{"report_id":"430c00f2-8787-4c10-b30f-4925f492aeb1","version":6,"status":"done","tags":[],"date":"2026-04-17T21:48:31Z","url":{"schema":"http","addr":"ledger-qfs.com","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ledger-qfs.com/","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"title":"QFS Ledger | Quantum-Resistant Multi-Blockchain Wallet","dom":{"size":39363,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"59a08b36de11d16e92f2060caadec499","sha1":"964be3c1a07fda228878123391730e86a5857236","sha256":"771e331157a1c1ea6e941e01f66b1a9975314fb4ab40771b9e9fbf0f99175713","sha512":"5380d005e52d584c0ba0fbb32dd31850934abadd8a9f85a2c7bbaa495cb1088e047e40889d6fc4ea013b5828a84353c8e02f279e339cf1885501d6c97e4532be","ssdeep":"192:pvKd9sD9zRXs/0mC0mqbiyeFUP7EJKnYEiqCEp/FQP8LqYINXLwGx2CPpq3FDzv4:pu9y9EAeCn+Ze+8YRl3aoL8Gg","tlshash":"00033f5a65f210225943a2696bf327093b25d003c909cda93bfd4689cfc2ee9cc53f6d","dom_hash":"domhash2b17d4f30e015206252052d965a43456","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledger-qfs.com","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-22T21:48:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-12T22:33:20.808909Z","alert_count":0,"request_count":3,"received_data":363216,"sent_data":1569,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ledger-qfs.com","ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-14","domain_rank":0,"first_seen":"2026-04-17T21:48:31.911903Z","last_seen":"2026-04-17T21:48:31.911903Z","alert_count":32,"request_count":16,"received_data":1550161,"sent_data":7378,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.turbo0.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-22","domain_rank":0,"first_seen":"2025-07-04T14:03:00.623169Z","last_seen":"2026-04-08T19:47:54.455869Z","alert_count":0,"request_count":1,"received_data":8832,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"startupfa.me","ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-10-10","domain_rank":721425,"first_seen":"2025-06-01T20:13:03.14629Z","last_seen":"2026-04-12T16:39:57.707765Z","alert_count":0,"request_count":1,"received_data":538,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledger-qfs.com/","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-18T04:25:49.141836Z","times_seen":133413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"069842de2b3f2c2426803fd8772d1c09","sha1":"723a015e16f4023b12e10793d52cdf495c1d091b","sha256":"87dd12aa61386e937f460c8c8c6209fabc62ff4609ac6b62eda4ac70b5b15064","sha512":"539a1a46724ced2205e943d10eda289d162f930867883ba4e92cee4b0febb7d04b5f41751695c747440b08414a42ab30bb390ce1294ffc25750260fed48b1ecb","ssdeep":"","tlshash":"3b41e29f61b2103a40fb666a739797883738408b2506cc173f3c8b090f95e6469f2ef5","size":2323,"data":"","first_seen":"2026-04-17T21:48:43.754817Z","last_seen":"2026-04-17T21:50:53.513384Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 580286\r\nexpires: Wed, 07 Apr 2027 21:48:09 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDju9fLoRdegA1bnhvPbXXmIZyHNRx1nSE5ktZnuUZ17DMezIK2lVrMxoWS%2BGySiDrmUUtGJ%2FQd3lQJUL0PA0JcPxbBpXG0NJrjrkPyWBpgQa%2F6C364kpMWa52%2FmfNeHbU7nUcLY\"}]}\r\ncf-ray: 9edea1e12b615a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-04-18T04:25:21.875552Z","times_seen":44356,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":7,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/xrp-xrp-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/xrp-xrp-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 