{"report_id":"45ea54ab-1abe-4cdc-a2de-b7ce1914d681","version":6,"status":"done","tags":[],"date":"2026-06-03T22:08:46Z","url":{"schema":"http","addr":"www.fancy-ledger-quest-pro.com/","fqdn":"www.fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.7","port":0,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/login","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"title":"login | LedgerLegends","dom":{"size":961,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (961), with no line terminators","md5":"617ac7ae40891f8ee8cee1dc8e47b93d","sha1":"754a9277f950e70a52721e2235cc5f42feaf621c","sha256":"7d1c97f8c9a08b74415fc321fae799be9ff919654ea347a2f0f6ad62e6fba916","sha512":"cf8475d247c8ce89400b4959d862f89a8a64ae1892d0323f389593613cb0f0cf44f048635f2f2d568b5b0cad088cba54472411627eb7734bb3567a65d05c0833","ssdeep":"","tlshash":"701104963dc85a38423d4712b6abb70d321697279874ec108416dcac7fb4cdbd9537c2","dom_hash":"domhash5349785f06b413655580aaf4418cc763","first_seen":"2025-10-26T13:36:48.860486Z","last_seen":"2026-08-11T07:36:50.819284Z","times_seen":43767,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.fancy-ledger-quest-pro.com/","fqdn":"www.fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.7","port":0,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-08T22:08:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"www.fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"www.fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"media.base44.com","ip":{"addr":"54.240.174.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-08-26","domain_rank":0,"first_seen":"2026-03-11T17:19:02.851517Z","last_seen":"2026-05-30T21:08:40.092819Z","alert_count":0,"request_count":3,"received_data":2249695,"sent_data":1482,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.fancy-ledger-quest-pro.com","ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-03T22:09:00.259367Z","last_seen":"2026-06-03T22:09:00.259367Z","alert_count":2,"request_count":1,"received_data":5725,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-06-01T07:39:12.914211Z","alert_count":0,"request_count":2,"received_data":815985,"sent_data":844,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"m.stripe.network","ip":{"addr":"52.84.50.15","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":9008,"first_seen":"2017-05-17T15:53:13Z","last_seen":"2026-06-01T07:25:24.918759Z","alert_count":0,"request_count":2,"received_data":91602,"sent_data":956,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fancy-ledger-quest-pro.com","ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-03T22:09:00.263556Z","last_seen":"2026-06-03T22:09:00.263556Z","alert_count":82,"request_count":41,"received_data":17212879,"sent_data":20337,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]}]},{"fqdn":"js.stripe.com","ip":{"addr":"52.84.50.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1995-09-12","domain_rank":7985,"first_seen":"2012-09-30T12:39:23Z","last_seen":"2026-06-01T07:25:24.746691Z","alert_count":0,"request_count":3,"received_data":1024153,"sent_data":1501,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Stripe","description":"Stripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.","website":"https://stripe.com","common_platform_enumeration":"","icon":"Stripe.