da917fb3fb8eb","sha512":"f639cd367328c30b7d1dc790511e8c3f288886f91fe21a0e54c48c9bff70302962f28a20215ada81b4e269437c8bd397cec7ae8c96c2b4b952eac5361cd85bfb","ssdeep":"768:FzbzCDmLBtXaaTN5g+F+wCByvz0rcUOPPxsT9nvEb+D:FHzC2BtqaTr9F+wDgrcUO2OQ","tlshash":"cad2e1b0c3fcf815e992ceb3b1a51c6b76e20d2d433b60c9807f659a88d5227a948f04","first_seen":"2026-05-14T03:36:35.107349Z","last_seen":"2026-08-12T15:50:33.680649Z","times_seen":3306,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/17u9rrasdmbe~.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/17u9rrasdmbe~.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230613\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"17u9rrasdmbe~.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"75f896d3e71c044d0ddd97f17b9b8691\"\r\nlast-modified: Thu, 14 May 2026 12:41:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/17u9rrasdmbe~.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::zqgtw-1778993088009-6ad097bccfbb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":227300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"75f896d3e71c044d0ddd97f17b9b8691","sha1":"77f9c57d18f75a915449fa5719ff7f9f0bf5c8c8","sha256":"964d2a42d09b984ac9a471229642a307f174bdb1c6670c92264fdac718b2b942","sha512":"3c0991896643a8836d63f1ae4d0b06f8314d061f8d28487cc0f92f0ac6648492fca8a7f4307472634bb7de7f879022f4757c1b6eb5afe9239597ddf1a4a6e562","ssdeep":"3072:bLLtyhMDyXcY7E704KAtBGM8BsbgISmZJ7XkqMA2i9nynDTgXi:bLLtWOyXcYwAAJv70yn9nynDTOi","tlshash":"c624fbe83995f6626ab302b710af18037338252b280d4d60a351fd9db57845fb17bf9e","first_seen":"2026-05-17T04:45:35.405369Z","last_seen":"2026-05-17T04:45:35.405369Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0h.y9cwh-yq0d.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0h.y9cwh-yq0d.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230613\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0h.y9cwh-yq0d.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"5ece9d4a180d45e2fc81c10bd7740b90\"\r\nlast-modified: Thu, 14 May 2026 12:41:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0h.y9cwh-yq0d.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::q6ldf-1778993088023-4c7c88fc7b08\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":119620,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5ece9d4a180d45e2fc81c10bd7740b90","sha1":"b18379d5f4fffcf1f1fb85f3a429d9b56ce2da08","sha256":"5a33a9c0f5a1d181010e6da5353bf81f2c6587df47c13e5bfc942e62709329f9","sha512":"b7680e803e93d44bfcbde1571efeaf71e5fd7437df3ad969e99b78d8e456c9ba3506c5ce5b9738baaf44d7203f54c968efd523ad5b23b4df8c219852f288ece9","ssdeep":"3072:S0h8RiPAqJOH8ofeG8gVc3quoVBEiv4Dp:ScvPAkOyfb3quo8iAt","tlshash":"07c3f7ddb242b472069b62b1403f060bb23b9998740f44acf269d4d97d3c89d917bf7a","first_seen":"2026-05-17T04:45:35.407828Z","last_seen":"2026-05-17T04:45:35.407828Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:48.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 20:57:18 GMT\r\nexpires: Sun, 16 May 2027 20:57:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 28050\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-13T13:51:49.899188Z","times_seen":963691,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":65,"dns":1,"connect":7,"send":0,"wait":10,"receive":9,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 14 May 2026 23:38:18 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncf-ray: 9fcff8196abeb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-13T13:48:06.705275Z","times_seen":93439,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"17fa2497bdae7324a17eaedfe6fc8650\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff81deaccb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11596,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"17fa2497bdae7324a17eaedfe6fc8650","sha1":"27bce6a96d49d0077bc16228801a3089fce5be2a","sha256":"cce37a30801a132937edb0ac257f4ed917559c00d6a648716bd9ac406cfc62b1","sha512":"f4155fcb97d0180daa46cb293cd70f01b984c39f9895f76a0acc098b0c5f86f883378620e75f8fb79b0e0b1e5033e4ace16046bc48ca2a9c2127053ae48be305","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9KvKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59t3Zwfi","tlshash":"98323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2026-05-13T09:28:21.606546Z","last_seen":"2026-08-13T13:48:06.588902Z","times_seen":11521,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/favicon.ico?favicon.0y5dzb6~91ktw.ico","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /favicon.ico?favicon.0y5dzb6~91ktw.ico HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230612\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"856e165a694d35ed72097cc768f014af\"\r\nlast-modified: Thu, 14 May 2026 12:41:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::9tfq2-1778993088233-2eadb911e9c2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":59586,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, -31x-31, 8 bits/pixel","md5":"856e165a694d35ed72097cc768f014af","sha1":"1d1dff32b7bf178fff146922e431117c4d5d8c34","sha256":"0c8e91daf1f53a77f2e1f22707bbc060ff7cf39d535781084552130b04b89260","sha512":"fcf9563a2dbeebeca85af3ed060c7b3b37fbb5b660d34e950b36e2324a72f4839cf12d539d56ad8debac4a763271124259716fa662af23bdf9f08b2d95e97200","ssdeep":"96:y6y2zqHAbEs/zMChWxkmdtrGf9vP9ae1+K2:y6LoAAqYCcik5Q9vPU","tlshash":"814314c5be0a8175e9b837b918da162d1350d38d7062490f77e4e8acdb75a377d38c84","first_seen":"2026-05-17T04:45:35.415622Z","last_seen":"2026-05-17T04:45:35.415622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:49.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://www.youtube.com\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 272\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 01:44:06 GMT\r\nexpires: Sun, 16 May 2027 01:44:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 06 Sep 2023 03:18:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin\r\nage: 97243\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":478,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e78ea4caa31c35bac97a41e5930ffe8","sha1":"dbf99131b9b5087e664b9fdc7097c97655474517","sha256":"6fa88a20839537ae66da730e5bd183035265176d972bc8df075b89da0c6186ea","sha512":"cf798ef67c90f90f23635beb202095a2c76052d491c224aa14535bb9b16f28fa9a850b8db887f158afd01d634aecb9e2b05a27efdfd225d3583e6297bdd78b43","ssdeep":"","tlshash":"2ef09e6d577829d8930f87c0be5974127d9f23e85194b3b541d4f9326138ee2d141cd9","first_seen":"2025-05-26T15:52:21.952281Z","last_seen":"2026-08-13T13:41:18.313838Z","times_seen":49390,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":39,"dns":1,"connect":9,"send":0,"wait":9,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:50.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":92,"dns":1,"connect":21,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/media/caa3a2e1cccd8315-s.p.09~u27dqhyhd6.woff2","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/media/caa3a2e1cccd8315-s.p.09~u27dqhyhd6.woff2 HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230614\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"caa3a2e1cccd8315-s.p.09~u27dqhyhd6.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: \"f4634c3bc1fa7cb53247e1f2872adb5a\"\r\nlast-modified: Thu, 14 May 2026 12:41:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/caa3a2e1cccd8315-s.p.09~u27dqhyhd6.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::qfswx-1778993088003-cc4ec62defe1\r\ncontent-length: 29288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29288, version 1.0","md5":"f4634c3bc1fa7cb53247e1f2872adb5a","sha1":"9d846db84c501327431670fe23b1a8ea1d2a5349","sha256":"9b6f5ff45b278c744b5f379a2c4ecbaf858a842b8eaf82ac8d21b699ca16c608","sha512":"e480a1ca3a52fdfd2f59daf185b56c9f203c4b0daa7a36537410ccefee9bfab229308145026aeea53a49d02cd7f0e89de8d4c05ec15fe80a2b09e754197afa49","ssdeep":"768:ePXLNqwQ5RnlpBAyv/2+NR6C36OojNMUp06QIhgXZY2Ko1K:e/LNHQtpBAQO+NR6k/eFp06zE0","tlshash":"27d2f155036f442269023b6a0619a9a0c172469fa9bd73c2407a6a931f67fd7d37dc8c","first_seen":"2026-05-13T23:24:18.838523Z","last_seen":"2026-08-13T13:58:14.559774Z","times_seen":11600,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/turbopack-17dc4m~n-vlcb.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-17dc4m~n-vlcb.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230614\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"turbopack-17dc4m~n-vlcb.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"eed462a84942b3f8b2c79a882375a205\"\r\nlast-modified: Thu, 14 May 2026 12:41:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/turbopack-17dc4m~n-vlcb.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::9htlt-1778993088010-15188b426a3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10947,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10508)","md5":"eed462a84942b3f8b2c79a882375a205","sha1":"2875d2b9abd8d5cda1dbc75630952250ed2d0931","sha256":"4b0b7d48660acf44f43c700bda1c92488a6b1cb226fa19b1177659758f2fac0b","sha512":"bfde2d79892567664a07e12976c9da152c232925ae9b209b173e4dff2c8246f665ca7fd0d8270c44ffabf354510af883cf3cad73cb2ecdc71af69f99e86a7b58","ssdeep":"192:fl4gMFA68PEsg6d2hEryxlO6yD+03sBT4fCT2cXX6ufH+yLx4:fl4gMFYQJlIy+sqCTPOyLx4","tlshash":"9d32c7ea33a6f07343af90ebd07f4004f1795469145e581c939ce8fa28354aa89e7f76","first_seen":"2026-05-17T04:45:35.419569Z","last_seen":"2026-05-17T04:45:35.419569Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/login?_rsc=1pn8p","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /login?_rsc=1pn8p HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 274530\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: W/\"4376fc3c794ada0f3bcd7776e4dc48ad\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::npvs8-1778993089093-105a0370ad57\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1221,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (732)","md5":"34dd533aec236fbbd9db361e857004f3","sha1":"3b8fb1096c12c53273086a2baea63f46751685d3","sha256":"059124630d937168c28621c70db32170573cdd4f10a93e078516c84fbd09939e","sha512":"6c35cc9d111cac4f2dd7b6c7f01c908f0d50c44ba675b6a99a1ec52ea66b30ead11a86dc02a231b92513edb6828f5dee360f7c143115226523b23e7258a330d4","ssdeep":"","tlshash":"3f21ac3a8909fc6e1d76c849185fe31ba29d1b339a794cbd918dcd1806890372bd61d0","first_seen":"2026-05-17T04:45:35.42096Z","last_seen":"2026-05-17T04:45:35.42096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"585323c7107bc10410961b74e1c9e4e6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff8196abbb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348599,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"585323c7107bc10410961b74e1c9e4e6","sha1":"3cdb46391a560121b5e594ec3fcd8520e1c14a9e","sha256":"61fd6d8e0505ae224718e61791fb4358222c0b577e69391a0f780da30b08b9cb","sha512":"e267e688fc348acd1200f0c467613110078776e47b9aefe93ee57a22d62ca0cd3eca3caa5e5e97ea65a512f7e45281d82a07ece1225cd2b32dc6bdf52e74ff58","ssdeep":"3072:2u82gJcBg7MO79bp9t0fFA+1/hnWwet/NoZmg55+5Ar6VKkOPGWS:jzicBg7MOpWK+1ZWweBNo4++5Ar6k+WS","tlshash":"9d744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","first_seen":"2026-04-21T04:02:24.325062Z","last_seen":"2026-05-24T23:07:10.343258Z","times_seen":6534,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"d87551d81e7185c20c2c5071eee9d207\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191114\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff820f84c2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14213), with no line terminators","md5":"d87551d81e7185c20c2c5071eee9d207","sha1":"108a1401185f3849a63098616203401de788d09a","sha256":"f930a06ba663b30b474e7fcd2319a0397b0a6577e02afafc504b5d372122d50e","sha512":"3416bc6d7f421597d6a03e773d6cb0b550b0456139dedb8b12c0dbf462bf71891b78bae5e2ae757e48b93da13454faefdee5430d96082e36a35a902b8ee21d32","ssdeep":"384:UJw/U5YK8Hx9KJ3ThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJ3ThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"8a52c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","first_seen":"2026-05-14T23:47:36.097744Z","last_seen":"2026-05-20T04:16:57.461724Z","times_seen":652,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, base-uri 'self';object-src 'none';script-src 