{"report_id":"37e4ea2c-ebf7-48bc-aec1-eebc7cd1f1d6","version":0,"status":"done","tags":[],"date":"2026-08-05T23:50:23Z","url":{"schema":"http","addr":"qfsledgerfinance.com/","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"172.67.169.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qfsledgerfinance.com/","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"title":"Qfsledgerfinance - Secure Digital Asset Protection","dom":{"size":64258,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (937)","md5":"c780062acc450a390bc53120e3b80d02","sha1":"ca0fb34129ffe9d592cdaecdf72170e5ea0f8e1b","sha256":"9caf19929f0b9ebe2c565f7518a25e5bafc5c1ea32634b9afc9cc35bc7290973","sha512":"7cb57cbfc66e401bb703fe2aafc1131ec87264851f1206fc5b47e8f7c0c710ed88277a65231a82cb3dc0982aea285682ef9d459d66b4e9c0051551148051958e","ssdeep":"768:SLGgshgRnQhcaTQv6VICkURUYZn+M+HEBkjEUikXmnJj0:SGgbB67+HEJRj0","tlshash":"7b53742a16f250721dd7a1f1b7ea261ebb39c04bca2fdd597adc02508fca9b45c87704","dom_hash":"domhash0a52e956cd944117c3621565ed3f7a9a","first_seen":"2026-08-05T23:50:25.763859Z","last_seen":"2026-08-05T23:50:25.763859Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"qfsledgerfinance.com/","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"172.67.169.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-09T23:50:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-07-31T16:22:07.688605Z","alert_count":0,"request_count":4,"received_data":330508,"sent_data":1895,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"63.184.161.180","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-07-31T09:44:09.476727Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":635,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qfsledgerfinance.com","ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-22","domain_rank":0,"first_seen":"2026-07-12T23:41:42.819111Z","last_seen":"2026-07-12T23:41:42.819111Z","alert_count":16,"request_count":16,"received_data":1105046,"sent_data":19073,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.74.66.160","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-07-31T09:44:07.36789Z","alert_count":0,"request_count":1,"received_data":1620,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-07-31T16:22:07.591274Z","alert_count":0,"request_count":1,"received_data":7743,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-07-31T12:27:29.608636Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qfsledgerfinance.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-06T00:56:39.291299Z","times_seen":415043,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44cef163cd71724eac298eeac2b312bb","sha1":"30d3599e90a911d9389ea0efcee51821cff3bec5","sha256":"2689fc54cee2e4c0f119d254a9d6b662f3a8f7c0bbcd91eac1695d6a84477df4","sha512":"9d40ffbb2932ea9c7753a1f9b2834cb072e8837a756a9fb1fdcf3fb877837beb276fb0ef026032950b207320467751b22907854d56570dc40c7166fd89600b11","ssdeep":"","tlshash":"6ff0233b1c325058474370b6137ff000386530b24095c4077c5cc4b98f30faaaf14d18","size":512,"data":"","first_seen":"2026-07-12T23:41:44.85384Z","last_seen":"2026-08-05T23:50:25.796782Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-06T00:52:07.768111Z","times_seen":8029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BI-Moxe0.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a9d55e8dc66eb0b690bd00f7271e647","sha1":"befc832793a4eb6de6db51438d8b904079c156b9","sha256":"433b24ab945d5bf78deacbbb62265f4ce7fe10d8c06fa050f4c007c0e9f4f0eb","sha512":"af067ad24e8068dc001f356c1b6e8b3f821564fd781c448c2998cf3a081be1a37979d9804f20eb8de2960507e53ba46533d583dfae51eef19e217421a3049c04","ssdeep":"384:D7wI6JME1dwQBSB8g6eBtoK6hnETSzgfQBATS:DMxN1dwQk8g6Q+nEGiQBAu","tlshash":"c472e8341240783fb62b6919526ce497623ad25ce6d3c038de5fdd4d32d8cc299a3bb9","size":16032,"data":"","first_seen":"2026-08-03T19:54:11.753674Z","last_seen":"2026-08-06T00:52:07.761687Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-BKfXgL7M.