17:27:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63648\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7GGrxN1rI78x8MQPHRTMXxiptVqSLmfaDDBXEANZk4jFpNEQ1fbh58f2UpHpQG2ICBwqq3EHNuRNHFk4R3oOiBUAk8ydUeLoeOmwavPwe7uQzoVs3DakxCxs8GT%2BgvUE4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f7ab515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"b848ca58f9c34bf2044c327122ec7477","sha1":"e15a8c9536cfc7cc626f80d1371f5816762245a5","sha256":"7c28041a6e6d6e4d9b34dc87281dfd23ebb297af0c7f1bde79262122e5e8304d","sha512":"848eb79b0617d9c5608ee7244ec79f2b65644fe4a5edadd30d267f18a5ae5e0412abd04d3a8ffadcf6d6def2a602d4eba4ad9311f979c346cda1cea22d820b09","ssdeep":"768:uEOusl3kJU9WOST3hXcNVTt75EciSUastuLbA9Op3VL/khToXX/jduRTNqcZVNLY:ufF3lO+VTtdUasUp3qTUvMRTNqcBWUY","tlshash":"1953cf970612ef85ea4147be407b4f406b209234d95deece0793f1663a937a5bc8bec4","first_seen":"2025-03-09T08:16:02.404644Z","last_seen":"2026-04-17T21:50:53.507113Z","times_seen":130,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/chainlink-link-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/chainlink-link-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 17:27:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 81070\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kr76wQqH%2BFUpwl31AhJo6QyRmnLUxHxO%2FBIbh9GHD38BHH5x0fMNa8OM7LiHdwBzz8lAR0Fsh1ySw2JLAz%2BQ2hp5%2FZGwZjLGzL0Qj6pbyke7UAn8KSrLaFpks%2Bzp4IdAhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f81b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":81070,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2307 x 2307, 8-bit/color RGBA, non-interlaced","md5":"187cdcc72ee21aa64d50a8b83c53993c","sha1":"edcaa7bccf257f66b2287312f76d4abbeb32dcf0","sha256":"bb055c14cc2ca422e1c8f84952dbc94c1311752e74c8b7020959c7269067de52","sha512":"c53fc391530b5b78ead84a1dfc992c2229d0df03902c3a395f7289395df26c9d5d5eceb13b04f1face2598e40561e2ab2aeb52375553748ca1a855f00fee63eb","ssdeep":"1536:2aMdHTNMdTtc4Z5gfWI8JmsVzmOj0nXuyE3N+I4Tt6GKCXF8:2hJkTaYYWI8IspmEcXCTe6GK4K","tlshash":"6483f8a2b19fe9ded821ba39b17703ca7b777a3e35b482d084634df46f044706c59a48","first_seen":"2023-08-11T12:36:38Z","last_seen":"2026-04-17T21:50:53.493319Z","times_seen":114,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/tether-usdt-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/tether-usdt-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 17:27:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69679\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I512yDKLWj89O%2B2HEe45%2FI6%2BICnv48T9S6WTL4fhLGp8PjOAvl5a7pbAwgieKvV4U76HpeTEEaER29vKSMKXWoLLz%2FGSo%2BtNc%2FFqRmfyc%2BDftZ60IVH49OtIucfmsPdj7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f80b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":69679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"a440d4b512f4d2b9b63d3ab8818fc9e3","sha1":"90dac8c11ffff8e0b345d11a55049c088eff2165","sha256":"2de63cb5ac9431e6febcd4dfd7527d98654452bddd468fe45b93e22cef67ae15","sha512":"90debb4d79ff0b1136fabe5809b8e6b88259a5668240f25ebdcb6b5e844a9b84415a7b37cf87fccdd68e1cd4a686a2ba8265d603cfa513a83cb87f7b41adff0c","ssdeep":"1536:3XWmI8g4DLn+3MeMpH3NGLxHDzRcS7qN0iN1EkVU0nr8rTO:y4DLGMzpdGdHDzSOO0iN1uNC","tlshash":"5f63bea34a3ad985caa1847cb9bb1fc07668a135e5099dcf537ef71cf2421e36d920d0","first_seen":"2023-05-02T11:54:15Z","last_seen":"2026-04-17T21:50:53.50967Z","times_seen":279,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/bitcoin-btc-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/bitcoin-btc-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 