'nonce-jqWxn4WaJdQO_yo2EW0T3Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-YNID=18.YT=Lk3KoDLz09FsWiv2i_n_jO7CzXNHhOCL83HFGDo7fr1aNJfDE4DwUbsW-KU1T02ZO5OjWxJFJP0L1jvsZP6pqGdiKOqHEmRMrocMtb0EZBHxKWMSV_fse6dODUoqgJldo_KfYEHmeJZZqfsQbPNVwh8CIODfUOpf-VoYNJJNSnRbtrq9rW1bt3ZD6B8EWO3wMAsJ3rszcp4KNOeHKR3YqEbqAMwiggM9xe7TdaKUZv-NCSa8POZCHtolPX2zvfvTefsUrvO4kJA6t8XjKUdRq3yrXIRHqIRbJwijmvbEvpZQF_rDXiDoi8o-ej41JJ8UY2yVgCGg9vyqzXE6b-DSrQ; expires=Fri, 13-Nov-2026 04:44:48 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=a7R8HoQCgYk; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CI3Q8Jf9kN7AQhDovNXYwb-UAxjovNXYwb-UAw%3D%3D; Domain=youtube.com; Expires=Fri, 13-Nov-2026 04:44:48 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\n__Secure-YEC=; Domain=.youtube.com; Expires=Mon, 21-Aug-2023 04:44:48 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=MshqLOgYqF4; Domain=.youtube.com; Expires=Fri, 13-Nov-2026 04:44:48 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgPQ%3D%3D; Domain=.youtube.com; Expires=Fri, 13-Nov-2026 04:44:48 GMT; Path=/; Secure; HttpOnly; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141927,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52140)","md5":"61313fb22591ec19da2c492ddbd17d81","sha1":"e3028e327a069f9a8dcc04423d61ff7519127b07","sha256":"ba35975734f820b9ab963b208f6c7a1840f0c9ae167c20b04fa497ec83c75530","sha512":"5f7b2e61de7bd09c94266f354c89c19fd8791a9ca2c1cef61d5b784f815cbf3ca70eea1e1fcaa9dde13e415eb8e1887690c7165d5de027f8c27cfd7a76971c8d","ssdeep":"1536:bVQRLOS4yxCts+wht62I6viFjJ5d4jU2wgvcOaZlNmIua9SVtNU7WoKVemHyJr:p7yjS3v2wgvtmhitNNHy","tlshash":"a5d32d254858a876c4939807edbaff3eacf8013947c9956dbcbb975c01dca610eaf413","first_seen":"2026-05-17T04:45:35.424893Z","last_seen":"2026-05-17T04:45:35.424893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":88,"dns":1,"connect":7,"send":0,"wait":65,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/register?_rsc=1pn8p","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /register?_rsc=1pn8p HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 274530\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"0a1d7f1fcbd9b56693159319062e3242\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /register.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::ntnv2-1778993088881-62ddb0a9e8fb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1221,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (732)","md5":"34dd533aec236fbbd9db361e857004f3","sha1":"3b8fb1096c12c53273086a2baea63f46751685d3","sha256":"059124630d937168c28621c70db32170573cdd4f10a93e078516c84fbd09939e","sha512":"6c35cc9d111cac4f2dd7b6c7f01c908f0d50c44ba675b6a99a1ec52ea66b30ead11a86dc02a231b92513edb6828f5dee360f7c143115226523b23e7258a330d4","ssdeep":"","tlshash":"3f21ac3a8909fc6e1d76c849185fe31ba29d1b339a794cbd918dcd1806890372bd61d0","first_seen":"2026-05-17T04:45:35.42096Z","last_seen":"2026-05-17T04:45:35.42096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/login?_rsc=1f8nk","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /login?_rsc=1f8nk HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp/login\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 274529\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: \"4df92c1dc177bbc84c75bd29102e9fa5\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/!KGF1dGgp/login.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::27fn5-1778993089116-88022b38bab6\r\ncontent-length: 525\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":525,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"20ec4a335efbe506606aec63a41ad76e","sha1":"fe5ac5b8086a582dd046a368ada3e01b98fca77e","sha256":"4af81a5fad6e7c462389169411597d6135623702d6c52d643c411ae4cde0c869","sha512":"a6cd2c72508a9a629ac61af5bb8289c6c98fd91ea4f5cc176f2ecef55c5163af1dbf554d10f2649f65168b4d7814ffd8082943a87ac07b46ac79a61345af3e6a","ssdeep":"","tlshash":"8cf0271b955dfd6a0c30c80c581e532b529e4d776a7658bcb28ddd9802824762bdb9c0","first_seen":"2026-05-17T04:45:35.426463Z","last_seen":"2026-05-17T04:45:35.426463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/mission?_rsc=1pn8p","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /mission?_rsc=1pn8p HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 274530\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: W/\"4bb7bc0ac83c6d1de788f9915e787271\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /mission.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::npvs8-1778993089148-e79a6c19a036\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1221,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (732)","md5":"34dd533aec236fbbd9db361e857004f3","sha1":"3b8fb1096c12c53273086a2baea63f46751685d3","sha256":"059124630d937168c28621c70db32170573cdd4f10a93e078516c84fbd09939e","sha512":"6c35cc9d111cac4f2dd7b6c7f01c908f0d50c44ba675b6a99a1ec52ea66b30ead11a86dc02a231b92513edb6828f5dee360f7c143115226523b23e7258a330d4","ssdeep":"","tlshash":"3f21ac3a8909fc6e1d76c849185fe31ba29d1b339a794cbd918dcd1806890372bd61d0","first_seen":"2026-05-17T04:45:35.42096Z","last_seen":"2026-05-17T04:45:35.42096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"969377977456ddf0b3155a189ad2e092\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff8196abcb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"969377977456ddf0b3155a189ad2e092","sha1":"23ae3061207ec70860f28f765a7c82c68e935bbc","sha256":"955175b3bbb7006677586dd63dc5337d3d9f40ec87835adf07e6dc250fb399a0","sha512":"637e484ad1643ef28d1fae645113c62ce2a81109632913a12ffd928c13e3e7ee66a68d512705bb2fcb5f503e12159ff3cd89b76d3f81a21f8c4a1099ba0b022f","ssdeep":"3072:tiEIYgAYqhzhT9dyWFW1WfifM4AO5MxzjQi4IzxLMz9YZ15:tXyWFW1WKfM4ARxvZLMz9615","tlshash":"0f34c69df186b47606a37130501f320af23a685ab45ac4d4f636d8e1bd789cea133f79","first_seen":"2026-05-14T23:47:36.164294Z","last_seen":"2026-05-20T04:16:57.470786Z","times_seen":738,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff81deacdb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-13T13:48:06.641654Z","times_seen":29240,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 181\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":181,"data":"{\"p\":\"69f7710848ca411c3004e383\",\"w\":\"1jnn9332f\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://www.qfs-ledger.site/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"kcE-EmQfJMOG4vMQ6t8EZ\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-vl91\r\naccess-control-allow-origin: https://www.qfs-ledger.site\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9fcff81ef8342678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1033,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"57acf6d73b8bd87a52ac99cf7e98c79b","sha1":"a65f37c9eb9ab78fa2aa723173d8949ab8c8e88a","sha256":"acd2996cf7fe6e78e0e81e343858bb417115ec4c9ed7d18b8cc76a17397d346c","sha512":"b6b6b9f46a10a1f1a8fb0895d30f716e3743d6726952e1ce62d21dcf0054b66a0bb90a66c4e73c09ac8524ca136a498e14f2480e639c64b4aa38127daa6dc92c","ssdeep":"","tlshash":"6311025f1fce0f1977e77f804ea53c0807cce292ab958209d2d69e4d75612391d8686b","first_seen":"2026-05-17T04:45:35.428966Z","last_seen":"2026-05-17T04:45:35.428966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:50.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1710\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1710,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$Ir05vdlRAAZjh4V_Q4feRaj6ZJWboWunAEABEArZ1IsqkkpUFdUuJJydZcgT80FFf9fdITrcQxD1bkBFMVkrjxzDpJDnI2DJpoFZq-AW10n2m8nLhtzdmc6kngAAAcbOAAAAJPQBB-IAUsuBmJZIcLOre2-vIGnVzE3Gay3VQXOmzAAVGDTvBi5crcNVyJbp8WOsa0WX6ReA3Dwf-fg0yZNEesVuF_sjTm8SB-AJqDMz-bfGoG2jaKq-qBgFBC6aMKyL1Uuv8gEllJuhK_8oa8ld2iGPDQJFbdB086XTXEzgspJDFzO7oskBMkRSlAfiMVZCEJWrjRVCcDs-629To5x47iaJgXUk0l9ShhyVYD92cj0BgvsmSFmsKUmktRj6S3I08pc-ECY0F4i4e_qEJVJJ0Em7-qetn8rg0yHAGfMU2etRn_mNFzVJX_hOn6PiZj0NiAgDXBHlp48muC3dcVUedzac_VUrUu2mrU1X1OaWSKlDtR2ks66lD9Xfd0ScjR4qBDZr6N_mXT6wJDw6hM2F6bw1cHjsd-W9S4KBZ_gqQ5DdoyO749mRsG9ZJL4IrfmOxmsSeYWL0DXJZ4rvKRNwVMWmsVOqB32Aoxa4ySRTm60qZPxnkfDnQ60Ge5D741fPG3CfZ3bde3jpu5yUV9qH0tL7C_Ez18RFccoivApH986bgWP2BG56RG0OOdr31QKrEy92Zk6gb-PjkVqAMba4uArWQrlgJEJd1LJomgmUWLB_WWjmw5zkuOCpNUqtO2mjcXbdVkvXsfBjXNZpYumhGuFF32qtbdZ5H49E1hHE-hXRUCcselxV-kYOkKX6jJ-y6Fen98o3NHsA9tfsG4tYKwwro9XXe07DXgmpbBMac-Y428hg891iekaQw3L5npL_DmgVgAX0Z8OAZdI3S8PM5dAiHIyV31IG896QtyEYmRaI6_UzW_vKr4lKb1uPMoz0NT5JKqQhSXgMDncec5_VWM3pjrZBzVWv1tCsCSDzePERaQEE1s-1KMQp3hY1wPc7RQ9LPp1ALY8onR-OaxcjDLcd4SHs_DSdLwbm96eVGlnj0bIVJ7EAuxUMsrmHdUOjbsO2UDVkM_5I4Y-12gwplbUVdPoUZz3-ArladMz9uFCxC7l_aAB8KFFGK5EWnCb2ZXWv0qnl2RXdbFobXeGOV-_EFHO_HDOV1zlocbXjdT-lVMoL1CLDEpLD9OQ0jxRA89rP2GanELQo0VYudISm4xHGi_FTX1td4N1g7MurTPbYH20UwNHZjmDiV5Ex5iPPf_HtmJNUPhxoI4PcR75Z6VCj2s21wAuN_cEkSatu-7fhGKyBS5dDu7ZxERthbUh21mTu4-o0J52iFoE_vkv2z68VqaitoVomOEd5JjqFs9xJXmahdlv65UX_wCMU0JotlQwIvXFuGifT3P-tLugZDSUbVUmGnWFTOOogTNPqtN9YjJwj2b0e50SJuUY9weoximCoXY6tn1jvcosJ_c9awyBZcWCthYi95R5dz9EElOhmCRtVUjo1zFVW6acDg2RyI-GSw1_k9UfaktW9XZwFGfCw_COJ9PNbJ8q4BBZRKYjjBq0KKFX1a7n07R5OXwmkL5Ik0XMRQfmm2PdK7i9mP0Sj3-kFYgOO7RaIhh2fV9dF5hkNn8xgdnaJRh6m1pgzTIWjDAXDiztJcw\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"d9de3c925dbe488ed3504e3133ed1597","sha1":"423aac3a268dea9ba65b7706350264e0a6809742","sha256":"e7a0e095f3e8315e680acbb5551d010a9eb80075c0903a9031db8185ece3d5c8","sha512":"f7a61213511b624ba3a9b3d8607d6d62fe40ec82b0bc156056f30a6c1626e0604d809029265305ebaaa735ea7c3a5c22e8a78cdcba8a1d0cff7e71afea456364","ssdeep":"","tlshash":"15b0124100dd3e78af6294ca96901a07584c21c125004553c5d005ae0ad9590aab2267","first_seen":"2026-05-17T04:45:35.430163Z","last_seen":"2026-05-17T04:45:35.430163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/02d6f2-8_s-0_.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/02d6f2-8_s-0_.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230613\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"02d6f2-8_s-0_.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"9cb0651229edc4f7f2e5eaacbc0fa079\"\r\nlast-modified: Thu, 14 May 2026 12:41:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/02d6f2-8_s-0_.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::q6ldf-1778993088018-db4c79947f25\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":54647,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54645), with no line terminators","md5":"9cb0651229edc4f7f2e5eaacbc0fa079","sha1":"10df4470dff22c583e9c87be9454ae9ce5285f1b","sha256":"149d127042b04dd6037e1db14a952df24d28ad7eddbbe68493f34f20875c9330","sha512":"747e9b0f9a99828416f22e417ff6b1fbe75d8ebd2245223e3b90baa724ecb93708f8dee1ead1f17007272188ec2465d3bdeb793e3e7196558dffb7611abd3b67","ssdeep":"768:bJBWstOoGyfwqD9Cmh6FTzVr3CDFZ0vGqYcztV:1wJsfqB3TLYotV","tlshash":"f233d9b53395faa302db91d9c0370012f2780d71309d64b4b394d8af799dd8a92f6f6a","first_seen":"2026-05-17T04:45:35.431418Z","last_seen":"2026-05-17T04:45:35.431418Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/69f7710848ca411c3004e383/1jnn9332f","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /69f7710848ca411c3004e383/1jnn9332f HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6a065cc0373\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9fcff81328b2569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"ecd41dab2e10774ae276c9749802905e","sha1":"d2da5fdc8b6a55bd680abbb1c77cf9e3c2066156","sha256":"8b07001216e989148ec7ae78708cb4e734cd291840516768081cdce4c7d4eaa2","sha512":"710e1b5c3cf5d2f7a80080ce335455a74330b97b03ec7a53b13a1db908c0d1265c805dafa7e25f6fb2ce970032f6c1f6f772b2b94a01b04cd44c33b2f4033616","ssdeep":"","tlshash":"b94110db9b4f1853d22420d80cbefd4eb4b7b1e2489d5c834708440077667ed268dd39","first_seen":"2026-05-17T04:45:35.432929Z","last_seen":"2026-05-17T04:45:35.432929Z","times_seen":1,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":54,"dns":35,"connect":1,"send":0,"wait":487,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/mission?_rsc=1r34m","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /mission?_rsc=1r34m HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 274532\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: \"e46eec068a816855556f194c46d22a07\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /mission.