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d330899eb0177ca492d1cf16427c94b","sha1":"11b3e62f0c12c835c12c5d257f0ce22aea3e1954","sha256":"012c673b4f73512d934760a31f93679d3525ef13e30f4473a0db5d115a037544","sha512":"c9b9d475ba9d05ee38e02cd796dad489ddcc46a4d1728dc818475a047ea61261f9aaca97596ef5f189e1d571ce03aa1f46b382cd8a1d4fef892dc9cad53aa8b9","ssdeep":"6144:FMAopqOWSr8ad2jJKaQKhJp9cuIfoTkqM+9+:4qOW2Rd29B/DIfoTtM+9+","tlshash":"b3443ad53294b035439b51e6906f1106f33e5c19580d812cf269ece679baec8a2f7fb8","size":273837,"data":"","first_seen":"2026-08-03T19:54:11.723826Z","last_seen":"2026-08-06T00:52:07.755689Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:53.191Z","timestamp":1785973793191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/newhome/css2.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:53 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJ6SJKHReEKwKgcXNWRYi58sXPt%2B98x2SBqdB0921jLNnMkSoel1C3IPNS7rMjvkcXeWKJvYoXyB0aWehFFG7u4E0ykpM7tXuRWJnveTPIkimAB5icPu87gmsbHlLg2COZhcsGxI2w%3D%3D\"}]}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a269b36f6efd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48432\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":49115,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-06T00:58:37.259853Z","times_seen":87171,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-05T23:49:50.675Z","timestamp":1785973790675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:51 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; expires=Thu, 06-Aug-2026 01:49:51 GMT; Max-Age=7200; path=/; samesite=lax\nroyal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D; expires=Thu, 06-Aug-2026 01:49:51 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BEfx3ErJ5XKrCply6w8irwsnoDBHlH96PS0RqHFLBT2Xup%2Fvvx7LV1jIYh3enTkqhylM18nGV0NC3QC6bm8xzgLQgvXTH3TsfEHbc4jwgNl2E%2Fw4TaM%2BUmY3nlguAewoKaV6ygJFog%3D%3D\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a269b35fdd331a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64561,"size_decoded":12938,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"950d92960063453b4ab39a992cd75771","sha1":"5f7c7ab4efb731f1290057933f330cabfbdf7fb3","sha256":"86f3529bf04a74e78dea00d6bbfe74a077b5c004307a42d007dbe738fa49383d","sha512":"6ec6760e71d1dd1b82b9f72db247ce457cf118d9d5ec6d7de93854dfd9b01ee217536e01f91ae9a3e6480ce2c5b6f08046f48c8ea3b6c98ee23b720255b30868","ssdeep":"768:oLGgshgRnQhcaTQv6VxkCy3CYZngQgRcpkjEbiCXmnby:cGgbB6ygRcw5y","tlshash":"4d53532a16f250721dd7a1f1b7eb261efb39c04bca2fdd597adc01508f8aaa45c87704","first_seen":"2026-08-05T23:50:25.768465Z","last_seen":"2026-08-05T23:50:25.768465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1353,"timings":{"blocked":-1,"dns":5,"connect":14,"send":0,"wait":930,"receive":403,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/style.css","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:51.828Z","timestamp":1785973791828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/style.css HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:52 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NPsUFdPLP4J1w15zxPrxWCCl2dq561YbBjrHUYAT4zHU5iK9q9iAxjGLbl%2Fv9p5hO87bqb1ahz886NZWc3x0qyDIulnUZhZvwmCFv6YQ5FSiGZdNqiXfXaIth4wsMlCVtcShcFqGsA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a269b366edf81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78114,"size_decoded":14078,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"62e0ec70096bb0271e5bbdfd2d00cdfc","sha1":"73b8f56c99d70a5b7b4d7049201eac2cb69298cc","sha256":"b11a09a68a857cad21802bc92e66027fad792962a517752db92978ac91bcbf17","sha512":"7f584ce1b25b7122b50b7bdcba972a7e096cc1d8babb264d81eed4f83adef5a79f9aa3b2301d1f259d4d62e8753978c80f31013825d9cc91eb3e1a511a07bd84","ssdeep":"768:xy23Hzs74dchpGALQhS3cmfGtA6g7i4zzx9/yLR1rkzSX:xy23HIznLj35e66S9ze","tlshash":"cc73f0e4f5fd18d05389e1d123072661bf0da328994a2c69cab3bd8df5c2219c78e6dd","first_seen":"2026-01-12T20:57:45.254243Z","last_seen":"2026-08-05T23:50:25.770965Z","times_seen":6,"resource_available":false,"data":null}},"time_used":978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":385,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/style-5.css","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:51.839Z","timestamp":1785973791839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/style-5.css HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:52 