17:27:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 87786\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WwLRt7%2FAwo%2Fh%2FTsnEE5cHFtqcaRT529CnAUknrNRi02h3wMZ2qJ1RFVhNfh6S%2FUy3Ffw%2BLXn%2Bo68dwpZ7LVoQpl1KOct64ukjMfIxkHAnZOoct1Vx6nflPRljA09aWdGTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f79b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":87786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"d6a21bc3c9efb83425341d0e319f8110","sha1":"f2e3c72421dba14abc3d3e5f47527a8871845a85","sha256":"fc600df9cffdbed77b88c6f4efdb491310f0f84d1b2d58387958c3c41e950476","sha512":"d2f6ca081bb1101677532559318db1f55a345c2137a8b8a326cd0941341dbebae13a4227552619b3618f1321805d7e992e923db3a87deb87de06341d625935a4","ssdeep":"1536:L+ktmrYWswbPcfmsyLnWvN4yKuATOz/ccPPfIXsMSKCo1weydaPAgZbdL:ntmrnbxHWVCgcQwXsKtAsZL","tlshash":"f083f1138c1ece75d8554afcfabb8fc1f70026bdc131add5a8385d68b499980125b8ee","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-04-18T03:59:58.173108Z","times_seen":567,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/ethereum-eth-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/ethereum-eth-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 17:27:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 160579\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tsrOMbQg6aqojB0JrsETzfHOLboD1q4WkfSevl5rejwHZg9cRuw3dTrL1vo%2BKkMe1oAxmAZTYrVMMocAUhUDrUoE%2BGVHy6Fb8tthi1kFIaYoXmqjvUC81VHASZe8cLIC%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f7bb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":160579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3258 x 3258, 8-bit/color RGBA, non-interlaced","md5":"86b356aa4636232f3e200c65d2a8b6b4","sha1":"3f415cd75e8a755a032ae16a3406c41dcc2d667a","sha256":"7af0cf14f1d0a35e2446b1ad8db4fc424c6735c4ca2ded1410f8d3ad69456913","sha512":"a2e8a2b8039b0a0f3fbd8d4a89554b313f7cab24530426eafc2d9a1b63e5c126fb419b61826894a2cc5f42f2c298151cec05d0e73aae55f419da60ad02b45a38","ssdeep":"1536:oU+xMzsj5wW0nmkkIX0fJNWuimucyv/QqBqdXi532C6yeoGBtAtFpj9j8GgG8cSx:3+az2GRnb3p/532RFK7ph8GZ2qiXK+","tlshash":"59f34beb9f2bccf9856a317f7baf0c2296d1db656395928653c1c11f7f8d0200a05a8c","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-04-18T03:59:58.308695Z","times_seen":462,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/bnb-bnb-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/bnb-bnb-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 17:27:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 104712\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r2sxU0aWvgxAyhVK7vha6LfyzjWuTt0eciZW2QULdS4MG%2Feici4mhhTRw9b7CpkVYWU2t%2FRqhjpYDVw6oS1jJY2gshJ3saI2kfNzNBM9ggYjWAqVgCOY2wsvE7TgrOVHWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f7cb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":104712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"9faf561e1bbd427d5d739b539249357f","sha1":"fbfac48e3c8c1caa9d17b8a38281eeef0d996d43","sha256":"86d65436ed9470ff4447f0ffd6426fe2622577421866e49933d2615bdb2a1a18","sha512":"aff23cde575e2cc346d303da8f1b432981bbbdeacbc02cd64f8808add90933033b8f0121cdb48b406e24fbc47234cccbcea1ba8b90b83ebfb0165f76087e04ba","ssdeep":"1536:FdYeBHIGj69qzWK89JQJV+04SoKLSc/viVXad7CL2gKpjc4f5XdG6YJhonwT/sv:zYnW64z03Q2pKrd7CKlac0JGwDsv","tlshash":"3ca302b6a3a5ec45e9939e3cec3e2ee2d774837fca4c5dd07ad09201121463aba154dc","first_seen":"2023-05-31T01:01:46Z","last_seen":"2026-04-17T21:50:53.499626Z","times_seen":232,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/stellar-xlm-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/stellar-xlm-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 