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::npvs8-1778993088497-73301acdcd6b\r\ncontent-length: 543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":543,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"6408ad2eeaaa634cb6528f93e1b49ac9","sha1":"f7dc9d53bf1f94e91ab381c0298b8394ef5560dc","sha256":"3db9d2a3d3eaffed839cb4c86b4f3e4da456d257d25f372d2ff9a59c306a9e5f","sha512":"09d23f61ff6a16c0874d3c8eda7c515e734a5fca906832fb7f0fef0172cb91864983a09b4606f0f466670b46d85c7d9d56e3ac03f96314dfe0bbeae2c30afc57","ssdeep":"","tlshash":"87f02b328509adc56ce0d458176ae70a106c693370b94c98d4cf9e9007a613e1a47b47","first_seen":"2026-05-17T04:45:35.433947Z","last_seen":"2026-05-17T04:45:35.433947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/login?_rsc=21zia","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /login?_rsc=21zia HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp/login/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 274530\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: W/\"123d9cee1973e026034fd82c809f94c1\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/!KGF1dGgp/login/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::27fn5-1778993089128-e87dd1a8c062\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1063,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (424)","md5":"9fa85a9f192dc26bc1f413e467ba8f63","sha1":"5284ad334505d17fd8b90db3e64b81353d26a22e","sha256":"7a4608d6782807f8a74888f9e60c9dd51460b6ae8afcac2b96755975d1b5a5a3","sha512":"b74b0ca00d5ae76443295961172d12905811b700d0e3f6401fb560e8badbcf1fb3c9bd4534bd3b353063e269b4f0ffd9ed79b8fe0496bde00e40595e0e6260d1","ssdeep":"","tlshash":"7711591bc90cfd6b0c71cc0c2d5fab27628e593399364dace29edca8018987727ca4c0","first_seen":"2026-05-17T04:45:35.434879Z","last_seen":"2026-05-17T04:45:35.434879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/mission?_rsc=11uob","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /mission?_rsc=11uob HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /mission\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 274529\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: \"9f5b5790b3ac0690d938302d9f264942\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /mission.segments/mission.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::ntnv2-1778993089243-88bf4fdd6d3a\r\ncontent-length: 525\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":525,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"20ec4a335efbe506606aec63a41ad76e","sha1":"fe5ac5b8086a582dd046a368ada3e01b98fca77e","sha256":"4af81a5fad6e7c462389169411597d6135623702d6c52d643c411ae4cde0c869","sha512":"a6cd2c72508a9a629ac61af5bb8289c6c98fd91ea4f5cc176f2ecef55c5163af1dbf554d10f2649f65168b4d7814ffd8082943a87ac07b46ac79a61345af3e6a","ssdeep":"","tlshash":"8cf0271b955dfd6a0c30c80c581e532b529e4d776a7658bcb28ddd9802824762bdb9c0","first_seen":"2026-05-17T04:45:35.426463Z","last_seen":"2026-05-17T04:45:35.426463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/mission?_rsc=1xp58","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /mission?_rsc=1xp58 HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /mission/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 274529\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: W/\"265ce42dd50b76f71dd6f7e3596d1b8c\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /mission.segments/mission/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::ntnv2-1778993089404-554456d2c5a8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (772)","md5":"e41e6c2f97dc9d41ba58da5fe9aec12f","sha1":"6a03b1588d318e731bf2b2da8279dadea4667e24","sha256":"6e21b1e54bda611857207f75b6cdec14e722bca66f2aea6eb1444f4e36b5c03f","sha512":"1a96899f50420b63ea03956b1954b60851e19c200eebe66950aea040e4f5e662008c79ee6d8d49d7076a2c40ed91ebdc4cdd1ce3f710ac334126375488245c96","ssdeep":"","tlshash":"cc31331bcd19fe9a4c21cc5d292fab2762994977c935cc5ce2ceecfc014957a2b891c0","first_seen":"2026-05-17T04:45:35.435765Z","last_seen":"2026-05-17T04:45:35.435765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9fcff8194bf1569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-13T13:48:06.640639Z","times_seen":93410,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:48.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 20:57:18 GMT\r\nexpires: Sun, 16 May 2027 20:57:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 28050\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-13T13:51:49.899188Z","times_seen":963691,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":76,"dns":1,"connect":21,"send":0,"wait":8,"receive":12,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/register?_rsc=utfv4","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /register?_rsc=utfv4 HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp/register/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 274530\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: W/\"38d20f958268f76ad5c643d9af45ee3d\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /register.segments/!KGF1dGgp/register/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::ntnv2-1778993089052-59cb25c86d66\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1063,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (424)","md5":"3528e1e7b362f04851a32679c5c3ee11","sha1":"6d163e7dfb63cc6709fe65b783719f2b08e6549b","sha256":"3e9179499685d6c60f5d5828d11f066fd418e1bc042288d3c800e8f9df3fdf0a","sha512":"007e64d899b13600069bfe16aefb3956493f74bfc814707cc59cb1bcff09557aa038494af27939d42339a40953af24abff978777b1911944c9ff1a2019cf47aa","ssdeep":"","tlshash":"63119b1ad90dfd9b0c30cc4c3d1fab27629e493799754cace29ddce8018a83617ca4c0","first_seen":"2026-05-17T04:45:35.437316Z","last_seen":"2026-05-17T04:45:35.437316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0cdrhlfp_fhgm.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0cdrhlfp_fhgm.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230609\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0cdrhlfp_fhgm.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: \"c705e5adaa80aa1b977f46ee334409e8\"\r\nlast-modified: Thu, 14 May 2026 12:41:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0cdrhlfp_fhgm.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::npvs8-1778993089112-b6f0cd6101fe\r\ncontent-length: 877\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (877), with no line terminators","md5":"c705e5adaa80aa1b977f46ee334409e8","sha1":"10facbc8522eef5253c8adb53d12cffa6ae0eea3","sha256":"5422187af0abcc3fd31b4c68b93002a09d9e309163ae399711032df39a1f6f81","sha512":"8018623db02481b2522fd8c0f99e68e520853167ecbbb62342cec3b4f02d1d4d0aef56f16f57cbad4dd8705630d3339945fde14400797769027db9cadf36179c","ssdeep":"","tlshash":"901100112006f8e86d3a00cdd076454db6286e34724f16acf1bdacb1a633a04f894a95","first_seen":"2026-05-17T04:45:35.438263Z","last_seen":"2026-05-17T04:45:35.438263Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0frbt74s_bhb9.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0frbt74s_bhb9.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230608\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0frbt74s_bhb9.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: W/\"24d9c695870dc2e20232feacc12b1e30\"\r\nlast-modified: Thu, 14 May 2026 12:41:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0frbt74s_bhb9.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::8dlxv-1778993089522-571620331c3a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137925,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62698)","md5":"24d9c695870dc2e20232feacc12b1e30","sha1":"3f5ee0799a652f9a2fadaab184db47dfc2d2c21c","sha256":"26e6a62ede5156d0a3a8baa8bfec124f0b8a624a45cc6167798ba3c7b5a87821","sha512":"757fc38a2b558c06e05d20c815c41c08309d87d5ed177fb7c7fd32bb3c84ebd50b7c94df8a4d4ad3c92db4f79695aac90a85ec73e601ede669bea27609cda7c0","ssdeep":"1536:7zDRq1Er3bsgDNLKmQx1lGIH80Vc36vGdWGI+/ENVNxRI0KPf0NsETUIgpwce1+:72CeUIH8wGJ/E9boHh","tlshash":"aed309a673517122d3cb5199c4af4b41b33b58d82009443cb6bd9dcb296098a62fff3e","first_seen":"2026-05-17T04:45:35.439263Z","last_seen":"2026-05-17T04:45:35.439263Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?whgk3w","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:50.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /generate_204?whgk3w HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"92caae85b6068c0470f35b7cd9b95bc7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191114\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff820f8492678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"92caae85b6068c0470f35b7cd9b95bc7","sha1":"4d4937db3d441e377496e244fac167d0be449698","sha256":"f56f6661967357c99e02d53150d8abedb0717bfc2d96847251579e8ec8bc7fd4","sha512":"1fb89a2ad71ae18252bec404205e405845c994eaae3b9bde58cb28e7e17b6325d71928df46be34839939e920ea70d282e2b00127c2982d8ecbb85e11d7f7f66a","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCWGN//h6LiJq:SzP2DASLi8","tlshash":"cb822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-05-14T23:47:36.130549Z","last_seen":"2026-05-20T04:16:57.449102Z","times_seen":673,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"ab54ca72c3c39c91c49d4f94616e09d6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191114\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff82118502678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"ab54ca72c3c39c91c49d4f94616e09d6","sha1":"1abf8ba59878edc7d91a4e0c6264a7ae36dcf7d0","sha256":"8ee7e5b006ae2ca5e35a3b9f907486d778268bafbf62a7fd8bb4da15e1a0180a","sha512":"4fa9cda99be9dfdff6349f309a1bd888e5c7a9d3362ac34047f28ab8df4b857482bb14ab743d0f5e02facb0a4279f8e993472b20cdcb22869a1836728a18631c","ssdeep":"96:zNC9Hqt7pEma7hY/rcKJJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYfLRIvgx43nVY","tlshash":"a2b1859ef247b456c156225150ef3b1df33a281ca61ccdc4b66565f218784cba077f39","first_seen":"2026-05-14T23:47:36.142565Z","last_seen":"2026-05-20T04:16:57.454174Z","times_seen":674,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0kl4twg7x92w3.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0kl4twg7x92w3.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230613\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0kl4twg7x92w3.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"0bdd0528388e6e99abab84cff602803f\"\r\nlast-modified: Thu, 14 May 2026 12:41:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0kl4twg7x92w3.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::9tfq2-1778993088014-21924977c41a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5828,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5828), with no line terminators","md5":"0bdd0528388e6e99abab84cff602803f","sha1":"6f10129c11f9531cd622a46b6b59227791f4a2cf","sha256":"b089d3266769d26293b967f3b69b10cd1ba4e8a6ecd86007e514e1e3199c2dcb","sha512":"8cb612bf313b81402c19dc835f6847fd46dc22b9e15fd0558ccd43897f2bb888cb2ab26a56338900e7888e2a8444457b16b441b543f4131701937fbe70c65e77","ssdeep":"96:GeFctuv2CZKGupYlfuJgoGqVW/QFv2Hj3xAKquhSQD9H9JMdqhJqdy63v2P:ACZnuaZuGoG86QFeDBv7hfDb6Cq+P","tlshash":"cdc1a7f530e1b4d1d29b4184843b441ef23a1d3960ae78a4b7e98cf555b085ea1b3fa6","first_seen":"2026-05-17T04:45:35.44175Z","last_seen":"2026-05-17T04:45:35.44175Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0vw33z41rh83v.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0vw33z41rh83v.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230613\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0vw33z41rh83v.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"5b0887ebc7a39d1ee1a7f064c7734ae4\"\r\nlast-modified: Thu, 14 May 2026 12:41:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0vw33z41rh83v.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::c6qjz-1778993088022-40ccd03c09f8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":28595,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28595), with no line terminators","md5":"5b0887ebc7a39d1ee1a7f064c7734ae4","sha1":"830f437ee8ce0653f1ce698aff3f7eaf2873c836","sha256":"23739e6dd34bd93df21d7e1b8d83f9a787eda3c7c4e12b2b23cab7b93ca3cb48","sha512":"7b193013cfdb1f27927fe3f95b4520bee65aff0708ccfb46d49050195842c303e025c8a3dfe4b5bee4202b6e59858182c15133906a2ef6463242f55d873ad048","ssdeep":"384:p60mw4o1GbnHd9NBvkAqnsg7W88qnjAi8Kn/4V+9A41fIiVIfZcZBMy:/mwMnHfNhkzns6jAiHn/hW4hifZcZBMy","tlshash":"3bd275e6af1cb39c69c596681f27b213931e353f35df90a48b4d86d49ac6808f53381b","first_seen":"2026-05-17T04:45:35.442903Z","last_seen":"2026-05-17T04:45:35.442903Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/2d01abf7/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:48.