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"m.stripe.com","ip":{"addr":"44.239.85.241","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1995-09-12","domain_rank":7920,"first_seen":"2017-01-30T13:42:51Z","last_seen":"2026-06-01T07:25:26.23789Z","alert_count":0,"request_count":1,"received_data":762,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-06-01T07:28:36.892124Z","alert_count":0,"request_count":1,"received_data":263410,"sent_data":429,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-data-BB79dn4K.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4b211781ba78bc5db995f0faa0e872c5","sha1":"89c597ea00f8be44056e0290a1691a30c165fbf7","sha256":"3bac9079feef13f35fa73feb5f39344cb51186a2ed28059aece6e8d75bae7888","sha512":"216d41eb8766f2ab5e1bb4498ae90e060081d88a84d2e6e2e8fa5912d7800940175351963f4d59b166256faf735b4b2e780653b366f4455938bbb6cbe542e80d","ssdeep":"3072:/qO70WdLAXjUuGvEgCTM2W/G40XQsVufyNvW1wv5F8W1DoFt:/R70WdLAXjacZTAG40gsVMyNvW1wv5Fg","tlshash":"cde319c83257a0161bf655e4907e0103e2697e19700e80a8f4ad9eea7eadd06f377f34","size":145877,"data":"","first_seen":"2026-06-03T20:50:19.002113Z","last_seen":"2026-06-04T07:59:55.389608Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/index-DTWORgjS.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f830efb609addcc7a7704938b53757cc","sha1":"102fe90a1c6821ede7965a9d1f5f1a89857a775f","sha256":"5b1713f1fdbb85eee6f2c5b1730ca3e1df40d3180e1979d9251d7e281101471d","sha512":"8121dbcf3a3c2416f5691590971a858937a9e5b73fa06bccbadfd6e495fbbc813b131456f3ae786eda25a55faca09eb4c889df16c355b32b70872e492f422739","ssdeep":"49152:7FfJY+DGxYhbrQapAxDZ+LD+1HDMc//WEAmHFLh3MVg4zEGgPagnLCe2WZgfB6rV:HjOfP+YZ3o7iQSa/YG83npO1K9GQ","tlshash":"85167d1eabc0653a0ba303f7794ba647b1b44d49e585c021ecdec16511b4acee17bbf8","size":4025198,"data":"","first_seen":"2026-06-03T20:50:19.029636Z","last_seen":"2026-06-04T07:59:55.44151Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/domainValidation-C2COoIZ_.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"35f0990e3597e2ade2526d6371538d22","sha1":"2e6928b2abb134f20ba908f560b8cbb491633096","sha256":"426dec343c3762e6903518ea8ce528ccfef30ef3221e1f381b764b56c5ed315c","sha512":"4a5371d7139e2fdfb69351739da9b2a359f780854d1a16ef68282bb6423aebc0fb9e5aa6428eca0fda7d0887aa8d65d86ae566fddfea91f641fa1a4b34585f93","ssdeep":"","tlshash":"f4e020f0f8e7508055f2067c027af500f15d1d5628894405c69a5dd4bc2e9b9fa3b965","size":341,"data":"","first_seen":"2026-03-17T23:41:19.409137Z","last_seen":"2026-06-16T14:41:14.860624Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/context-menu-BWYP5m7U.