17:27:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77118\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTH0TcMRGwQqtW2%2BnvyDSKQEKhqrrVYjrtjD2Hx1S8q0Rg9XWpEUcub5zinZ90k8grcjapiP%2FmVOPYl9QVzkJudhNUd0yV6zv2UB%2BVEx4ILW4pK%2FnPkMdJvkj72dP5l6oQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f7fb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77118,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"316d17ccd3f4995f4d4b26bc24f41bbf","sha1":"1df5357b0eb5b34910703584840e5bb169712813","sha256":"27f32becc2a6d59cf64efb5724c05445bf7ae0e9e2451ce0eb3ce00469919fef","sha512":"66475c8697930d3224bb7511dc18882d14e154c7e49a85d77f938ecae32f84dc96936c6a86aabb497ecfdb3a30f63dfaa84cee4dc084f9d49244dfd9c1dfba8a","ssdeep":"1536:ZgE5QBVvIN3ZaXxojXr/WyJZ84Q3I4WPwDyS34yidLEXHTHm:rQBVvINJaXQXzWyJZ84L4WPkyS3bqAXy","tlshash":"3a73d0a71944d6d1daa6443c027bb7807b80833bd80cedcc8398b7d95fa92593f927d8","first_seen":"2025-04-02T11:22:51.312928Z","last_seen":"2026-04-17T21:50:53.494606Z","times_seen":33,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/cardano-ada-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/cardano-ada-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 17:27:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91295\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kyc7D1zRlNKfiY2jHEFjptPe2jpHMWgRuYCgqz595eKPgJ%2FnAnYV046VX4PC%2FgiX9VLGJm3XozrC1n4Vus3NOFwFRX9cWYTlIxUhIeg8lLOUUFrPOMAa7kpu4ibN7vc9lQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f83b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"540aa59d91a4787dfd0e4d6fd6611948","sha1":"5a061f71ea9d5e6d75d7ea8ede158429dc6989e2","sha256":"6fc4ef25984bb160f798548364667ec38afa7d13e8ab19837cafca94085b79f8","sha512":"7245aea5b3783b3d133ff1e14f934f504bd760a9965f1cbae8bca3c46192d062adbceba625996e442865a070c79193df3baf9da1ef8bad2dc005716ee4b90796","ssdeep":"1536:NfUUUUUUUU76kTV88mbpnorSOqDHtditBv/JMUEm26d/aDIJnL9I3oYVuIyANBkE:NdmLOS8JMUEmzdCInhIXASBkNgd9fVrL","tlshash":"b393e0eb1816dae6c4a040bcd9b7abc633745a7dc248cedf4379b4719dc698c38169c8","first_seen":"2023-11-11T03:35:51Z","last_seen":"2026-04-17T21:50:53.504801Z","times_seen":339,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/litecoin-ltc-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/litecoin-ltc-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Sep 2025 10:44:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77610\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3MK2rfiD1vCUu%2F8Khc%2Bzabz0gbOTHgQb%2Bu5qyhE1uGmAp51scjl3vd86jejMByXQHl%2B3M26ndC7T6l162Dcdw%2FbTwg4oztPSwGhDz8mu1LB3yr2gLD1k0wVwrhtnEaneWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f84b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"afde79b0f20237956b68b08bd09ed5b9","sha1":"f502a66a332077006fb2804073902c8d1a77c72b","sha256":"5dec0cd842ad44d11f9082a9af3348c40b853dc42103075f5e42fcc10d75e40d","sha512":"95b6d882cbac4b8ef9ec2f06f53dc477b19f48b791efecc1f8f139821ea7ec6c96d519d447f4b7a1ee190cb3192896ae1afe57480afd9d1481759d6dbb10b4f2","ssdeep":"1536:Sc6OHsJJpySC29Z/p3lx29Y2ecp+UML5IqrMXgKajkOtq6PVN27l:S2KJp1pJczp+UMV3mgKEAl","tlshash":"0373f16b1f6acdd0d0b316be98792dc1bbd43670da28dccd26639d183b1a0f8641d8c9","first_seen":"2023-06-29T01:58:48Z","last_seen":"2026-04-17T21:50:53.503446Z","times_seen":244,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/thorchain-rune-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/thorchain-rune-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Sep 