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /s/player/2d01abf7/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 59066\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 13:56:53 GMT\r\nexpires: Sun, 16 May 2027 13:56:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 13 May 2026 03:06:06 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 53275\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":518390,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"02eb616381d9c1a1f73fcbf0d188fd89","sha1":"350fa28c76b86316b4ef05b247ddb6f3183b369a","sha256":"0d994eb0e617b6087b915cb1bdc2bb56f40826f1b3d182277c0915aedec24671","sha512":"d01949ec5bd802d03a04affda5316e2203190e69a6032a54160273bd59bfdb8eeb340b35431b76901877b07725ea8a91cd65e4bbccb9dfef843e15679d8488fa","ssdeep":"6144:48d5Fe/qoMOg7USBfUIoI3M5Kdl58Oi4f7:rYxMOg7USiIoIc5Kdl5TD","tlshash":"ecb4d972f0e1233cb2278d59a7d9954d7339d983e2e12afff11166dacbc76811326206","first_seen":"2026-05-08T17:58:56.541059Z","last_seen":"2026-05-19T16:05:29.822693Z","times_seen":5857,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff8195c00569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-13T13:48:06.627904Z","times_seen":66911,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/09enb.fl3b7hr.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/09enb.fl3b7hr.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230608\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"09enb.fl3b7hr.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: W/\"543ceff74ed25d27b7ac8bd0bcc1fba9\"\r\nlast-modified: Thu, 14 May 2026 12:41:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/09enb.fl3b7hr.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::27fn5-1778993089521-0d8b893c98e4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5541,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5541), with no line terminators","md5":"543ceff74ed25d27b7ac8bd0bcc1fba9","sha1":"6bcf5d30393850d35e903bea4e29f406597ae301","sha256":"411b5a156c803c173d5873a8862ff352b9470279e535381848ea0c1e2f73f7b7","sha512":"29fd3667c41ef2f0cfde00535d8b351d8ac21335047c9d04dc0312fe67392323d35e6b49d504f705c8805f6e4add506ba7e010ce35dda2329837a7ce89d508b5","ssdeep":"96:DzKgba8/WaEVVqVuVOuk5ixyoJ0OlLCgZc6xC0uhnOZGjl4h8t4:S1EyBC0Hwc","tlshash":"82b183406504bafc695b00d8647bd05c303e6fede60fd4acb6b86c2523154e8b953b97","first_seen":"2026-05-17T04:45:35.445834Z","last_seen":"2026-05-17T04:45:35.445834Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"vsb42.tawk.to/s/?k=6a0947c283c0d2cea2ee5af7\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OWY3NzEwODQ4Y2E0MTFjMzAwNGUzODMiLCJ2aWQiOiI2OWY3NzEwODQ4Y2E0MTFjMzAwNGUzODMtQndXckpZUjlOU0ZOdW9pRXo5Tm1sIiwic2lkIjoiNmEwOTQ3YzI4M2MwZDJjZWEyZWU1YWY3IiwiaWF0IjoxNzc4OTkzMDkwLCJleHAiOjE3Nzg5OTQ4OTAsImp0aSI6IlRUY0tCcm13NXlzdjdTM2dpSHdoQSJ9.GRQN6qt8xSPyE7S8QvaD0rZyLsAE8T1-2z6vC6j0nRAUfnOSfoaEzAhkv8cPtgWEbEv7Lj8UOaSFIUxqv20oVA\u0026EIO=3\u0026transport=websocket\u0026__t=PuqG52N","fqdn":"vsb42.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /s/?k=6a0947c283c0d2cea2ee5af7\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OWY3NzEwODQ4Y2E0MTFjMzAwNGUzODMiLCJ2aWQiOiI2OWY3NzEwODQ4Y2E0MTFjMzAwNGUzODMtQndXckpZUjlOU0ZOdW9pRXo5Tm1sIiwic2lkIjoiNmEwOTQ3YzI4M2MwZDJjZWEyZWU1YWY3IiwiaWF0IjoxNzc4OTkzMDkwLCJleHAiOjE3Nzg5OTQ4OTAsImp0aSI6IlRUY0tCcm13NXlzdjdTM2dpSHdoQSJ9.GRQN6qt8xSPyE7S8QvaD0rZyLsAE8T1-2z6vC6j0nRAUfnOSfoaEzAhkv8cPtgWEbEv7Lj8UOaSFIUxqv20oVA\u0026EIO=3\u0026transport=websocket\u0026__t=PuqG52N HTTP/1.1\r\nHost: vsb42.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.qfs-ledger.site\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: KE5zqF0xkMnS55Cq6wC14Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 17 May 2026 04:44:51 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ZCyj1wU2faMTR1UdaDwkEiT3VjM=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9fcff821aa99569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":20,"connect":20,"send":0,"wait":613,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 23:38:18 GMT\r\netag: W/\"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191114\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff821b8562678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-13T13:48:06.669193Z","times_seen":49854,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:52.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:52 GMT\r\ncontent-type: font/woff\r\ncontent-length: 93868\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 0\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff82a2b3fb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-13T13:08:52.977865Z","times_seen":35986,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0warocfazi4nu.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0warocfazi4nu.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230613\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0warocfazi4nu.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"d50980f20b229fdb11bbdc868fff6990\"\r\nlast-modified: Thu, 14 May 2026 12:41:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0warocfazi4nu.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::c6qjz-1778993088013-d974fa27f97b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":19937,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19860), with no line terminators","md5":"d50980f20b229fdb11bbdc868fff6990","sha1":"bbbc5540985188fa767e2c3b6b0ae22bdb5b5023","sha256":"febfd8abb033e060cf510a28f48e529ef22f42852732c375a6bde58d472bd73c","sha512":"47bc511a2c75870d68ea744327955b129043660f601ad7f9a782accb9729960fe9bebf4a1f134cb4e796d05764448ceac9d750cb801511688487ce2e98cc2554","ssdeep":"384:wZA9i3CGXIM6Mr7d4UhQBBnEO2sue7b9kOwOcdTbsZnOW0wM:wZIi3C7M6Mr7d4UhQBB/7hgdTb+mB","tlshash":"7192f8a8f3a1fbae23a7105e706f1014f0762960696c41607359686b3f75d0c6ab3f5a","first_seen":"2026-05-17T04:45:35.448637Z","last_seen":"2026-05-17T04:45:35.448637Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/070ozpw_th3cv.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/070ozpw_th3cv.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230613\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"070ozpw_th3cv.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"2316f747a96d0407b7d7fe5009efe5dc\"\r\nlast-modified: Thu, 14 May 2026 12:41:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/070ozpw_th3cv.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::nr8f9-1778993088013-fb3dd3b947bb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":77044,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32011)","md5":"2316f747a96d0407b7d7fe5009efe5dc","sha1":"9712a6fec9d4b5104ec66dcd6334830112866dae","sha256":"ce21b674f3e2c2a66a5f8ce51d46e1cef5d1471f0aab4a355d1fd5a30bb7021c","sha512":"b57ac9dfc356921789f2f0eba89fabf6b972a1dac4057c55873cadb27ed9578192bffaa56a8abf83a2715b89961ad4598303e280bbfdd6abf9191dbbdfc8a70b","ssdeep":"1536:98I7q8vh/6zMjyOEmgzxOCkFSaH68Hk68EMZodZjKp2ruXYhz/0D0z6esyrknL:98I7qgh/6WyOJ68Hk68EMZoHKp2ruXYu","tlshash":"2c731ac57761b02603d761e9507f040af27da629680c0868f2a5e8fb38b598d97fbf74","first_seen":"2026-05-17T04:45:35.45001Z","last_seen":"2026-05-17T04:45:35.45001Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=69f7710848ca411c3004e383\u0026widgetId=1jnn9332f\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=69f7710848ca411c3004e383\u0026widgetId=1jnn9332f\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-rpmm\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-4-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9fcff81dfaceb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3031,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60ce595e49e8992151a031307a3efa21","sha1":"da576eaef190231219c07bc9e9faa77f7352a963","sha256":"2135107869f8b346881432b5213ad340ed72708e842445629c353fb4cb9d46db","sha512":"87284e0aed6b44f93c9b36e4bb0aac2a6c43625506421ff041f280141d05af8c0af36db901669e52197acea3fc55dd397d1faee9dca93779db690baac3271725","ssdeep":"","tlshash":"e25123298906dd3963c9d64775de3627a93dd063e388590de0986d3c83ebacd221274f","first_seen":"2026-05-17T04:45:35.451125Z","last_seen":"2026-05-17T04:45:35.451125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:52.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1778993092634\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtNc2hxTE9nWXFGNCjAj6XQBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgPWLfAgrcAjE4LllUPUxrM0tvREx6MDlGc1dpdjJpX25fak83Q3pYTkhoT0NMODNIRkdEbzdmcjFhTkpmREU0RHdVYnNXLUtVMVQwMlpPNU9qV3hKRkpQMEwxanZzWlA2cHFHZGlLT3FIRW1STXJvY010YjBFWkJIeEtXTVNWX2ZzZTZkT0RVb3FnSmxkb19LZllFSG1lSlpacWZzUWJQTlZ3aDhDSU9EZlVPcGYtVm9ZTkpKTlNuUmJ0cnE5clcxYnQzWkQ2QjhFV08zd01Bc0ozcnN6Y3A0S05PZUhLUjNZcUVicUFNd2lnZ005eGU3VGRhS1Vadi1OQ1NhOFBPWkNIdG9sUFgyenZmdlRlZnNVcnZPNGtKQTZ0OFhqS1VkUnEzeXJYSVJIcUlSYkp3aWptdmJFdnBaUUZfckRYaURvaThvLWVqNDFKSjhVWTJ5VmdDR2c5dnlxelhFNmItRFNyUQ%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260515.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 915831507\r\nX-YouTube-Page-Label: youtube.embeds.web_20260515_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1778993089102\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C894%2C504\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 13315\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13315,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260515.01.00\",\"configInfo\":{\"appInstallData\":\"CMCPpdAGEOW70RwQ7avRHBCs9dAcEMPegBMQh5DRHBDIp9EcEL2ZsAUQxsbPHBCu1s8cELjkzhwQvoTRHBC1pdEcENr3zhwQ3M-AExDI988cEIHNzhwQwY_QHBCM_v8SEImwzhwQntCwBRC9tq4FEPG00BwQ9L3RHBCL988cEOiV0RwQ8-KAExD_rdEcEJmNsQUQzN-uBRD724ATEN68zhwQ_LLOHBD79tAcEP6FuCIQj6rRHBC9irAFEKSp0RwQn8-AExCHrM4cEParsAUQ4LfRHBCLj9EcELD-0BwQlqLRHBDM-dAcEJa40RwQvKTQHBDpptEcEPCcsAUqUENBTVNOaFUxLVpxLURNZVVFcFVDbkE3NUZYSkR3UlV0MXFUd0N6S2dyQVFEemY4Rnk3Y0cteWEyNUFhZmlRM3EtUWJiOGdUa2xRVWRCdz09MAA%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://www.qfs-ledger.site/\"}},\"events\":[{\"eventTimeMs\":1778993088779,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088784,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088789,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088790,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088791,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088791,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993089141,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993089142,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088309,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088150,\"latencyActionBaselined\":{\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088244,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088309,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088319,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088156,\"latencyActionTicked\":{\"tickName\":\"ndnss\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088157,\"latencyActionTicked\":{\"tickName\":\"ndnse\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088157,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088244,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088167,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088244,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088536,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088678,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088512,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088677,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088511,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088618,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088512,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088652,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088511,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