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bG8PWBFjPuFVMRyz%2FOZGrWtMWcp3GrVFi1ZcbtsMizmpLpHLBen1zQmxav%2BKURuSEhfMNjujNGXFAQPPg4j4jX5njtG0jOaag1fs5MXwScHDIRYs%2FRaQ1z3hB7PDgvc73P7AoHnefA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a269b366fdfe1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231376,"size_decoded":26257,"mime_type":"text/css","magic":"ASCII text","md5":"79dd8162f34d171b1ca1395fa199537d","sha1":"e4891a79f0b87dadf392f8ff93e8949b06a1a7a3","sha256":"092daba5cf1a5d3a266dfaa15150106ae92499f9aa4ad35cca2ffdca474a1de8","sha512":"ecfe825917240a13b344c63c3ad563e0cff20401056a76ad7fa609488d1251b0c30bd188d4758babe3e75224ad051ed50c677c1cbe8f27966d7323b73c47c95f","ssdeep":"3072:2/GP5yanAhPUPQIBR0Js+XlS0/xATy6ZDa5aLGVEaXCt7A3C4jevbqjc4nIZqJ6/:ITsGYoohNBdr","tlshash":"e13474e4b6bf2851a346f5c3118b9124b34ca21dcd5a9c1986e23cefd6d270dc6af18d","first_seen":"2025-03-03T08:52:56.456269Z","last_seen":"2026-08-05T23:50:25.773223Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":726,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:52.038Z","timestamp":1785973792038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 07 Aug 2026 23:49:52 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vr0GsgjkBTlS6zUMq9hSr%2Br1JGIndn2LV8TaYHOgIKPA2eRNoZ17gxW90nndEv6l2Boi1OTOP1ij3zuBjajCIp81ZNgdk4TrZkw%2Btl%2BFCD2JBsLhfKErWHbxCjlVp6DQn9jeGRrvUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 05 Aug 2026 23:49:52 GMT\r\nserver: cloudflare\r\ncf-ray: a269b3683e231a30-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1300,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-06T00:56:39.291299Z","times_seen":415043,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/0b2b4a9e74ea14958a3376f3821ff58b9047d820.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.74.66.160","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:56.744Z","timestamp":1785973796744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/0b2b4a9e74ea14958a3376f3821ff58b9047d820.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://qfsledgerfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 05 Aug 2026 23:49:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4f0-o2HYiD4xYTZ2oFXFa3rxiv94Ekc\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1264,"size_decoded":903,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6b9e2a68e3be3779cdb804999ebe54c0","sha1":"a361d8883e31613676a055c56b7af18aff781247","sha256":"2973704936c8226a17a6e0fc05d6fbac4936f1cc1a771a443b758625ea27b280","sha512":"c924bd92c95847845e99354df03083f6c6a89c04113cde15cf84262a3b3b62e2c5caa10edf57e28d068aba6500d51e235e9a2c09589a07736bc25759eff3539d","ssdeep":"","tlshash":"982179ad4a6822ed1245c7d6c5046a076bacdcb271007e7eea0d5a0e70cb2e5113686b","first_seen":"2026-07-12T23:41:44.842655Z","last_seen":"2026-08-05T23:50:25.77708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":4,"connect":21,"send":0,"wait":24,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:57.053Z","timestamp":1785973797053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 14:33:02 GMT","end":"Tue, 01 Sep 2026 14:33:01 GMT"},"fingerprint":{"sha1":"CE:B9:32:81:E9:D2:46:C8:31:53:55:D3:41:19:F7:94:91:30:D1:93","sha256":"54:C9:41:2F:97:E8:14:28:D7:2C:4F:FA:E0:C3:3A:BC:85:F8:14:22:1C:98:23:82:53:4D:5D:58:C9:0B:C9:68"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfsledgerfinance.com/\r\nOrigin: https://qfsledgerfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 05 Aug 2026 23:49:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 143765d349003193ebd3783518e376c4c54f428f\r\nx-77-nzt: k1JUBO5qA0Fxumo0qWWeKwxZ9zQrvP/v67OeQEHDWODbRiyh5GKqXAy+3dQo6pb4Kpqsa6c\r\nx-77-nzt-ray: e2f75420cf2cf5d94acc736ac3b6a506\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 225\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3357,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-08-06T00:52:07.770965Z","times_seen":539,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":30,"connect":8,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:53.187Z","timestamp":1785973793187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/newhome/css2.