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"edebf61f1be407dbbab9ef962029e3f7","sha1":"d063b30d3d2d2b73d357524dceee30d8f4969bf4","sha256":"432f608cee71456683a95e09ddd9a95c98431b7683f1da07bf3f9a8c4040f561","sha512":"fb8c0ac49ed283dcd5b1b617d7fd0202b4e8fb85918c0b32eb705f77134bb7b6d0c99dec2840d3f39edc72595127c497a8cb44319103cdb950f2c5187c70628c","ssdeep":"192:OHkdX+VrpvDtrEfstfwI4HH0pvDtrEfstfwF1qZaEZoS/cZFbQY1b0vTEApajuxc:OEupv5rEQZ4HUpv5rEQ21WaEZlwuYCvC","tlshash":"cd12b6b1e05075e8ff3e08e2436d812a1f0ac558b3afd2e6e56d5d2c21c50a2b5f72d9","size":9020,"data":"","first_seen":"2026-06-03T20:50:18.99427Z","last_seen":"2026-06-04T07:59:55.393381Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-react-BX3LLGLT.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c7145b3b6e791313f6f56e61d208db8e","sha1":"a5af737a8a53529f78c45f07ae5a13e04dce47e9","sha256":"ad4bc01936f6648608d64d4fe1aa91f3eeda13abf113e34fdc4f367f6a50c97e","sha512":"2e83d361a836fa716807ec8ce1c392609707ff8abe869fa0326fe29a36f9a08a636eea7e9fea83d7c3ae5b06df84e4e77b3ef27845e317ad18f246648752b097","ssdeep":"768:+dkKLlScuAJhDwrPHqhoR/YD9Rr6TIBHUUr9OGlctoaIe3Ve7dP4OV6p2JRtHxgk:+2GwriyRwZATIBHUvbIJ7dAOVmytOnk","tlshash":"31830afa735274724bfb42e5c0bb0161b3752caa20698012b1ad9d4e3474d4ca777f7a","size":85790,"data":"","first_seen":"2026-06-03T20:50:18.960844Z","last_seen":"2026-06-04T07:59:55.423518Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4365e9b5f474ae364d0b3281e22655f7","sha1":"aea6535f0f7056d40b64145ee1a356a7a13baa37","sha256":"f9d5a0184ecc67a06ea62edcc59c9dc97fe413a4cfee2f0bcfc15ade1b569aae","sha512":"4addea02d2b4390b0ca30ed7d8fdf622e847105e1b18c38f320615d7fd425f4276539185cfd6e5346d8bcedb25ed778d4d9fbf5fadb70c0b941bd700bb6cf77a","ssdeep":"49152:cepif1bxM3PAL4wcBgFFNiyPyrR8md0G3xVKsQI2pngW1cASLki+u/WJuwhW6MbZ:NYf1bxMf+UR8mdR3DK/ISnepjJl","tlshash":"c9c55bf232a6a46506d390ed10aa0c07ab3a2b276409c4c8f5bdddef7cb5445917bf78","size":2646220,"data":"","first_seen":"2026-06-03T20:50:19.033354Z","last_seen":"2026-06-04T07:59:55.439203Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/login","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"747f3adcbc7f229cbaa25d78c7f8e3d7","sha1":"a8e444c5733a66a548e26b6623154e32e943781b","sha256":"d8d11e986a2072a6d5a1976e38b70d4f42c3fb839ba38449468cedc8233762d3","sha512":"fa308583aabc03d54dc59cc9903f7f4c38fbcf1daa3c1ec6903a0b6f93379ddd576343f1c27cbca864869d144af8bc666ead9274c535657aa050b1ee15d910f7","ssdeep":"","tlshash":"d2d0a785a75aa61442d31d5831f72a09a53991eee0580404e04bd0a42e5ac450733b9f","size":226,"data":"","first_seen":"2026-02-12T05:53:34.591209Z","last_seen":"2026-07-20T15:46:49.190925Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-11T07:01:14.260163Z","times_seen":48783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-monaco-kUzn8ZZg.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"49be2e75d39926a600e7680b7df4cab2","sha1":"a47763325722d605ebabea81330d8560fef38eb8","sha256":"b1cf8db666a7d7bfc05e8f8c93c4536728e9d086bf6f0270fa1fd0e607491519","sha512":"d748da376afbf0f9fea4511905d0f53bf41a0f17d16e75f550dd2dc0fec50b5b8cef198ec9a48a20622762b2a1056537f91ed1f2e5a76c90c8320404de1cca12","ssdeep":"","tlshash":"c1216a553198e13222295dd5f1b5b397f8a4285374110454710ecc929e1bec5d1e5d59","size":1142,"data":"","first_seen":"2025-06-21T22:39:56.838829Z","last_seen":"2026-08-09T10:16:26.792452Z","times_seen":438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/webviewDetection-BGkn8C8u.