088631,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993089150,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993088762,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993089154,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993089157,\"latencyActionInfo\":{\"serverTimeMs\":46,\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1778993089213,\"screenCreated\":{\"csn\":\"ciULy3_kzCXIlWhI\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"wEcJavbPD6KJk74P0bmMqAM\"}}}},\"context\":{\"lastActivityMs\":\"32\"}},{\"eventTimeMs\":1778993089213,\"latencyActionInfo\":{\"clientScreenNonce\":\"ciULy3_kzCXIlWhI\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"32\"}},{\"eventTimeMs\":1778993089214,\"screenCreated\":{\"csn\":\"HddFvmE2LXb4XTdM\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"ciULy3_kzCXIlWhI\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"33\"}},{\"eventTimeMs\":1778993089214,\"visualElementHidden\":{\"csn\":\"ciULy3_kzCXIlWhI\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"33\"}},{\"eventTimeMs\":1778993089214,\"latencyActionInfo\":{\"clientScreenNonce\":\"HddFvmE2LXb4XTdM\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"33\"}},{\"eventTimeMs\":1778993089215,\"visualElementAttached\":{\"csn\":\"HddFvmE2LXb4XTdM\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMIsLXW2MG_lAMVUdN7AB2KPAuxygEEOK9TCg==\"}]},\"context\":{\"lastActivityMs\":\"34\"}},{\"eventTimeMs\":1778993089218,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"36\"}},{\"eventTimeMs\":1778993089219,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"38\"}},{\"eventTimeMs\":1778993089269,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"jmNt3MD64yKn84qF\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"87\"}},{\"eventTimeMs\":1778993089276,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"93\"}},{\"eventTimeMs\":1778993089314,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"Kchv1Sp2t5pH_WyI\",\"clientScreenNonce\":\"ciULy3_kzCXIlWhI\"},\"context\":{\"lastActivityMs\":\"131\"}},{\"eventTimeMs\":1778993089314,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"Kchv1Sp2t5pH_WyI\",\"clientScreenNonce\":\"HddFvmE2LXb4XTdM\"},\"context\":{\"lastActivityMs\":\"132\"}},{\"eventTimeMs\":1778993089451,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"269\"}},{\"eventTimeMs\":1778993089453,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"271\"}},{\"eventTimeMs\":1778993089454,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"273\"}},{\"eventTimeMs\":1778993089461,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"280\"}},{\"eventTimeMs\":1778993089494,\"visualElementAttached\":{\"csn\":\"HddFvmE2LXb4XTdM\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"312\"}},{\"eventTimeMs\":1778993089494,\"visualElementShown\":{\"csn\":\"HddFvmE2LXb4XTdM\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"313\"}},{\"eventTimeMs\":1778993089568,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"386\"}},{\"eventTimeMs\":1778993089609,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"427\"}},{\"eventTimeMs\":1778993089609,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"427\"}},{\"eventTimeMs\":1778993089611,\"visualElementAttached\":{\"csn\":\"HddFvmE2LXb4XTdM\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"429\"}},{\"eventTimeMs\":1778993089611,\"visualElementShown\":{\"csn\":\"HddFvmE2LXb4XTdM\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"429\"}},{\"eventTimeMs\":1778993089612,\"visualElementAttached\":{\"csn\":\"HddFvmE2LXb4XTdM\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"430\"}},{\"eventTimeMs\":1778993089612,\"visualElementShown\":{\"csn\":\"HddFvmE2LXb4XTdM\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"430\"}},{\"eventTimeMs\":1778993089656,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"474\"}},{\"eventTimeMs\":1778993089848,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"667\"}},{\"eventTimeMs\":1778993090379,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIGQ==\"},\"context\":{\"lastActivityMs\":\"1196\"}},{\"eventTimeMs\":1778993090383,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"1202\"}},{\"eventTimeMs\":1778993090632,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"1450\"}},{\"eventTimeMs\":1778993090633,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"1451\"}},{\"eventTimeMs\":1778993090635,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"J8UYTyPf1ThK8Fyt\"},\"context\":{\"lastActivityMs\":\"1453\"}},{\"eventTimeMs\":1778993091384,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAEyaQA==\"},\"context\":{\"lastActivityMs\":\"2202\"}},{\"eventTimeMs\":1778993091385,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFrCgYKBGFHSWYSAggBIhEKAwoBbQoGCgRhR0lmEgIIAQ==\"},\"context\":{\"lastActivityMs\":\"2203\"}},{\"eventTimeMs\":1778993091387,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAAENAIhgKAwoBawoGCgRhR0lmEgkRAAAAAAAAAAAiGAoDCgFpCgYKBGFHSWYSCREAAAAAAADwPyIYCgMKAW8KBgoEYUdJZhIJEQAAAAAAaI5AIhgKAwoBYwoGCgRhR0lmEgkRAAAAAAAAAAAiGAoDCgFDCgYKBGFHSWYSCREAAAAAAADwPyIYCgMKAXgKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBbQoGCgRhR0lmEgkRAAAAAAAA8D8=\"},\"context\":{\"lastActivityMs\":\"2205\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"wEcJavbPD6KJk74P0bmMqAM\",\"clientCounter\":\"10410\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Sun, 17 May 2026 04:44:52 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-08-13T13:51:50.017197Z","times_seen":284782,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0krc3ydaibzf6.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0krc3ydaibzf6.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230613\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0krc3ydaibzf6.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"5f063eb187a4ff9fcf08bd2814bd6e1a\"\r\nlast-modified: Thu, 14 May 2026 12:41:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0krc3ydaibzf6.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::c6qjz-1778993088016-8f0d46289371\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29916,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19202)","md5":"5f063eb187a4ff9fcf08bd2814bd6e1a","sha1":"04dee8fba0eae81241d8310f5e6aceae04199c5b","sha256":"a154b21f830f1267b11574708df031ae4416e384aa8616bbb328950a6e535a30","sha512":"2b45eb4893909d70ea777cf7f98197c2699bd04778e9a6894d4110b5de0e94176cd9845b55ddfe3a2b4157505d1178cf5b7b738f37c65cccd8393613eeb1035b","ssdeep":"384:aP6T2HDxJ1oYT1/S1ZyIHRkg3i2kjiR1Ykr6KhwqmvCTPtoiUxCKc7HyJ:sq2QYh/S1Eg3i2keJrA0P27c7SJ","tlshash":"30d2f92471a8feed551b00e5a43f800ca03e6db8d92fd4a8f3f9ad2916604c47553fa7","first_seen":"2026-05-17T04:45:35.452678Z","last_seen":"2026-05-17T04:45:35.452678Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/favicon.ico?favicon.0y5dzb6~91ktw.ico","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /favicon.ico?favicon.0y5dzb6~91ktw.ico HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230612\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"856e165a694d35ed72097cc768f014af\"\r\nlast-modified: Thu, 14 May 2026 12:41:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::c6qjz-1778993088232-ef9ae0a610bd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59586,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, -31x-31, 8 bits/pixel","md5":"856e165a694d35ed72097cc768f014af","sha1":"1d1dff32b7bf178fff146922e431117c4d5d8c34","sha256":"0c8e91daf1f53a77f2e1f22707bbc060ff7cf39d535781084552130b04b89260","sha512":"fcf9563a2dbeebeca85af3ed060c7b3b37fbb5b660d34e950b36e2324a72f4839cf12d539d56ad8debac4a763271124259716fa662af23bdf9f08b2d95e97200","ssdeep":"96:y6y2zqHAbEs/zMChWxkmdtrGf9vP9ae1+K2:y6LoAAqYCcik5Q9vPU","tlshash":"814314c5be0a8175e9b837b918da162d1350d38d7062490f77e4e8acdb75a377d38c84","first_seen":"2026-05-17T04:45:35.415622Z","last_seen":"2026-05-17T04:45:35.415622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/register?_rsc=1r34m","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /register?_rsc=1r34m HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 274530\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: \"8f1d0a7d13af9f2a5d7706d62952f935\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /register.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::27fn5-1778993088496-5d89d478c3df\r\ncontent-length: 614\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":614,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (331)","md5":"7e790c8baa2e5b06b893d0aba17fdee3","sha1":"dc33f8c8d798173f7b86f03449a51530c99f82ce","sha256":"1b8a3c1cb006f07be317593ea8efed249c24f77e7c1cc8422236e740aaf69715","sha512":"59d785d057e0a6ddee425285f1e6f9d7d21804177c4b3e0a4e8439c18311eb349fff18356e3269f51c7bc32f5ac7dea76f3107663f46ada75fae56f1aa333e2e","ssdeep":"","tlshash":"92f04c378509adc9adf0e46c176ae70a203d653370f94da8d4ce9e9003a613e1e47b87","first_seen":"2026-05-17T04:45:35.453777Z","last_seen":"2026-05-17T04:45:35.453777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/?_rsc=1pn8p","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /?_rsc=1pn8p HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 274530\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"ce9b0188eb71f433745099e098958602\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::294cq-1778993088498-8c74fbc82016\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1221,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (732)","md5":"34dd533aec236fbbd9db361e857004f3","sha1":"3b8fb1096c12c53273086a2baea63f46751685d3","sha256":"059124630d937168c28621c70db32170573cdd4f10a93e078516c84fbd09939e","sha512":"6c35cc9d111cac4f2dd7b6c7f01c908f0d50c44ba675b6a99a1ec52ea66b30ead11a86dc02a231b92513edb6828f5dee360f7c143115226523b23e7258a330d4","ssdeep":"","tlshash":"3f21ac3a8909fc6e1d76c849185fe31ba29d1b339a794cbd918dcd1806890372bd61d0","first_seen":"2026-05-17T04:45:35.42096Z","last_seen":"2026-05-17T04:45:35.42096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.hlOHPMP-Qso.2021.O/am=AAAAIA/d=1/br=1/rs=AGKMywEcxwUiwDveKGZ0NRxn02w8vBWO4A/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:48.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.hlOHPMP-Qso.2021.O/am=AAAAIA/d=1/br=1/rs=AGKMywEcxwUiwDveKGZ0NRxn02w8vBWO4A/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 144159\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 15 May 2026 12:56:17 GMT\r\nexpires: Sat, 15 May 2027 12:56:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 15 May 2026 07:09:25 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 143311\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":425479,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"ee51280f97cc71740ddc21599d038622","sha1":"85c806058f6970527a87705f1d9d6c3cb6c9a58d","sha256":"420453769a180d883c4d09100a95b934e99722b2aa41a716d526954887d8881d","sha512":"8bdfedd53c112a7329b42158c657dcac07a2a9aeda9078196bbd1923ac5f4c57ef31bb20b8f9a4e9990c5fd3d8e4f81b79379056133ee4dbd1dc47ef03706777","ssdeep":"6144:23D5Sxej2fLfw8p1IzP2m1RwdYE4ls9lkwIpxWF8XK7Wr/n:C2bw8p1uPZZxXK7Wr/n","tlshash":"90944dd97762706392a2f1a5902f0103b17a6896f40c9cbcb7d8ddd16eb494942fbf38","first_seen":"2026-05-15T15:18:52.779464Z","last_seen":"2026-05-18T17:21:28.320638Z","times_seen":2104,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"ee689ef2937fa72a8a3c44e1d74735c9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff8196abdb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"ee689ef2937fa72a8a3c44e1d74735c9","sha1":"63cea284ef0cf3bfcc00b8ad2ce53ab1ae2aada8","sha256":"aab2bf8434920df8cf062c642159a9d68b914300f53a96bf2933e62ac9d94d40","sha512":"640b8a211055a9a7dc964bdb9b0100922fd491b27229dd1c353278c90a58aa5fbdcc16d5d17451f926a2f5aec1d26aec12e93f4337968e2f438d357d0a61a780","ssdeep":"","tlshash":"bb4195d936e8f9b6834328e1043fa016b6353976497be8c0531dd4f9bc79c45811afb6","first_seen":"2026-05-14T23:47:35.992444Z","last_seen":"2026-05-20T04:16:57.466379Z","times_seen":737,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:52.