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:53 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVTJX0YnpczfabaJFdFNI4Ri0ERqIU0Z%2F7tyTNWnRc2ezqNDpJZW3itrxYF8jyUUNG6Q2DOpVKlav3SOAt5akRwSEAnL%2F0QqRtLzfbmeoRj6ra6RfQD0fy9F3ZDCyWujYqfpVC6W1g%3D%3D\"}]}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a269b36f6efa1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48432\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":49110,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-06T00:58:37.259853Z","times_seen":87171,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":350,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:53.189Z","timestamp":1785973793189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/newhome/css2.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:53 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6C0SObBuauq%2FTg6osmfi5V8J3SdajR2RKMy7r5nvQfaKn3GOhftWFzEUEAivjeGGEitaSZR6r6wPiNrSHqjatrjzWJM58IBxRAqdE0a7LME3HIs69iJwkrDrWH4Z0n5IxS8fDUT41w%3D%3D\"}]}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a269b36f6efb1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48432\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":49115,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-06T00:58:37.259853Z","times_seen":87171,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":349,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/Phosphor.woff2","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:53.192Z","timestamp":1785973793192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/Phosphor.woff2 HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/newhome/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:53 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIzGCAxqm7crkzlpuyWEdYjHjHdeyKRXjG3CV0GN0ZhVJtIzloENJ5%2BVg93c2E0BFqFGNmkE9kYUCYd0Qx48%2BlAb2cyDMSLwisUwFiBOzwyBZvQAohrQ%2BNa3yN%2FB4q%2BVE%2BDZpoakNg%3D%3D\"}]}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a269b36f6efe1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 147380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147380,"size_decoded":148067,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 147380, version 1.0","md5":"527636c38907af87d10e6b15ac392648","sha1":"0d815f14037397ccbfd48fe5dfbef96ed6e66205","sha256":"c2ea45ea05ff5c7df1936770c104725f2a68f43fd343f35f3da23a30b27de32a","sha512":"e8e65252471cb9b85a3f03e128c3d504c7ea73a1123bc40b18dec46cd1b13da83a1313b1606b9a969cb9bb646bade289e5c8b5096a440505113e1652190d2511","ssdeep":"3072:AQbeiU5I7UJEmgfV57cK0jt6lvmT9QiyDsoEmmTHNAk5rsSbro:paF5DKXfVmKRxmKgmmTHNWS4","tlshash":"96e312840a514ca8d08167f795c42b1bdac69bb6f0b1e94d941f9eecd3bcf90f2d4a14","first_seen":"2024-07-01T20:12:46Z","last_seen":"2026-08-05T23:50:25.781193Z","times_seen":4714,"resource_available":false,"data":null}},"time_used":1211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":597,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:53.383Z","timestamp":1785973793383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/newhome/css2.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:53 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxBDsnoVjBUCFao8l1i6rgVG1csSYsmwgCACW1Kv4%2Bk3xYiZ%2BZWtqfDvUQTfKlFf1yL5XDuWWAJqSxdcuk5aa%2BKYG7ZFRyRUWuj4RYnzjSrKKQCW2jAp5s3IiCJykWPSVAHph710%2FA%3D%3D\"}]}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a269b3709f191a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48432\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":49123,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-06T00:58:37.259853Z","times_seen":87171,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":349,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:53.385Z","timestamp":1785973793385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:49 GMT","end":"Wed, 02 Sep 2026 14:34:48 GMT"},"fingerprint":{"sha1":"77:06:42:CE:73:9F:CA:05:A3:6E:99:99:F2:3F:B7:EE:E4:60:E9:29","sha256":"E7:6E:68:C5:CD:6C:F6:14:84:A0:18:1A:D7:94:77:7A:28:F6:67:8E:90:58:94:AE:3A:65:6A:B7:95:0F:5D:1B"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 05 Aug 2026 23:49:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: k9viuk4SxtNot4KNGfgzZq1oqQeMGew+ia0/lJ4Tckl/UNdmtESuDq63psELzSFMeqwc4j0\r\nx-77-nzt-ray: e2f75420665a83bf49cc736a101b5a29\r\nx-77-cache: HIT\r\nx-77-age: 34\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-06T00:52:07.768111Z","times_seen":8029,"resource_available":true,"data":null}},"time_used":3315,"timings":{"blocked":-1,"dns":32,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CliJwUTR.