2025 10:40:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91467\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xneDDMpIvWHRHW%2F84IPrn87Zs7pOoxZi51NGTZDqLdyI8unElnXwqySC69UpoiX%2Byvfct%2FR631k3DJAM9q8L4awo5go9V0nScS28gG5E2JATznut8ATX8aSDUKL%2Fmjpag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f85b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2294 x 2294, 8-bit/color RGBA, non-interlaced","md5":"8baeeac22f834f60fbf22f675f9d8628","sha1":"b64a9fcbd25deb98e66177c05c5a464f17a4abdc","sha256":"f736284e229c0d0914afcc57aefe0b96484b17e776c28e833e384769c7da527a","sha512":"dd5097a19a0cad49d698ea0e4652409a2e7784fa0b2715ff6d46ae3258af4dc62b3c10ba1f8832c73f7363770d41a130a14a55eb18b61b3b582a10b879fdfe22","ssdeep":"1536:k5TmhFrjSE1ZCwn1iNdACxjJaRkCtMh3USQITTjcyjSMCSyCzVrqWOHY7YQUR55e:nlrn8J4+h3U7ITTjcymVSyC55i2G5e","tlshash":"b693cfc28d07af45c90f37b0be6a4ba13219e79b1812af17e6b74846fdad4d9510372c","first_seen":"2026-01-20T18:54:54.34144Z","last_seen":"2026-04-17T21:50:53.501088Z","times_seen":4,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:10.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ledger-qfs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 21:48:10 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1182817\r\nexpires: Wed, 07 Apr 2027 21:48:10 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYctN%2FcHGOLO6fUpSdSWh2azfhjz%2B3zL33cvnLDOUOUHnivDELbugkQzjFo4GdlGXWGcB6cigtSLWuenZsfWw%2FuX4mWPdDS0xbfhEwC5s4RifI4Jb8JySW978%2BAUFh7uakJyCF4x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9edea1e2bcd5712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-18T04:25:21.881063Z","times_seen":32565,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":10,"dns":1,"connect":0,"send":0,"wait":7,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/dogecoin-doge-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/dogecoin-doge-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 17:27:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 332322\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCfGr2t3gqQVoQlFeXldCofc7hiT1IiUcGqGjaXZJKIZRg7qY9nF%2Bf3l516E1TFr9yCKXfNWbuhhjS6DdhB6JSsiRVVVcpg%2BI2B6DvRFbU6doiYJKleyzqxc72c5EnXoBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f7eb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":332322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"e596c8c071005a2579b3b602e6af5d5c","sha1":"bb4b571c915b293a3f0fb9ed77f0f591d79a5309","sha256":"5b07ee1cd60b3309b66e5d5bba4e39016684ae1ba78a943899f7dff5a9fb5f0d","sha512":"24ad7cf36cefc3e89a704966111ee413c7c559f1be4a66fb8265950bb835e924e9c66296cd34f765e6bbee7b31b472154ca58204307ec8e8e4fb29839c2e70bf","ssdeep":"6144:WwPjVx2nabbHd73hT1N5eHbdizIEgSR/QFQbDTzJ1DrfLHP2zCo5BOZSpWxmxC8:NPZ0nqTd73h1veHbdizIaF/XrvHuzzHb","tlshash":"ce64230c455489b5d83b8a3365f88f9d47f2a2e60b772b25853011cb4f29befc98d639","first_seen":"2023-10-26T11:09:32Z","last_seen":"2026-04-17T21:50:53.500379Z","times_seen":404,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/favicon-16x16.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:10.