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 17 May 2026 04:44:52 GMT\r\nage: 1379865\r\nx-served-by: cache-fra-etou8220027-FRA, cache-osl6525-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 39460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302554,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"3ebdfd5d06617d7d3cf6bf6e5c458085","sha1":"ac433f0c7c8c06dbb26a85d08a47eadcf30d783e","sha256":"a642ac8ca5dc75fc2fa88c4c1d54b6f57f2a27bac6a74e15a5667e78f2af8e0b","sha512":"7ea52d1e4cfb1b61b84f58790fe6e1649d22b1b4b854e45df4b7ecb1b30a6b4e2f6366c794c51f5ce605f8ed0e85f0577dcb7d0a250d3b4a7182c3639edae402","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifirh3dfEm+E5ove:Q/drlyogMVc6FIKV+ZhdfEm+ET","tlshash":"ab646f7d86506deee994902d86db3b4af9883c0493ed1276f66441cb37ba43a33487dc","first_seen":"2025-09-10T06:37:47.236235Z","last_seen":"2026-06-07T08:03:01.010717Z","times_seen":6744,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":1,"receive":2,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-ledger.site/","fqdn":"qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T04:44:47.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:24:19 GMT","end":"Tue, 11 Aug 2026 23:24:18 GMT"},"fingerprint":{"sha1":"FF:67:9A:7D:52:12:0F:1E:6E:5D:A0:6C:63:B5:A6:B3:42:93:FD:66","sha256":"C3:54:F8:F9:2F:AB:CA:72:12:84:67:1E:09:ED:FA:17:82:DC:B8:DD:85:DD:F2:EF:D4:CE:F0:BF:55:A0:17:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sun, 17 May 2026 04:44:47 GMT\r\nlocation: https://www.qfs-ledger.site/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::jzsbw-1778993087640-2522f788d718\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27961,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":98,"dns":77,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T04:44:47.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 274531\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:47 GMT\r\netag: W/\"a58fdfcb8a489b94549c9690747e87a6\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::56kpw-1778993087770-88efdb658b04\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27961,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18955)","md5":"2d3f1d757ed2d37d787c846a28845b0e","sha1":"e48bff04a5fcd3de0646c94e016ba9a2725f2859","sha256":"deb3b4eca5622f0c6eeb80c63e565f0e7b12c2a8737967469d3b6d9b801f116b","sha512":"f2c26a6211c41b7162fea01528bb44509e9a1ff6116c438981e090bc2f8667ba871301865ffccf64ff70bce15053c4110106292a5d31b659b85d0f0c659c9ff6","ssdeep":"768:PCkoO5Tsoth4zYbCcp1M7k8upo74W7nasofKzd58OpksQZK7BJX/:u9YbCcrpg7nac","tlshash":"48c2b639b804ea5b98275d6d753eaf3960deca3bc537c86cb3dcca451382cb45b81984","first_seen":"2026-05-17T04:45:35.456909Z","last_seen":"2026-05-17T04:45:35.456909Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":102,"dns":75,"connect":1,"send":0,"wait":10,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/2d01abf7/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:48.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /s/player/2d01abf7/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 446948\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 May 2026 09:53:42 GMT\r\nexpires: Fri, 14 May 2027 09:53:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 13 May 2026 03:06:06 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 240666\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1493991,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (971)","md5":"9156d13cae96af1dcc4a452b25497af5","sha1":"9d609b42c5a6d93c5c666ce73d20356450bc56e6","sha256":"0afd2fc6b969ad53c1162e77a12f34723e580fb25b57792db97a7380ee051903","sha512":"7137450ddc3bcc51cc7f6f4af90f5192376c0d9a39827cdf51d277b44d6442df376f48ae5147fe4b2dd47cdb35f0e459328ed9815100ef6f47d7916af5dd7bb7","ssdeep":"24576:Zlx4f9VnANpf45JcHOPYVetCf8Kc8AYLce+:Zlxc9V645JcHOPYVetCf8Kc8AYLce+","tlshash":"c4256ce97782b4a743e3e075592f120ef17b5814400cd42cf56afae86db4a4a41bbfb4","first_seen":"2026-05-13T15:01:20.025788Z","last_seen":"2026-05-18T16:10:51.273877Z","times_seen":2888,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-05-17","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/2d01abf7/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"d715c2b9f1b12ac7a256f0ae963d2871\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191114\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff821084f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106298,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d715c2b9f1b12ac7a256f0ae963d2871","sha1":"9afafe9375b873933896d28dd05a0dff8c566b57","sha256":"0ce5a07eb14da9f446abfc7edc77b4f8f520aa8c8625fbdf553d2353c23c12af","sha512":"1b8e4eae0565793a439fa7072782259669b6df7d59b2e0f8f1e0b202b7cb717046abcb82c4c99f37ee19e883d545ac9f0973507a2e5b736bcd095af7de38adb5","ssdeep":"1536:BigMXSFu196wofTn32jGDIgaOS9WbaGlDluK1yFYydZPkx3u4V5pfYMrlSf:4DiuTgQG/gUx3u4V5pPrlSf","tlshash":"03a30a6ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-05-14T23:47:36.068795Z","last_seen":"2026-05-20T04:16:57.49795Z","times_seen":662,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/1739hmkg4lc18.css","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/1739hmkg4lc18.css HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230614\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1739hmkg4lc18.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"9e23b98d3db5d79fefd8dc9e9c816a7b\"\r\nlast-modified: Thu, 14 May 2026 12:41:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/1739hmkg4lc18.css\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::ntnv2-1778993088006-7dfeb6521770\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":81727,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (61823)","md5":"9e23b98d3db5d79fefd8dc9e9c816a7b","sha1":"51aa2be24978f6640147c62f47e70b518556e106","sha256":"0c5ac09184cf76e36457f0fd1d897d247385e0f7860618be60aeebbecae3c879","sha512":"46b8e644d885ece1f2bd72f0331a962a22f67cf447aa74b9f86b354200930177920049b92f91da57528f535177bf78ec3d17a6c8ac2af6cf58e5769944b25ce3","ssdeep":"768:mIZZAJtAlkFCEjWCeKIRbnj0X3n0atXWpnToBZ3CA/QE+T860FWKfe0Xj2psf:OeEjWCeKI5j0UBE+T860FZfvqpU","tlshash":"f7834eb0f1b4d577bd13b6f9e3dcb48cbd19e0aa9d6653a8ba50220523e77f25805e00","first_seen":"2026-05-17T04:45:35.459131Z","last_seen":"2026-05-17T04:45:35.459131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:18 GMT\r\netag: W/\"97491668f9ba2fbcc26d27bac8df365f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191061\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff820f84a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11888,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11888), with no line terminators","md5":"97491668f9ba2fbcc26d27bac8df365f","sha1":"2b7212f20e04f3a9f307be46d4461c7a5d4e5b86","sha256":"5ae43447a6f4723e9e0331410ee804dc48fbbef530dbb01233e53deff8d52e91","sha512":"9ba8109b48939e2fd2846a50ef1816cf5d2f46c3b7154259f5f6efbb49b41c19fa2a3b7d41b70497282920f2b4b4c8a8a3b1437eaa0ec5b3f9187004042af260","ssdeep":"192:0H9MaRRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:KRb9HkS316xAFKpLZEh","tlshash":"3632a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","first_seen":"2026-05-14T23:47:36.053411Z","last_seen":"2026-05-20T03:03:29.081895Z","times_seen":487,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:51 GMT\r\ncontent-type: font/woff\r\ncontent-length: 93868\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff8223adbb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-13T13:08:52.977865Z","times_seen":35986,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/assets/png/1f44b.png?v=2.2.7","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:52.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /emojione/assets/png/1f44b.png?v=2.2.7 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1311\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\netag: W/\"51f-Lhpf/5pVjttXKKAzYbc9FjP7pB4\"\r\naccept-ranges: bytes\r\ndate: Sun, 17 May 2026 04:44:52 GMT\r\nage: 1619906\r\nx-served-by: cache-fra-etou8220168-FRA, cache-osl6541-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c146761c3af8335c09eff9b1cdecbe08","sha1":"2e1a5fff9a558edb5728a03361b73d1633fba41e","sha256":"d84e890fa93c018d8b78e3bff3f6252036aa7ead6e48b292c0b92b1cb5127371","sha512":"b99a6fcfe0c4f4884fec84ec4e9951fc23b246302d4eac2996f4b6df3e063543b640a99e083494633f946fd85a3b217e18356e6b46d6584dcbccd88215638950","ssdeep":"","tlshash":"f221c59314628da28e23c525ac24c5e0b2fb40fcd78f8ae24903feb552b530c99d478b","first_seen":"2023-05-15T15:27:55Z","last_seen":"2026-08-13T13:08:53.020998Z","times_seen":21308,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0yl72.zxnawu~.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0yl72.zxnawu~.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230614\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0yl72.zxnawu~.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"4f11add01cd603a4ea3f2fe2a142f557\"\r\nlast-modified: Thu, 14 May 2026 12:41:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0yl72.zxnawu~.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::nfgpr-1778993088009-49b32907b83d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140757,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4f11add01cd603a4ea3f2fe2a142f557","sha1":"f3aafe144d93ee7596f813afc5de52c75d50ae2c","sha256":"c03776afc2aa47223e379a27465abe10784bb860952d3ebc897512d5bc6131d7","sha512":"db865b256d94a509aec58456490d566cd6bf2f33648ff7a091ad3211d479c5a08b29f67b89ffae273189123ada9ccc4011e210347f90f4a5ea62fb4a4323dc9b","ssdeep":"3072:vuewD5IYzppPbOfR25Htudg+ZbIlbS75B:vuewD5IYzp1bOfo5N2g5lbyB","tlshash":"2bd3e6f935d1f4420bab50aac03f0006f22c4d77189e6860e3e5ddda756469de1b3faa","first_seen":"2026-05-17T04:45:35.461349Z","last_seen":"2026-05-17T04:45:35.461349Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/Fs-LtiTaIJs/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH6CYAC0AWKAgwIABABGE8gZShjMA8=\u0026rs=AOn4CLB2IALwOgZXqEVw6khjphNlyKGBtA","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"216.58.201.214","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:49.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:04 GMT","end":"Mon, 13 Jul 2026 08:35:03 GMT"},"fingerprint":{"sha1":"5C:99:5F:4A:FA:69:B4:95:3E:32:6C:DB:96:18:8E:69:0B:32:31:E3","sha256":"2A:DE:B2:C4:71:B6:6A:56:22:19:D8:17:38:D8:98:23:7F:30:ED:F7:7F:3A:99:D1:B6:FB:27:41:73:D9:97:72"}}},"request":{"raw":"GET /vi/Fs-LtiTaIJs/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH6CYAC0AWKAgwIABABGE8gZShjMA8=\u0026rs=AOn4CLB2IALwOgZXqEVw6khjphNlyKGBtA HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 124943\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\nexpires: Sun, 17 May 2026 06:44:49 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1764545993\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":124943,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"25dafa82b6caba701df78258c4b7da1e","sha1":"698370a2a4ff47848fa148619f5a503bf65899a3","sha256":"01d2e852b95f61e898bbf4ac7deedc137537720847b6aab12c33575e7224332c","sha512":"9297eec9c7ffc6e7514530defc32a3a5bd6b53e4d22923a1755ebc8ed3643d40682d960a85f365c653fb8b3e5ff1327f4d8a2c9bc1ff75e3e36e0bd2e6aa758a","ssdeep":"3072:gf2G6Ff6KZ3bormIXXAr9NlBtex6eWXWb06HP2g4flG:o2GG6KZrorJQBNlPJX6vuflG","tlshash":"4fc3023263a923179f1afb81cfdfd607f181184dfdeaaa64b453b631b496148b630781","first_seen":"2026-05-17T04:45:35.462282Z","last_seen":"2026-05-17T04:45:35.462282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":130,"dns":38,"connect":21,"send":0,"wait":78,"receive":54,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: \"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 777422\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff822285e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22356,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-08-13T13:48:06.602144Z","times_seen":39683,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.118Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/login?_rsc=1r34m","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /login?_rsc=1r34m HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 274532\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: \"b30b7bfdf72a60cc3d0c70f7ee73ca69\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /login.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::qfswx-1778993088497-85f8a21bf273\r\ncontent-length: 611\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":611,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (328)","md5":"5a7b3235d3a909ac9db3c389e0d41070","sha1":"d2f69d04170aacfdd4cd9069e3cbac1079fc6d4a","sha256":"3583c2f26dca433da6c795aada8b45ff4973c164dea6dca78a2002af6d1cd118","sha512":"6d71d8591c30085892c55e735b2efdd73cf1aea47e9227477be4f5dd3c4641ab74ebb7c1fcf1690fdb3fc214dbcd357273b1fed41fb41a1bd911fc6b5dd9f674","ssdeep":"","tlshash":"e1f02d3245096dc56cf0e498176ae70a102c652370f54d98d4ce9e5007a513e1a47b87","first_seen":"2026-05-17T04:45:35.464091Z","last_seen":"2026-05-17T04:45:35.464091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.iOjRhANna5c.L.F4.O/am=AAAAIA/d=0/br=1/rs=AGKMywGcEqtDPteQxHEVYeg0DhcSZfMbMQ","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:48.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.iOjRhANna5c.L.F4.O/am=AAAAIA/d=0/br=1/rs=AGKMywGcEqtDPteQxHEVYeg0DhcSZfMbMQ HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 46854\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 15 May 2026 13:18:10 GMT\r\nexpires: Sat, 15 May 2027 13:18:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 15 May 2026 07:09:25 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 141998\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":386730,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (59628)","md5":"104d66b841dc5208ba03a6dc143f0081","sha1":"e81a6f134118380a9499095835712561e3fb3474","sha256":"7527c0e3c8770c257a206ee5b2f3e39218ecf77f2d855c38ca58ed042d3ed168","sha512":"6ff849d52ac11af6f1f5dc347bdd0b1f01a71f3888075994f937db2360283bece274bf0b46e522e7e5be7ffc3abf9516bbb6a4b62a38a3cd550873b7ee8f40d8","ssdeep":"6144:7pfpi41Z+zlrEBtLzum3gszR8ri24typauQz0yeSE4dk+46HnhF4xdXcXaGlaxAN:G41Z+zlrEBtLzum3gszR8ri24typauQ3","tlshash":"b284b87355121218f0179635ebe1fe4ab526c117c25a3aafe442ff2cc6df1e12e2264d","first_seen":"2026-05-15T15:18:52.765607Z","last_seen":"2026-05-18T17:21:28.323898Z","times_seen":2112,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/register?_rsc=15qaw","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /register?_rsc=15qaw HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 274530\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: W/\"db9931e2c5f95981884c2794fd3fb5d4\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /register.segments/!KGF1dGgp.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::ntnv2-1778993089044-d2e60ac520fe\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1909,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1419)","md5":"358d43c650860990adbbbe361eabafb3","sha1":"4f87ee529a4eb908a632a1757a4bdf6465ac9f15","sha256":"3e119a367849035b5a1fe82958300a10bf8b1f46f5aa509d24f3d92ad1da817f","sha512":"d850ac096e844e0509e16a413cf40a6819c131b536d0c3f38db94471e881770c09707d2015b15a8ddf0c7819ae3d59ae8a157f185155f5c34039a6fd088a6e58","ssdeep":"","tlshash":"8141e4399a48fe6d6c35c558142fe71a614d443b67344dbce69ced6402d107a3bc67c0","first_seen":"2026-05-17T04:45:35.466123Z","last_seen":"2026-05-17T04:45:35.466123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0xomzdvh6d~ho.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0xomzdvh6d~ho.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230608\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0xomzdvh6d~ho.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: W/\"5b21d2d0997f9026b4094fac564b2e8c\"\r\nlast-modified: Thu, 14 May 2026 12:41:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0xomzdvh6d~ho.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::npvs8-1778993089521-a485f98328ec\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5828,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5828), with no line terminators","md5":"5b21d2d0997f9026b4094fac564b2e8c","sha1":"2d0bf5a119f15676c3269da69211588c831fe23e","sha256":"09e5342986c8e18727549c0ee0ec52e7cb056a28a1f9e8f41d2f0a135ad7997f","sha512":"48e5411c9a9acd1e245da090266310eace0e5c4ac9f5bd52e770905eecb6d167d4663a0bd9a4907844a9ebe1395decfa9472fbdd135c1063a1340a260b25ed2f","ssdeep":"96:sZKGupYlfuWeFctuv2HgoGqVW/QFv2Hj3xAKquhSQD9H9JMdqhJqdy63v2P:sZnuaZuwAoG86QFeDBv7hfDb6Cq+P","tlshash":"4ec1a7f530e1b4d1d29b4284843b441ef23a1d3960ae78a4b7e98cf555b085ea1b3fa6","first_seen":"2026-05-17T04:45:35.467282Z","last_seen":"2026-05-17T04:45:35.467282Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/assets/globe1.svg","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /assets/globe1.svg HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230614\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"globe1.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"b3797ee28431efd8dc5c957f49da72b5\"\r\nlast-modified: Thu, 14 May 2026 12:41:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /assets/globe1.svg\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::nr8f9-1778993088005-cd127ede5c7d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":29432,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3797ee28431efd8dc5c957f49da72b5","sha1":"8c17812dabf97ecd3feed5602cd91bec754ae446","sha256":"a28998175b4ca603aaff1634579ecbe1b48ddfa278b4dca5697e4481db92d99b","sha512":"14b40faf8cd3d17c1d8e5b14576464ff521d1e47d21265e7b023b077ef02a8451ea8b11f580e2447846acd5080c23fe660b9f78606520a868d60b5e41dc83b62","ssdeep":"384:o+1ORcX0Rn6JAIUTKQDXELO9PeLfBhaaYX5fo63CUZF+52tw43ZkQLfo:j1ORcXaEU8zBhMJyGF+DEZDfo","tlshash":"39d2b6f2233453ede5d04f58cbc03a9937bca0ca783241e4b726168a5d256ff61ace61","first_seen":"2026-05-17T04:45:35.469516Z","last_seen":"2026-05-17T04:45:35.469516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/register?_rsc=1mive","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /register?_rsc=1mive HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KGF1dGgp/register\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 274530\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: \"a70f8e58365e23c3e55316a59d33ea9a\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /register.segments/!KGF1dGgp/register.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::ntnv2-1778993089047-c524bebd7d75\r\ncontent-length: 525\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":525,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"20ec4a335efbe506606aec63a41ad76e","sha1":"fe5ac5b8086a582dd046a368ada3e01b98fca77e","sha256":"4af81a5fad6e7c462389169411597d6135623702d6c52d643c411ae4cde0c869","sha512":"a6cd2c72508a9a629ac61af5bb8289c6c98fd91ea4f5cc176f2ecef55c5163af1dbf554d10f2649f65168b4d7814ffd8082943a87ac07b46ac79a61345af3e6a","ssdeep":"","tlshash":"8cf0271b955dfd6a0c30c80c581e532b529e4d776a7658bcb28ddd9802824762bdb9c0","first_seen":"2026-05-17T04:45:35.426463Z","last_seen":"2026-05-17T04:45:35.426463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0hzlo8bbal5fx.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0hzlo8bbal5fx.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230609\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0hzlo8bbal5fx.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: W/\"5a3b866c82de920b3d76bec40b06a01b\"\r\nlast-modified: Thu, 14 May 2026 12:41:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0hzlo8bbal5fx.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::8mkw5-1778993089402-06bc69865db5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":15810,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15810), with no line terminators","md5":"5a3b866c82de920b3d76bec40b06a01b","sha1":"27fea75d54fe9ed9ebc9ab1e76d29b00a379cc76","sha256":"1845886ae7904b05ed345a5ce5000c321aec328a9b1b12d2da3560884cdb17b3","sha512":"6a1ee150bb0f149e5fd8a2b69f1c4bf8459f5b8c300b1ff394232c4bcfc531fd7687014b592074b57842b7116934a56db5310c490a20e0926efd22bf17d09c12","ssdeep":"384:duUmV/xAUG2vbWNXS1uBqyH7iLSvobagWCU3U4n58:1G/+ULnIBdHn1x3i","tlshash":"1d62f97031d069e8a55780c9d12f900c702e9f3dd51f6968ffe8bc792662889bd52f87","first_seen":"2026-05-17T04:45:35.470576Z","last_seen":"2026-05-17T04:45:35.470576Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.qfs-ledger.site/\r\nOrigin: https://www.qfs-ledger.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-nn7w\r\naccess-control-allow-origin: https://www.qfs-ledger.site\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9fcff81dfacfb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191114\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff821084d2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-13T13:48:06.709011Z","times_seen":50037,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"09a6b2a4fc1400ec37c1115e6aa1670f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191114\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff821084e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53411)","md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 23:38:18 GMT\r\netag: W/\"ce7c2f1d3256f84d0760bd9f400963fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191061\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff821f8572678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23063,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23017)","md5":"ce7c2f1d3256f84d0760bd9f400963fc","sha1":"1375bb0f0223b374f9805cb441970de2cb004591","sha256":"ff92cac16c5ea67e7df480d38f6fd806385a85e69d13da5317ceb3acc469af62","sha512":"3f33f2cf811797404a3bdd12ab6af60b5356bdd577c82e8a97ad7d4cf81dcd1b24bf87c1256e175a6ae6f44d0d2f9c9daf8c29316bc60b370288f98e78e5716e","ssdeep":"384:Wgfco+ziLwH0Lg26/tFTiBB6TXngxYe4fbFU3xi7Ur3K:B+ziLwH0Lg261F2BBCXrsr3K","tlshash":"efa2dbf5e47b10d87363c02293d4f2685499f370ca8adea1f52b661c49e52763682efc","first_seen":"2025-04-29T09:54:46.086393Z","last_seen":"2026-08-13T13:48:06.695058Z","times_seen":38986,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/assets/btc1.svg","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /assets/btc1.svg HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230614\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"btc1.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"08d0004e50212972377c950c3b1025a4\"\r\nlast-modified: Thu, 14 May 2026 12:41:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /assets/btc1.svg\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::c6qjz-1778993088004-46e8897fcdf0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9705,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08d0004e50212972377c950c3b1025a4","sha1":"e47635cfaa267cfaaff6e395bee6d4edb1e2b3d6","sha256":"7e0e68ea621fc8bf7e50a5301b9c3c36dd097a02d81788a6a02845587396e57c","sha512":"953284d86cd32440fb4b57bcdbb8e762dc4f890e446cdcf76e0fa7bf3584b4effdbb7a3018091599ef9f2771f1037a142792f12a1b36f2f577c9be98fc955578","ssdeep":"192:RLxXtZJTALnk7VIdhNzTZD+2iXVdlejNnsk58QJcG7nx:Hx+sVIdhNzTh+FwjNnNJJV7x","tlshash":"8312d7f5331061f9d980c79857d4192a327d709fb5a111eceb6a19863e316ab80bcbce","first_seen":"2026-05-17T04:45:35.47358Z","last_seen":"2026-05-17T04:45:35.47358Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/?_rsc=ivliq","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /?_rsc=ivliq HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 274531\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"c7f774c36885491fc179bba8ed1384d5\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::ntnv2-1778993088860-1fecce36a60b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (772)","md5":"39eacbded53c940bc977796372bf27e1","sha1":"7b3038f98332224b1df88518427ad80f57bbd723","sha256":"636b14227199510707b52944f48354c0da4ddb734670599d4e26762c9b257b8b","sha512":"850f3c07da5fbe7e2545ff4e733f123d654b29d5bb8a7c68dfe5d470f2f4c6e517359a28304e039855823c3219267d2a66e0b352391dfc468f31d5edcea133dc","ssdeep":"","tlshash":"fb31f41bdc1dfe5a8c30cc5d291fab27619949778a35cc5df68edcf802855b62b890d0","first_seen":"2026-05-17T04:45:35.474769Z","last_seen":"2026-05-17T04:45:35.474769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0_7kqmlewccf1.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:49.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0_7kqmlewccf1.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230608\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0_7kqmlewccf1.