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:56.959Z","timestamp":1785973796959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/style-CliJwUTR.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://qfsledgerfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 05 Aug 2026 23:49:56 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-8d68\"\r\nexpires: Wed, 07 Jul 2027 08:30:01 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: k2e4oi40eRgbEYmkLlxriUj+DJXpmF+h2Cpd0P9FZN5YwVDVw4fpkQ7uLGTNaHJd+Mb9NfU\r\nx-77-nzt-ray: e2f75420d328a3d849cc736a551f4539\r\nx-77-cache: HIT\r\nx-77-age: 2560754\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36200,"size_decoded":8208,"mime_type":"text/css","magic":"ASCII text, with very long lines (36187)","md5":"840dfdb09fc1a11a5c3a5b5f808e3160","sha1":"46140a50b100fa33b974027c13bb9f2de5c784b7","sha256":"b5b9a339413a55a0d828ab6be236e2a495594a19fb3283f846c607d7b6996ad7","sha512":"61e37700ee60ed584c8ae7b6313c5dddf6950c9664aa57f32bb4a70d775b1a1d5bfc249c6c1238495ef2cb7e12bae5f00c4ddb3df4dde44a01081117b74e2ba2","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+eZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XqcrNSN56DwQ43","tlshash":"05f2966daad9093dac23c179e3f8e58c911af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-07-07T11:50:17.712499Z","last_seen":"2026-08-06T00:52:07.764355Z","times_seen":3121,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/style-1.css","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:51.830Z","timestamp":1785973791830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/style-1.css HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:52 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VT6g83QXfJY7QkvIte6JSlmiSdpf7pLUABB0Vxzrymd%2BolYwHAU6FF1l8KgGwN8ZyDFhodPb3C083nGvO%2F2zFtp5pexUGe%2Bn%2FMibMxbHEMP2sa7nNoiqG6HwhL7SiibONhPHQqXtKQ%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a269b366edf91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85728,"size_decoded":14235,"mime_type":"text/css","magic":"ASCII text","md5":"b91f9f3668fc339d174ae674890ca489","sha1":"8513aa45766d919de67b2e2954edb2e717eb314b","sha256":"df99e06a1ea774b7c8d55049046e2fcc5d72122bd3719cc0f876427efa7f7cc9","sha512":"6c4136c461b4c8597dd7750464cc89cf2f206fda503e86b1f36d56099c85cbfe7ce3df49f05437959d261eca3b4a2e613b6e90b9ea730bd990bd33ada426c65e","ssdeep":"768:3iCfRFurGvcZZsAbW/whmSfO7SkYP4gXNLNdUzDtrMzeP:3iCfR4bVbhhfG+kkJNc","tlshash":"8a83e0e4f5bf1a901b21d1d0238a1620bb2f922c9a461c5eeb6379cdfdca118c58dddd","first_seen":"2025-08-17T05:09:53.352347Z","last_seen":"2026-08-05T23:50:25.783788Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":534,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/style-3.css","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:51.833Z","timestamp":1785973791833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/style-3.css HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:52 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0eTUOvtLgJanJRJrmssWHj4ZsTw2NRMqKIuPOUkOCZZ517DAkCEzPnUS7Jg2KLOlgE2LtiqoQXhmOJEsoGKa970ovvIN9yQ0HV2cve5jd0r1%2BjJHgUiIZilXPQbZdAo1BAgqIaj5dw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a269b366edfb1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85728,"size_decoded":14181,"mime_type":"text/css","magic":"ASCII text","md5":"b9550e65106c2f8441b2b9eee7ed245d","sha1":"095bb27139980bc98023dd4c3e811735c3c6bb37","sha256":"6b8114329ea7271e9436df8c138dd40f11014d6f586f2e9751066543d61d1248","sha512":"00d9c54c692e7cc950ab543129a71318469ce03806b9de11f0279dbb57e3f820f96f265b67d8824fa4da7e4d91fc0b7d6b0e2616540c574e546062a9091e58a7","ssdeep":"1536:beaKqhzERv84EqLCDmu3Oug/mH89BUkr6WfzA3LVUr5T5FX2aIoNlY:beaKqhzERv84EqLCDmu3Oug/mH89BUkW","tlshash":"e983bae4f5bf28921301d1d0330b1a61bb0d9324a946ec79c9e37ead61c2999c58e7df","first_seen":"2025-03-03T08:52:56.460378Z","last_seen":"2026-08-05T23:50:25.786103Z","times_seen":9,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":361,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/style-4.css","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:51.838Z","timestamp":1785973791838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/style-4.css HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:52 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BVOjQba2hBARMxJ78iuUniIdxnT3P%2FfNpa%2F0%2FSyiaBUo0wGE4leEFqZnIFqm086Rj0T0arpCiMIB%2BCKGt2WpFCbVaDpsYZ7Me4fwn%2B4Kk4k6j%2FfkC%2Be5f7Qp9ErjUZ5CjGLoIoc%2Fg%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a269b366fdfd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85728,"size_decoded":14196,"mime_type":"text/css","magic":"ASCII text","md5":"eea66dfef3e214ef48ead678a3c69b38","sha1":"82cdfc5d5e2fcb94e92548335b8ce0562a93eb1d","sha256":"19206e088353c5b0e358b4e745513bc4bb06840c92ec4eba25288601ab3d3265","sha512":"19793642324006b8905a5ff1691a4f57fbf511bf3dd21db71e94037f6bd8bca3de7514e99c9586366aa07be45fba101140ca7a35d97bf4b5d2d4fe44248412a9","ssdeep":"768:Jco1Z16hMNSpfiIxQ3c90yfeLIw89KePvx7N+jLTrWROx:Jco1ZkbRxP9d2cwWFvG","tlshash":"f183dfe8f7be1ad03341d1d0220a1672bb0d9324f986bc58c963798d71ea119d78e5fe","first_seen":"2025-08-17T05:09:53.341088Z","last_seen":"2026-08-05T23:50:25.786977Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":400,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/storage/app/public/photos/4v1ll6SKFuYnBGCL22vqv1kBlZMLZGklijoAhUyw.png","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:52.035Z","timestamp":1785973792035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /storage/app/public/photos/4v1ll6SKFuYnBGCL22vqv1kBlZMLZGklijoAhUyw.png HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Wed, 05 Aug 2026 23:49:52 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUesWXfYfxXUTc%2F7lFvFduEjjCreNSpog%2BX4%2FHhR3c3qk3eDGLS6wyp0rYIQOgQCeiSFgOb5YXfsB9WPUDMTIc42zJaM0HM3evxXzT4NTZLZ5X15Hxbgce%2Ff9aO%2F%2F8s8zoNhw%2FKfNQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a269b3683e211a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":939,"size_decoded":1125,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"ce9758dd1e9b5aa10fecd9baaebe009c","sha1":"b20fd65c63f8d5ed6de52b4a664a3233fd9d5577","sha256":"1dd53f1e5d699791cfa4bef875dbec4cec183061b4affffbe25cc0108daeb733","sha512":"0476bcd2b4846c185e27d74f216b250e9cb31747fda3070226124d31bdb2f76680006651bcd1208ec0ae709380b6f9eb4784ee1ccc797a2198232cd0603d6391","ssdeep":"","tlshash":"b811046b08412b7f1210c2627011372de0dfaf1bea426950d0a3056b6bd4ec5c5be55c","first_seen":"2026-07-12T23:41:44.841062Z","last_seen":"2026-08-05T23:50:25.787788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/logo.png","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:53.834Z","timestamp":1785973793834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/logo.png HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:54 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aVnWp5qJ9SVo5ZjDFjzLK3ec4m0Fer8D6RbAJJkneS29z2N5jMU%2FgPiI9KbKqJxgIaqIPQMUd%2B0vppqWzDzS%2FRH43znvSRfvzX74SA%2FXl4AKQ7u3t8v18G4cYud%2Fy7CLrjZAAw9Bow%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a269b3737f4c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11102\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11102,"size_decoded":11785,"mime_type":"image/png","magic":"PNG image data, 140 x 141, 8-bit/color RGBA, non-interlaced","md5":"e56b11678fd8867c3b8bd49bc2bb36ce","sha1":"04feede257525bd31e86b5f7f764b90638edc4c0","sha256":"00ac74a578020118b2e088f0124abba746995c0af41d523d5d131aec6e34fa2a","sha512":"a48213b30d3ddfc2032d597bb494deb0c19238d2c7916e64aa71952b3608dafce921f712001094a0967bd6aa22d1bd2ebfd256f9ce1d852e78500f18dcd7cce3","ssdeep":"192:0S/OuII98A9y0TNNFck+dGYBS9n5xFHcpHJxQTqnl10Ganx7y77ntld7pkNHWjkY:zB99BNNFck+dNBSDxF85J2il10Gansf5","tlshash":"7032b0c52b22db64c525f323cab13bac7bd9a4d2d8c6e8451f86f03c59102e5bdada50","first_seen":"2025-12-26T21:20:04.993599Z","last_seen":"2026-08-05T23:50:25.789832Z","times_seen":15,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BI-Moxe0.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:56.957Z","timestamp":1785973796957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/main-BI-Moxe0.