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Oct 2025 09:47:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 549\r\ndate: Fri, 17 Apr 2026 21:48:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3ywYxPc7N3wMTFX5SkCfil5dh%2Fhx%2BmY56rSKWc2v50TNhKj4%2BjlFy5dIYpRgztPVHNTlouiR1QiTvZZf%2B3TsY4S3OAHPPZ2SqeAlJ41QFUQXzUrV4cC0D%2BKPwmtuzrxEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9edea1e2ff8db515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"86efb4c051c5e4c752ee61cb9dd8589b","sha1":"e36a874aa23bd4aec82bd8ae5049bb93a1d61b53","sha256":"f353a03a7bcd8c19a72140ebfb15dbbeca5ab6098329b8139b4ed0aa0a3ab093","sha512":"5f6537ea8de24786632224b2b1e422340165708c1a7a412f2206d805c3659d77fa75588351a76fe8b89ca0695250551da922722877715640a83fc5039623a3a7","ssdeep":"","tlshash":"24f020c23a6db1169c017127626b4460632b756c21db8ac5978ec9de62629ddb0a8fc3","first_seen":"2026-04-17T21:48:43.746287Z","last_seen":"2026-04-17T21:50:53.489276Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/android-chrome-512x512.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:10.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /android-chrome-512x512.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Oct 2025 09:47:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35723\r\ndate: Fri, 17 Apr 2026 21:48:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNMLASSF6k8dbGfVpj1Y1n7gV2fK0nMhrmMQ%2FK4jBbf10DsY5pXSpusV0hmJ6Jx1HUaF3Ce6AmQnnhY%2BEDSn0119EJeifqAGk3DbtxCqYvqDALOeAm0OU%2B8bMfLwBwBMRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9edea1e2ff8cb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2267e8cd1496289f00d2ef193961561f","sha1":"6fb5f8685cae5167d7c0395ebcbfd7e18176348b","sha256":"95240422542c8837fb344c7d32ebebbd45b10acc7a5da78e36c26c881961249b","sha512":"07bf8c7408ac91462ccc309c93cd267da40b50178394a1f2ea518326c78cad9c8ab37623c6951bd48e8a3c5de3625c9d498baa8a33b89bab7e504db4ac4071f9","ssdeep":"768:gttiPDvroM6sml/5cqhA/l5gzFU0eIoOFi/Sm3Yt55N:gbCDjoMhOA/lSFU0etOA/Sy+55N","tlshash":"b2f2d177460cec80f45d0b72fdaa57a90e934a498a77efbe17a4c53ab0c7b6480543c6","first_seen":"2026-04-17T21:48:43.747561Z","last_seen":"2026-04-17T21:50:53.497532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/solana-sol-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/solana-sol-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 17:27:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 123409\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eH2UxPd%2F0%2FNW6VfJxqJjp61rAc5U%2FEB87QfGgc36LQPtDTJxOYQYr%2BaiYN6%2FHNqdsZutxpHV3FsQap7JsHoA5N3%2Fe9BaIlfQRnL44Kbd7wxfngbpjnkyOCfCYJrJ1tNOWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f7db515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":123409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"0d8e9a185773da474955639b5fc82808","sha1":"20a83c3b86f3fc904f26dcc59419205bdb0a2975","sha256":"e5721ef7bd05455ed2f842ea2f66fd7715b56cea319d819187907838300618ac","sha512":"3660589a5ef0ab74175ed985f79555b264ff68cf5d2bd8f737525630d59387d37b871d9ed7a92de2250b80ea53b08169f333f1b453303ccfce377ef738291b3e","ssdeep":"3072:1E6pISxxAj7GlIoJPxH6o6CMRHqemhgpeKw96T7u5XOAZ:1E6WSxxS7GlIoJPxafHtkEJw","tlshash":"6bc32945d3a6ca85de18caff2e269dca0105b377f0d88ee8344cb1f4b178d5349866d2","first_seen":"2023-05-09T04:14:29Z","last_seen":"2026-04-17T21:50:53.509028Z","times_seen":552,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/qfs-account/logos/tron-trx-logo.png","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET /qfs-account/logos/tron-trx-logo.png HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Apr 2026 21:48:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 17:27:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 