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:49 GMT\r\netag: W/\"3d0fbe6e9059a40108616f955276c91e\"\r\nlast-modified: Thu, 14 May 2026 12:41:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0_7kqmlewccf1.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::27fn5-1778993089147-505d8c33af51\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":30565,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30565), with no line terminators","md5":"3d0fbe6e9059a40108616f955276c91e","sha1":"e2b8ebe91472b14dfc89dab27f9cadd2c45aa0a4","sha256":"3c16ec3fe9f3bfaec16b81d5b7cfa6bacdf20bf1b63e0c9bbdd26c0ef4e2e7b0","sha512":"9507ba32d39070dcacbd0e9f49c71511f546873f0049172767236c44782b688bf6fe34dc6e6228e5d4b296b6269e5bd50684e45e1c733c769b3b5401654e63f6","ssdeep":"384:ZhKo3OyX3T2GupvjdhBYyH0lIymiIz/aEIx+i19pEftdBFJfob0lWqHey9gUDABz:jKo3RXXMnBHHqkzzI+KahwrqRZw","tlshash":"05d2a5f4e1456eedaf725288695e001c301dada7de3e0c34bee8fe253a1144d6931b6e","first_seen":"2026-05-17T04:45:35.475868Z","last_seen":"2026-05-17T04:45:35.475868Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.hlOHPMP-Qso.2021.O/am=AAAAIA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEcxwUiwDveKGZ0NRxn02w8vBWO4A/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:49.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.hlOHPMP-Qso.2021.O/am=AAAAIA/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEcxwUiwDveKGZ0NRxn02w8vBWO4A/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 197726\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 15 May 2026 12:56:27 GMT\r\nexpires: Sat, 15 May 2027 12:56:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 15 May 2026 07:09:25 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 143302\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":669304,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2130)","md5":"c47b4b262228b7b52520007dc68eb9c4","sha1":"8a079341b4432dbe45f76028650442fd078360aa","sha256":"7c9c21829e4c7afc3bb6141ee4c05b49efc2c37d1032321e14a8a6b23ba1c1e2","sha512":"60fcb703e416e539aff4e9aed3441f82022eeff3f716b7888df8e5bfb93e7cd99221f6d9e1843e218f5c70d3f4ea67a3710fc05188f20682c608e44f86d1da6e","ssdeep":"12288:uFyTEPZ/EjMbvfQTAx5lDxBJTkIE0Rz/5U:uFyIxCMbvfQTAxc08","tlshash":"37e46ce0b392b5b686866966e43f4043b17e5d43f2044838e1fa9ddc15fce48a1b7f29","first_seen":"2026-05-15T15:18:52.782421Z","last_seen":"2026-05-18T17:21:28.310068Z","times_seen":2076,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/SXktXD7IgssctB1YeRWb5dtLTLR1yj8LSKAl5tlYnuY.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/Fs-LtiTaIJs?si=9o4H-qUSv1Q7ZXBr\u0026controls=1\u0026start=110","date":"2026-05-17T04:44:49.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:37:23 GMT","end":"Mon, 13 Jul 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CC:9E:F8:1A:CF:E2:AE:BD:CA:7B:1C:86:13:7C:06:64:83:8A:3C:32","sha256":"8A:A3:8B:F8:5B:7F:59:EC:FF:62:94:8B:46:FF:DE:AB:43:6A:29:E0:E9:08:F2:56:40:67:7E:01:E2:56:A9:25"}}},"request":{"raw":"GET /js/th/SXktXD7IgssctB1YeRWb5dtLTLR1yj8LSKAl5tlYnuY.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23757\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 05:05:42 GMT\r\nexpires: Wed, 12 May 2027 05:05:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 11 May 2026 14:00:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 430747\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62511,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61268)","md5":"0bb4a30d5906cfd5ac25418b157ca8c0","sha1":"1df100a9b49d74ce46c21b1d2bfff9451e38ada9","sha256":"49792d5c3ec882cb1cb41d5879159be5db4b4cb475ca3f0b48a025e6d9589ee6","sha512":"c364f8621e0734e019ca04f9355301a51da4e043ab7d3effe7ae3a088a95702a68b399c975cd631cd3502f9cb6e9a0b2b85dabf3be4d147fd37b4c9fe72b7101","ssdeep":"1536:jzTo85b2YjSnb18WOmlEpmpp6BilewF4Isz:5BnqEpq6gC","tlshash":"c95308dfb2c163315af331e2405b410aa2bead255c84286eb914e7f45b30c8b557bf7a","first_seen":"2026-05-14T07:07:11.078777Z","last_seen":"2026-05-18T06:58:26.135753Z","times_seen":2606,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":78,"dns":3,"connect":7,"send":0,"wait":9,"receive":6,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"8c2091a992e4303600967e53388cb5c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191114\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff820e8482678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10918,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10918), with no line terminators","md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-13T13:48:06.718059Z","times_seen":14315,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 23:38:19 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191114\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff820f84b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-13T13:48:06.649417Z","times_seen":42439,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 23:38:18 GMT\r\netag: W/\"7c8224daff490314bbee102edaf64029\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191114\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff822385f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7c8224daff490314bbee102edaf64029","sha1":"13aabbb4f10305443e0fbb19c55fd27c149828a6","sha256":"a3652c70ae4477871298cf7fec970ce38a1a5f26a814c06b72cbbafa9c6f3298","sha512":"4a1ac844d0cfc147baefde211336f72422efaaa9c92b4e3a150e434aa3bcd0ca3ab49c34aefca46bed94139738c01ec1af989beb50b48dc747faef0cb8a779b0","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBCrikauV3cGiH27PNWE98MGfU0nPROpmi0U:xauVLmi0V0d+tKaK","tlshash":"dda399b2e56710cc7363c22692c1faac1029e370c757caa6f827767d4bc25963562f9c","first_seen":"2026-01-16T00:46:03.978063Z","last_seen":"2026-06-15T21:26:04.429831Z","times_seen":27805,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0j2i1qlpiifre.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0j2i1qlpiifre.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230614\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0j2i1qlpiifre.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"e0ebbfc88cce10e2a65e936fbb7c840c\"\r\nlast-modified: Thu, 14 May 2026 12:41:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0j2i1qlpiifre.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::ntnv2-1778993088007-98699c0f78fe\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":32718,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29284)","md5":"e0ebbfc88cce10e2a65e936fbb7c840c","sha1":"166a767f132e91e54c1c9e38d12827b3305f3a63","sha256":"4c9fb4b14f7608a74f1880e2eec3157ff6b843f5e105c1e60ad92bc21292ad16","sha512":"01cf56ef02daee55a7901cf820dc4c1d2fc1e614d38c4f259f7f16c9bc9f90bc6d7d87e6594d8f5c1f730c678d50b9b5c9e9ca0318397a5d69109539ba7e6f59","ssdeep":"384:JMxyUJQrtg6KaFpY5UG2er6eRtp1cHBYjYvn4MjW1xL2L+kYLoOWfwE6kUkFQ2sc:JMoScHBq04MjME+PorH6kU12s37zU","tlshash":"a9e2d6a472d5f89117a354a4803f100bf23d1c7a256cb4b4a3e1ccea79a059de533fda","first_seen":"2026-05-17T04:45:35.480055Z","last_seen":"2026-05-17T04:45:35.480055Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/16fgid~momoe6.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/16fgid~momoe6.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230614\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"16fgid~momoe6.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"0efb9e308b515b53ff9cd960eb649730\"\r\nlast-modified: Thu, 14 May 2026 12:41:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/16fgid~momoe6.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::27fn5-1778993088008-c86eb694da09\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":44411,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24405)","md5":"0efb9e308b515b53ff9cd960eb649730","sha1":"97caf37afcdee78fe81c99c44b034f74efdecbb0","sha256":"13169ce7e841c2254ca4b8e07bd9cf3e802fb13d0a00fb26c5a2fcc83d6be571","sha512":"85c3fa876a5c24867ae3dfa9c00082c4f87e3334a72fa7230d9308ccc02bf37279ab32162dc795aee3578764508160c1973da5bea9bcd4c0489b3af0033c3d10","ssdeep":"384:R7KdkTd9WjBTBdMcTXIpo1bIBqjac/s+rPYjDExpCkKMny1V0UchwQhVHAlweql:KNykSo1kpc/s+zYXExp7ly1V0UTY","tlshash":"c513d7b132d5faa3539341e1e43f2016f2780c7520ad6470a7e89c9f754c88da6befa5","first_seen":"2026-05-17T04:45:35.481307Z","last_seen":"2026-05-17T04:45:35.481307Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/_next/static/chunks/0uyemsny99wfy.js","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /_next/static/chunks/0uyemsny99wfy.js HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qfs-ledger.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 230613\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0uyemsny99wfy.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"437642aa30a112373abfaebf1c31b2db\"\r\nlast-modified: Thu, 14 May 2026 12:41:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0uyemsny99wfy.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::9tfq2-1778993088018-2b5083bc6100\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":137925,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"437642aa30a112373abfaebf1c31b2db","sha1":"bd12fdfa450845cff3556c46b122d05448c0921e","sha256":"f7d825acf34802e2ec1e550f7a13ff4cbea6f137c6416a3844f8e9a1033ef2c3","sha512":"f532e478342572a1761d2454bff302283d1e5261c4ffe2e081f36dad8d2495fa40a107e7a7bdec6748a30ca3cdc13fbd90a04f748321e3c847105509c8e6141e","ssdeep":"1536:8DRq1Er3bsgDNLKmQx1VfGIH80Vc36vGdWGI+/ENV/xRI0KPf0NsETUIgpwce17:nCeheIH8MGJ/EnboH2","tlshash":"fad309a673517122d3cb5199c4af4b41b33b58d82009443cb6bd9dcb296098a62fff3e","first_seen":"2026-05-17T04:45:35.482496Z","last_seen":"2026-05-17T04:45:35.482496Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfs-ledger.site/?_rsc=nn07o","fqdn":"www.qfs-ledger.site","domain":"qfs-ledger.site","tld":"site"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:48.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qfs-ledger.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 23:23:17 GMT","end":"Tue, 11 Aug 2026 23:23:16 GMT"},"fingerprint":{"sha1":"43:D3:F6:AD:9E:EE:9C:1C:5C:78:93:D4:1A:C5:4B:F8:F1:0C:8B:EC","sha256":"AC:04:D0:9D:7B:4D:13:34:59:70:88:73:84:88:E4:8D:2D:95:12:6B:C1:19:EF:8E:5C:D2:FC:AD:CA:4A:EF:84"}}},"request":{"raw":"GET /?_rsc=nn07o HTTP/1.1\r\nHost: www.qfs-ledger.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qfs-ledger.site/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 274530\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 17 May 2026 04:44:48 GMT\r\netag: W/\"a59391ac25a631f270de35abc4bb66a4\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/_index.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::hnkth-1778993088504-dbe5f1540fdd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3787,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2505)","md5":"c86b8fa427db135a60ecfd4f608532ba","sha1":"64acc15aceb0166603b74c1f4132e19352f24672","sha256":"bb4a281131441115d17c0fc227ce349094ebfbcc34ec69f5e14a4cc5c531719a","sha512":"ade8958519f832110ef7b431dda0e24abea985083b48e7dacf0be5df31d2da7e39c41099786b2f5d6942197f421bf34b1d840ef3003d6e6553bce2d8857672cc","ssdeep":"","tlshash":"8871d33ad909fe6e6c32c54d241fa71b918d4a3756744dbcf79ded6802811363bc6ac0","first_seen":"2026-05-17T04:45:35.483661Z","last_seen":"2026-05-17T04:45:35.483661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.qfs-ledger.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 23:38:18 GMT\r\netag: W/\"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191114\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff82208582678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-13T13:48:06.646539Z","times_seen":34133,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a065cc0373/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qfs-ledger.site/","date":"2026-05-17T04:44:50.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a065cc0373/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 17 May 2026 04:44:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 23:38:18 GMT\r\netag: W/\"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 191040\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcff822185b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-08-13T13:48:06.680148Z","times_seen":39150,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}