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b2742d8178ecf8ea53a731e342a31497","sha1":"12418dd31bb2eb86f2f23b120cc60bdfe9d9e521","sha256":"2f1d61e1c24e8cfef698191a4570ed5ca4201923a6758a294517ae5bece5716f","sha512":"587b8fafddc48fac2c20db3a2aa79b94f910ebbdec87ebf1fbb1daf27c3588e97073627aed64864f8339da4d43ff47292253979b5174bb6b3beb30713a2dbfb7","ssdeep":"","tlshash":"3401d3e8499b301e577a9c11217b3811d876421dbc2f4dc1e1df2d69013a1e1533afa6","size":667,"data":"","first_seen":"2026-03-17T23:41:19.417803Z","last_seen":"2026-06-16T14:41:14.904213Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/AppLogsAPI-DrU1nq2m.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"bfed823b4061de2edc21569857e4024e","sha1":"cdb3a66235afc00ec656781cc757de9182e0b5f0","sha256":"191d457731f689b3140d40caa222c56b44c0c867729b9967fcf0763c27286508","sha512":"1a569a669ef86b3b8f80e05fc4be642ab8be471023774130c4b2d64fdb8b0ccca02d713c159c0840e6cb2ebc42f180f00761afefc4be465bc91b8872c89bb33a","ssdeep":"","tlshash":"70f0dc602daaf238967048f2ac528203e1ab2de1774da09c5c190dc2f13c903793cb71","size":451,"data":"","first_seen":"2026-06-03T20:50:18.970811Z","last_seen":"2026-06-04T07:59:55.391556Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/ErrorLoadingApp-6nLA3Jwr.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8ccdd92d57ef61284026e3f32ebdc3e1","sha1":"caa0c9d62c4a65ebc6a24b0a472c3988a41a52d2","sha256":"5d3519cbbc1caff82ef6fcc63664d575f99f4f571a38afec7c124a2da8e39f5c","sha512":"b4569ca5f8a281a70c6dd4bdc61dd19b2911047b1fd169db410b00684172c679df48b75c6151a5a4e5309efc1b5b05fc011f80bca2383801e6285ae405444cef","ssdeep":"49152:W8pA9HZvdI7eazJ58kCuPQd9IamGtDznT/yVk2EMcfG2IITrjM6AT:6c85uPgVTmay","tlshash":"3c9538d831d2b8b147d790e6007f0107f3396859b0489498f6a9d9ea7e7ac0a613bf7d","size":1893129,"data":"","first_seen":"2026-06-03T20:50:19.031826Z","last_seen":"2026-06-04T07:59:55.429058Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.stripe.network/inner.html#url=https%3A%2F%2Ffancy-ledger-quest-pro.com%2Flogin\u0026title=login%20%7C%20LedgerLegends\u0026referrer=\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","fqdn":"m.stripe.network","domain":"stripe.network","tld":"network"},"ip":{"addr":"52.84.50.15","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e506dfc98f2f03233432035bf6b3d475","sha1":"d31e6f0cb9c18d57a4b3d02709f090b7bdc39d64","sha256":"7b7e7b9f53f1089f1dd37fd009229a1c59871752400f2bd21dd49fb21c4ce3de","sha512":"83bb528b4e6c9d58c9904da7e9cdc9d581f4a1117cc126a097d2c4f193c3145383d91737f907ebb2f6c00b78b309833fe87db4acae5175230c077f98968361ca","ssdeep":"","tlshash":"0101fd963ac86e34423e4712b26fb706322257239834fc508006dca8bbb0c9be4237c2","size":809,"data":"","first_seen":"2025-09-10T21:19:46.140106Z","last_seen":"2026-08-11T07:51:21.170397Z","times_seen":109703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/login","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c98e6c0c726825b864713b3ec0288c1c","sha1":"8ec39c92069c91da0acd7f1d29e7773c5ae36323","sha256":"bc8a90f20bdf9728533ccd99219f6e2f485bf1498769517ded5a6755e2d43da2","sha512":"c768e8a9928bb350b9cbdab0ba4e85076574a0b23ed0cafdd273f6257f228b601db0b74018e74dd9b005353a7e074cb613ad9611632701e7e6db08dfcf1e3384","ssdeep":"","tlshash":"1131f1ce18ff11d3a1c2149b854e9e21b12648b2240cfd01b49e97509f8f9a9aa575f8","size":1463,"data":"","first_seen":"2026-03-17T23:41:19.454319Z","last_seen":"2026-07-20T15:46:49.191992Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-utils-DdX10vNR.