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://qfsledgerfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 05 Aug 2026 23:49:56 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-3ea0\"\r\nexpires: Tue, 03 Aug 2027 13:15:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k5jymyRzVktQe+MkFdcQlqiMwhE5WYjHRXGhu/GE6ML4shIQuZfJ0Xelm05oIGx99hNq/5s\r\nx-77-nzt-ray: e2f75420d328a3d849cc736af20c2539\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 210876\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16032,"size_decoded":6730,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15624)","md5":"6a9d55e8dc66eb0b690bd00f7271e647","sha1":"befc832793a4eb6de6db51438d8b904079c156b9","sha256":"433b24ab945d5bf78deacbbb62265f4ce7fe10d8c06fa050f4c007c0e9f4f0eb","sha512":"af067ad24e8068dc001f356c1b6e8b3f821564fd781c448c2998cf3a081be1a37979d9804f20eb8de2960507e53ba46533d583dfae51eef19e217421a3049c04","ssdeep":"384:D7wI6JME1dwQBSB8g6eBtoK6hnETSzgfQBATS:DMxN1dwQk8g6Q+nEGiQBAu","tlshash":"c472e8341240783fb62b6919526ce497623ad25ce6d3c038de5fdd4d32d8cc299a3bb9","first_seen":"2026-08-03T19:54:11.753674Z","last_seen":"2026-08-06T00:52:07.761687Z","times_seen":74,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-BKfXgL7M.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:56.958Z","timestamp":1785973796958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/shared-BKfXgL7M.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://qfsledgerfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 05 Aug 2026 23:49:56 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-42dad\"\r\nexpires: Tue, 03 Aug 2027 13:15:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k0VzbRnMFEvHiflNIjysTIntxRP+QdTRgW+RK1dw/v7xZvPBLsOi9oYZEKtiXONKcs9f4mA\r\nx-77-nzt-ray: e2f75420d328a3d849cc736a8aa23139\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 210876\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":273837,"size_decoded":93095,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"6d330899eb0177ca492d1cf16427c94b","sha1":"11b3e62f0c12c835c12c5d257f0ce22aea3e1954","sha256":"012c673b4f73512d934760a31f93679d3525ef13e30f4473a0db5d115a037544","sha512":"c9b9d475ba9d05ee38e02cd796dad489ddcc46a4d1728dc818475a047ea61261f9aaca97596ef5f189e1d571ce03aa1f46b382cd8a1d4fef892dc9cad53aa8b9","ssdeep":"6144:FMAopqOWSr8ad2jJKaQKhJp9cuIfoTkqM+9+:4qOW2Rd29B/DIfoTtM+9+","tlshash":"b3443ad53294b035439b51e6906f1106f33e5c19580d812cf269ece679baec8a2f7fb8","first_seen":"2026-08-03T19:54:11.723826Z","last_seen":"2026-08-06T00:52:07.755689Z","times_seen":73,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/style-2.css","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:51.832Z","timestamp":1785973791832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/style-2.css HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:52 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoUzSPa5sl5tKvWreOa8UprcgrpkfGIfHl1MMr0VuOEsCNWlEQkwsP9p5YG0thfbeW65VGG8MNVNExD%2FSOvseBYxadDS7zoYFAWpv1WPcE0YScoIwGAknKlfYYM0oY%2BPoMbbatjHKA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a269b366edfa1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87261,"size_decoded":14176,"mime_type":"text/css","magic":"ASCII text","md5":"dfa75d5c7136e584fc77b9eb3bce6334","sha1":"735a8399f403348987a0a74ed166b9b47c08a6bb","sha256":"9eb704e545217ced9e9f325cae256211723b7174070d670040eef36204df1a08","sha512":"c3bbe0baa340baab979332305b448ecbfe9ee81faf1f0a7fa888e0236f63ce4ff25402645b179e6d0334842657afaa455585db91c9e713e453e5a51c1287c9c8","ssdeep":"768:yxNC9RoWla5NQDGUfrIN1ENW/P40e/z96M8ftPxOPjqgA:yxNC9u1pUkNCo34jp6H","tlshash":"0183dde4f7fe18d09301d1e2a20a9761bb0da3249a462c58ca6379ed71e211dc7cf6dd","first_seen":"2025-08-17T05:09:53.343467Z","last_seen":"2026-08-05T23:50:25.792867Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":581,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledgerfinance.com/newhome/css2.css","fqdn":"qfsledgerfinance.com","domain":"qfsledgerfinance.com","tld":"com"},"ip":{"addr":"104.21.71.