103975\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fibqQaVGcHbcv8SIW0xW2T7Y7iM3AOOSvT86Qt1aBn%2F20sqSPm27uXS0EdFNd7Z95meT5fb2uOq5o4J7ZfJmEibyzRSamJG46JTlTSovWI4MGmDP8eeGkERyfv5w%2BAgbIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9edea1e11f82b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":103975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"de3064d6f2b2153aacb6a854038c3a79","sha1":"841f3d1f868a3d71a01649b4307b9a1c1259e399","sha256":"79b386dbf889eb7356ab585421267aebc58e152268253865be5596ba2a2ce36b","sha512":"5c8c4b45222de6310002170dc4a51c033d9153409362fe8ca6841c26f30d467b52542703fc2f078289983a115257086fd1f96c062a7b72fb0449bd4f8607f88e","ssdeep":"3072:cTN3VFvbRgzj0eMqMGc+zfbTYkyA4FI+Tjqr0Zz:6pVFvNM0ea+sTIeqcz","tlshash":"8ea3028e4407eec2cd75d478d41d0f3a762a19f86b893bf79335d1b22db17a19a2800d","first_seen":"2023-05-31T01:01:47Z","last_seen":"2026-04-17T21:50:53.496608Z","times_seen":478,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.turbo0.com/badge-listed-light.svg","fqdn":"img.turbo0.com","domain":"turbo0.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo0.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:42:04 GMT","end":"Mon, 08 Jun 2026 08:39:42 GMT"},"fingerprint":{"sha1":"C6:9B:F4:44:0B:EB:2A:45:03:97:97:43:7F:D9:9A:4E:42:DE:D1:B0","sha256":"AE:0E:BC:0B:2B:1F:B7:C6:75:A8:EB:5D:C4:58:52:E4:4E:E8:BD:2F:CF:BD:A9:06:B7:EE:2B:8B:7B:15:AA:24"}}},"request":{"raw":"GET /badge-listed-light.svg HTTP/1.1\r\nHost: img.turbo0.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\nage: 39537\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"badge-listed-light.svg\"\r\ncontent-encoding: br\r\netag: W/\"b91975ea569e8fc590b4062543fd4e86\"\r\nlast-modified: Thu, 26 Mar 2026 01:44:43 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /badge-listed-light.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5thns-1774529020523-8498b0bb1976\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4GiECCAKUMDpPVxtc1HqWdfWC9cGUJoQkFCiAWwkRLHa1OWIvMKMMA4IuLeVsWfwuwTHgw%2BIYySklly6E040TAJyw5SgwtGD5CtUeoGPg3olIdHYkBHeBdF7AfttgSvZ6g%3D%3D\"}]}\r\ncf-ray: 9edea1e16e06a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b91975ea569e8fc590b4062543fd4e86","sha1":"16776c4916f52a208ab3d8bf79e5b2e8119430b1","sha256":"49e629a42505774210d90737b2f4d312f6726f9d4452104e5892cc8ab37c7bc4","sha512":"ce9b8c936cfb6a027476ace4beda19863078571cc321696c21b20007d718b0b1e82621528f7c0627f3402ea6a0841b8980caddbd43e0895f3a920ea400c140b4","ssdeep":"96:IcBVSQBfU3Q4nKTPNO6t4PXN/ZUrSGrZu772QhvzMcQWkDCk7IyPaI7Fc6AN:IcBRu3Q4KDNJkE47CQhvIDW2TPaIK","tlshash":"faf182722308d36d65c2cb58cbd05095156de582f1fe92ece7a3528a5c394fbe07ce64","first_seen":"2025-07-04T14:03:10.698224Z","last_seen":"2026-04-18T02:00:47.071462Z","times_seen":37,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":25,"dns":21,"connect":1,"send":0,"wait":69,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"startupfa.me/badges/featured-badge-small.webp","fqdn":"startupfa.me","domain":"startupfa.me","tld":"me"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:09.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"startupfa.me","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 20:56:19 GMT","end":"Fri, 22 May 2026 20:56:18 GMT"},"fingerprint":{"sha1":"5F:26:7A:D9:AB:5A:21:EA:EB:1A:42:C7:3A:85:BF:82:D5:DA:76:A2","sha256":"8B:49:38:E5:5A:AC:FA:DE:C4:44:A5:4F:DE:37:65:36:7B:63:F1:7C:48:A8:23:40:24:0D:7A:E9:DF:B1:92:4F"}}},"request":{"raw":"GET /badges/featured-badge-small.webp HTTP/1.1\r\nHost: startupfa.