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e512b293f2598dca7ff3b8b714ab5059","sha1":"5ab6984809de084f8558e0e32d4232c48a4cfaf2","sha256":"2ee05db0d2d1596751b771f562d7856446a1d838ff7e9eb142e28861b98d18d3","sha512":"1a2a5dd0d1557afebf1e545096c353d7788e173f480eaa01caa3e465b0f67290b98029f3d9e32829829e009a1f9f85332bff55cb3d54ddb95046b66de3061880","ssdeep":"1536:+ZGHJ570pV5z2obudfFY09QMmuxl2zhcc5y+zCQddCTjsbZE9B9+lZEQ9HQxG+gj:eGHTcVrP0OccLzCQ7Cx9+lZwGR1zFV9","tlshash":"12f3d7d830c3b055a3a719b440bf004ff23d6d61b84dc954e09ad6ea7d7990a92bbf9c","size":170002,"data":"","first_seen":"2026-06-03T20:50:19.014758Z","last_seen":"2026-06-04T07:59:55.405741Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08f9e34a55cf4cf578deaa0c9c30d4be","sha1":"a5d9523aca39093826e23b403d22e58de2776604","sha256":"05c42e3ef8df1d3ed18300bd3fac714e50c924208c9ced43a5f15dce85ba86a0","sha512":"31be9598529eedb809022c58d14cfca626d550350581fcad8b7840a413e4e04e49b1d3b376306e7b0036198a901d7a1a799eaef9e19c53c68bda572145147c4e","ssdeep":"6144:Tdt07hxy5MhIJNeS/4MjtIwnB76iM7a6llLyFg:T74hs1/4MjesZJM7a6llLYg","tlshash":"dc444adcb6e270355212f9b5c43f410ab076a679f0498cacfa95c6f5acb0d890163f7a","size":262308,"data":"","first_seen":"2026-05-28T23:30:54.476429Z","last_seen":"2026-06-04T13:21:15.497434Z","times_seen":1110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/index-CRrd9Q5q.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e958fc71a743e0b244e4534f906c657d","sha1":"081163e1b09089cb27d444666a60819f53682ae0","sha256":"0f8ea86736e335e78e48e49d5063a1318bb84ebb19fccf25efe75b6772ae3351","sha512":"f0ba653c80af412fa1fcb7e867f342cc6999a275e096a9f4ba5bb9006b1ffb0cdff430014ab7717b7c585bc50609c0a2b2a15fd32d6f0aa66c6388a3cbe3bdbe","ssdeep":"192:sIukT/GV5dPkMElp6AZu1ZsnghqUwqETHyserW:CkT/GjdsdphZuzsnQ4qETHvZ","tlshash":"44f1d88a7095a0e0d7354dc2c8bfc528ef7a2550340b8590f57e5c59fb37231925fae9","size":7639,"data":"","first_seen":"2026-06-03T20:50:18.968047Z","last_seen":"2026-06-04T07:59:55.424437Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"52.84.50.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96c709017743c0759cf3853d1806ba5","sha1":"72e21587610c49c8305a55e71f73fa88ed618205","sha256":"ba2338aa6670580269c762f51c4291daef913201aa8f4d4fd166c1a878262652","sha512":"974e260ed8bd1d99628fc3248f07179f6ea228e37a6b9d3ef906dba57571f2df54d73f93d1f3460902d28a90bd4793bca35477b2ef8fbf424b9112147f04bccf","ssdeep":"","tlshash":"13f0507a75620d7c819e844173df7b00767bd86944057e01865da8c4b760dcbe257bc9","size":526,"data":"","first_seen":"2023-03-07T01:03:26Z","last_seen":"2026-08-11T07:51:21.12786Z","times_seen":131719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.stripe.network/out-4.5.45.js","fqdn":"m.stripe.network","domain":"stripe.network","tld":"network"},"ip":{"addr":"52.84.50.15","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4d61b273ea36d2e71ce1a601ab0caa2","sha1":"832e652c884863f3a56a13a6a0a43fd56b5e2c85","sha256":"f2a8a36c74c59cfbe7a73d441cfd180ca6e6a9942a74ef9b240191d1c6056a59","sha512":"fe3c3e033551f745e0a8528d0afc239baf3b1045a0442aff9483a8b796ce332310de2230b6803483bd64d7cc6a0a3f420f12b95651822f7ef7687ff311845391","ssdeep":"1536:2sHx8vawlWXGzbS1iSc6q1jboAmKum7EqI47d+/:2sHx8vzWX8O1iSg1jboAmKum7Eq3p+/","tlshash":"608353c97aa6f45942f368ba802f610bf23f9d15044da041f6a1d8e17c791ed8273f6e","size":88737,"data":"","first_seen":"2025-09-10T21:19:46.014301Z","last_seen":"2026-08-11T07:51:21.148322Z","times_seen":110461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/api/frontend-config.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef24735d02637a70f5c7f6dd7c5f14aa","sha1":"3211400862afb4a489989a12b56388b2d749d6ee","sha256":"e178842a47fa6ba60751d763277bb3d200cf373a206974f740dd3a52ea48063f","sha512":"1a849768c2b90cc9a93844197c0689b99cdcfe52c8c45b8a1793359fb67a1f32694886df80df5e4ceea02225e099b14054dce7cb18589ae7bcbe78be32a587ab","ssdeep":"","tlshash":"c711dc7b27807513874109ea2891362ca62f180d09a8cae4d481d9a9fd5edb43d022ee","size":957,"data":"","first_seen":"2026-06-03T22:09:07.470825Z","last_seen":"2026-06-04T03:02:52.236035Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-ui-BkXSx_Sw.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"43e419f23e003672a33ef46536259b63","sha1":"d88b537607b83d7c211be676193e532a0489f813","sha256":"fec002c1da458f8b850e68fd7d86673e2bcc3f88957e23b2a756b3568e71f341","sha512":"ee0e5bb49f62e853bc5e99de9bac8c98c6912a45fb306eb6edd8b017ac5e4b2a8079632566ad40fc38b5f462f4777d16467324b8de7f6eac3c7eead9fa89f7e9","ssdeep":"6144:V2yEhaDPYwOb0MHhncGiLHNVc8RY9ipCSrXG7d+mMnBfY2iBnpEuKpX:UAaomnUtVc8RY9ipCwG7d+dfYpBau8X","tlshash":"6945a86e5bd812770562c9681f0fe1ca6bac127d725e6460b01f83b99a3141fc9e7fe0","size":1184912,"data":"","first_seen":"2026-06-03T20:50:19.027966Z","last_seen":"2026-06-04T07:59:55.437884Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/progress-xJrtvfyf.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"af7406deca2b28098df2be215ca7747e","sha1":"2c712918990f8eae1ab97838a5f0208e74bce4cf","sha256":"48371e6d86c9e591bc9450e29a42cace8571ea9f436c84bec7160b6c4461e3e3","sha512":"96efe48ed42f81a7397bf6dac41584ae63031755762f211593b26158ec89d6d8a5efdca0649d54c006e37613f48476750dfdc4929ef08841d5675f39a3fcbbf0","ssdeep":"","tlshash":"1ef0e19d656047f5151f488dc0caa60791584ba133fdcdc6f53c5119131408b125e6c1","size":581,"data":"","first_seen":"2026-06-03T20:50:18.987739Z","last_seen":"2026-06-04T07:59:55.382265Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/index-WTkNG_a6.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"38a1e0cbe6193a8432fbf807d394dc6a","sha1":"fa986b61e40b874c41c81d92a796d32bd9dc063a","sha256":"3dfcdd0a44f67b0462a99bcac1f597a19417f32d09a572dc26e667564a92cdd3","sha512":"d45d0f702deb7bd443e5248747a57edf725b8bb672ab25405f633e6a17b83f3ce5d26ce14e3145db0b17155962ff19e3a5524247cbcf455231e9b20f32f8be39","ssdeep":"","tlshash":"1b1100493052629963320dccc627325f66583f94781f6bc4d4249521ba38e32e22bae0","size":1097,"data":"","first_seen":"2026-06-03T20:50:18.976402Z","last_seen":"2026-06-04T07:59:55.366758Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/ComposedChart-D6nY0Mzy.