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:51.841Z","timestamp":1785973791841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsledgerfinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 20:42:51 GMT","end":"Tue, 15 Sep 2026 21:40:28 GMT"},"fingerprint":{"sha1":"B7:A3:FF:62:14:99:11:CD:6B:ED:85:50:E4:01:3F:A0:AD:DD:86:4C","sha256":"60:BB:9C:E8:AA:C4:DB:50:B5:B7:A4:DB:12:5B:5D:19:65:6C:9B:1A:79:CF:67:F3:58:AE:3C:17:2F:7E:99:1D"}}},"request":{"raw":"GET /newhome/css2.css HTTP/1.1\r\nHost: qfsledgerfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkJQY2ZUWk1nQW03ODVNcHE2YUFsOWc9PSIsInZhbHVlIjoiUFBuMmxkSTl4WlFpOU1ZQjFMcUNZQ1U1bzdaRDdTT25Pci9kWlg5RlRvajhnVDg2VnNsNGp6KzkwamJQWWp5MEpNcTZxazZJaTRGZFhPc0Yzb2QvSk12aS85Wi9yS2VJd3ZZS29JamxlNUZoNTl4N1lsQ3lsb1pOTmZQQzVDZmMiLCJtYWMiOiIyZTU4Njg5MzI3ZjU1NGQ0Mjg1ZDQ0ZWQ3NDliMzc0YjVlOTA1MTFjOTJmNmJiNWUxODU1ZWQyMWFjYjA2MDNmIiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6InNVK0hnWnIrZlFpejBKWVkwa0ltb0E9PSIsInZhbHVlIjoiNVVtUGZBTW1Ud0xZNjBTbjhUNlRmOGJLRGVuSEJ1T0NBai9KUE5jT1pwb3p3SUh3YXppbnpMZ05pK0Y2S1h2clVjaDN5R2xpVnJkYnZUOVhRQlY5dXNtTDNHWWJ2aUNYUnk4a1NhRzFhNDJnQWRPQ2wyQll5RlpOSC8wRERGeTciLCJtYWMiOiI4YjIwZWU4NmFhODNhMTY4ZWE3OTBmZmIzNzkzZDRmY2E0ZmM3MjRlYTRmZTMwODMyYWJhZTM0NDQ0MWYyNzBkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 05 Aug 2026 23:49:52 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 07:57:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bBxncXaMZ0lwlyDwIGh5ar6qsZiBndQWnE5RUEGXuXBI258cGnidFpbBiA28yLFQf7%2FBmwcTW7sG0vOXqqRF7bDNVt0PNqIS9OWRBk2jSRdAZxS6T2l4c%2FSmwp5EsXMs5FoYkIJEGw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a269b366fdff1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20650,"size_decoded":1568,"mime_type":"text/css","magic":"ASCII text","md5":"cebe17b520a60e28353f7d57ce797741","sha1":"4755e09ae6d634fa8fd2dbfb6d0f644616f74c75","sha256":"3ae03f7a41801a1c00fcef1029086f200d223d60835620244f08de0ed27fd3e3","sha512":"df5ddfbde8b8f1c2b69fad95c127613b79d37cce83d0d78f0e5395beb02a2a706935b7277aa1a9e6025459111f739303fda75508e6555d67bd6a1085686bf954","ssdeep":"192:wEA6XD3lOQiwpENb+D34nQDw6EO09D3/AQ8wXEr90D3i5QlwwEE+bD3RKQGw1Ex7:7XPWaQdZxU8a7TTimkeyQaYWku5","tlshash":"c192cc90042f5000e7972cd227cf3f366edd6148a049da786ffe0999acdeda953a0b5d","first_seen":"2026-03-23T14:28:04.870603Z","last_seen":"2026-08-05T23:50:25.793884Z","times_seen":4,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"qfsledgerfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:56.879Z","timestamp":1785973796879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://qfsledgerfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsledgerfinance.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 05 Aug 2026 23:49:56 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a7093a4-891\"\r\nexpires: Mon, 03 Aug 2026 13:20:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k2WsV/POV3tM4ZHXo594Na6x6+OlE2kNBG3ubkTNdg0xuUpXeOibWZimxmSrRdj17k8USds\r\nx-77-nzt-ray: e2f75420d328a3d849cc736a1c4bd737\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 11\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1044,"mime_type":"application/json","magic":"JSON text data","md5":"9f40d3a11c02b8dc0a1627186b6f2cd4","sha1":"705146cfc3126ce2d8ec54d6a5743c79aa0a91e4","sha256":"9f5c54c74d4c6345396c9b2e3a04393f90570c1eb949b2c9bf09a251e65487f1","sha512":"a2a090de8960f7292b52268ef5e5212d6a74b19840794d91c6e222f17e7f0a6b125d577fda4d95701f350b0c8d5c49025f0bf220c8f349ef58996693aad11b1a","ssdeep":"","tlshash":"fb413793c0f80d9317cc652b789585415d90c3c7ac893e0d76ae8a6f6f4cda914e677c","first_seen":"2026-08-03T19:54:11.717069Z","last_seen":"2026-08-06T00:52:07.745442Z","times_seen":70,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":31,"connect":8,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"63.184.161.180","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://qfsledgerfinance.com/","date":"2026-08-05T23:49:57.162Z","timestamp":1785973797162,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://qfsledgerfinance.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: kN+a/LhrCdiNpiS8oenS9w==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 05 Aug 2026 23:49:57 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: qXZLdhv9o/iGlQzpVRPyxlPgUnw=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T01:00:56.500297Z","times_seen":17734268,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":0,"dns":366,"connect":362,"send":0,"wait":28,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}