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-qfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ncache-control: private, no-store, max-age=0\r\ncontent-type: text/html; charset=utf-8\r\nserver: Vercel\r\nx-vercel-challenge-token: 2.1776462489.60.NmM4MDNiYmMyM2VjNmM3ZmQ1NDBlYTc2ZDg5YmUwM2I7ZWY4YzhkMDQ7MjY0OGNjYTMyM2VmMDU1OTE2OGQ3NDI2OTc4OTEwYmFmZmY2YjE2YTszO/d95LoeVMZpJ1Vf0+MQHkCx4cLKnWUDFfEAveHV6gZMPc6uwL4jjI83CuJ3uoc=.12aa3aa83b8fd350d7b822a11e358244\r\nx-vercel-id: arn1::1776462489-4YYukWh38DhDRJTY9YD8EqoN5Vi2KDDa\r\nx-vercel-mitigated: challenge\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-18T04:23:04.271241Z","times_seen":13884966,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":37,"dns":28,"connect":3,"send":0,"wait":56,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger-qfs.com/","date":"2026-04-17T21:48:10.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ledger-qfs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 21:48:10 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 108020\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-1a5f4\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1933115\r\nexpires: Wed, 07 Apr 2027 21:48:10 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NmfnIpfmFZOlRmSeaxsAw3mYb%2BEy2KW9YkPUAC0%2BI4Bp76tCthyD7DtMccRv5dA%2B7LkFQ%2BKtNzzA0xuU0DLzommUl0uDnGFVRWUl5IsCl4KCrPHn1U4uNPCNsSdCS600nWDN7O6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9edea1e2bcd6712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-18T04:25:21.881699Z","times_seen":16474,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":8,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-qfs.com/","fqdn":"ledger-qfs.com","domain":"ledger-qfs.com","tld":"com"},"ip":{"addr":"172.67.185.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T21:48:09.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-qfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 17:39:21 GMT","end":"Mon, 06 Jul 2026 18:37:59 GMT"},"fingerprint":{"sha1":"90:54:F5:74:32:DB:78:28:2F:AA:60:52:92:9A:7D:8B:B0:17:31:D5","sha256":"EA:9C:0B:93:96:1A:85:39:0C:00:C4:88:03:4F:90:89:ED:A4:34:25:E6:1C:78:F1:3A:61:40:DD:54:35:22:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledger-qfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 21:48:09 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 30 Nov 2025 09:59:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BRrLBbyZ%2FlD0ghHFetGrAdb6%2FRHKPUx0bizGKMQt7lP7Ucp%2FK8ATmYklaPD90rLF%2BKfLsgfVjvCw1lL6FuWv5u4lrQ2m9PuF3cnkcRgPuolx%2FNVLmWal4%2BVCUaxkoUbpQ%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9edea1df98f58be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37237,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"0b4f2fc42bed7504a18ded564ceab17d","sha1":"3b1d633e2babb700a3cee4d11b0e9b1c434a0c81","sha256":"318438ee4508d0f7446f80d01201a2f85beb52fb648cafa706c11610cbd0916d","sha512":"d7695e4b4366bbabe39294c979c908517489b5de116d33be7ba855a5c03b65b49dd4ca0a078bde702de3e2398fd1ac1232e1acf3c23fec97ca3811cba27dbbc8","ssdeep":"192:jvNk9sD9zRXs/0mC0mqbiyeFUP7EJKnYEiqCEp/FQP8LqYINXLwGx2CPpq3FDzv1:jq9y9EAeCn+ZeQEYR13aZL8G+","tlshash":"e2f2305655f621235943a1696fb7274a3a60c003c90ece583afc4688cfc2ee6dd63b5d","first_seen":"2026-04-17T21:48:43.752818Z","last_seen":"2026-04-17T21:50:53.491703Z","times_seen":2,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":34,"dns":17,"connect":1,"send":0,"wait":89,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ledger-qfs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}