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4c5bdfccf5d3a48737c4699d4bed4e3f","sha1":"e2de9b07740f976644f76219342433b1b7ccff98","sha256":"df1ca4982521297717ed65013e7b63588fb318fbe762eb7e26326df129e9cbca","sha512":"33ff84202e90aa3943ececee34fb12c4f0eea8905e70eadbbda7ac7e372dc4394a9d4d7addb34e2920fa010d2061911b2812e62ce9149be0a56a0a07a2e360c6","ssdeep":"192:JVhqaU8Cb6UC86UErfGxwgWoZj+RZrE3J9sGlrG3IpwLPtiG:J/VU8VrfGqR0PsGrG3I2LPtv","tlshash":"ae42c8c8b170f4b8079716a6002f2607f378292988add0d4b266d9f57ef5859473bf3a","size":12124,"data":"","first_seen":"2026-06-03T20:50:18.964564Z","last_seen":"2026-06-04T07:59:55.406736Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"52.84.50.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7506bb45463c4b94da31e036a49bcab5","sha1":"0d4deb3b2d93055ee1e582dfd785674094ff6a67","sha256":"dcc5c20fb4c75b87cc6da8c943f5a619f051142833f7336a369a2c18654c9d6b","sha512":"c27dc9c358151990ed18350a8ad8df7d05448b601bf10b8474a117561cd3c7d00e8c6323462631bd6deff0b43678aafb4d81d52e40f23e584fa036f907329057","ssdeep":"24576:URh68mE1WaO93SFAPqqqKBiQm8iq0zfhazk:URh6JE1xFA3BiQm8iq0zfok","tlshash":"ab25299db69b703103db756aa13b610eb33a6900250d4010f695dedc2ebee9be533b5c","size":1020597,"data":"","first_seen":"2026-06-03T21:06:35.114123Z","last_seen":"2026-06-04T18:07:00.187329Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/login","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"881f99c2cddfa82d155719cf594d0cf1","sha1":"24b3b1a8c2d852d58e88ac4d8d8b100c41aab616","sha256":"b2800b87885439af0f34f9be16dd5b4bf8bf9b7ae3153be66ae61a5ba5e0b566","sha512":"aee4bf06619b7f4a6de8749a09a2e7bc763f1ef2f8f092020def21b589e0811163622d9ed28e9bb7a67bcea2891ecf760d72712cc3292cc0fcc6f108e0c5611a","ssdeep":"","tlshash":"e4900253485c2933400905058be0581a395a02436806442510d8540495580025195212","size":46,"data":"","first_seen":"2026-03-27T00:55:06.881456Z","last_seen":"2026-06-07T01:05:48.196914Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-ui-BkXSx_Sw.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/vendor-ui-BkXSx_Sw.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: br\r\netag: \"a07a5f6e008315078f21d361df095f1f\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 1029568c-7faf-4134\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a0620414ca6c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1184912,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37621)","md5":"8186d7c412dcf9c6335e1649e588f6d1","sha1":"4cebb8d40d9a94cc2b97a7bab2df433ce0fa266f","sha256":"cf27b64552f4ba8e0a37829c0c19e5a19ccf78a185e36460e531a1a01b804576","sha512":"a077a8faaaccd3e970373247c8337f307f219c499d5bcee63f058522470e427405da505e6d3c1f101edf186edc94cb64bbbe6909f46a602946976aaa4671091a","ssdeep":"6144:V2yEhaDPYwOb0MHhncGiLHNVc8RY9ipCSrXG7d+mMnBM:UAaomnUtVc8RY9ipCwG7d+dM","tlshash":"5725767e5b98127b0562c9681f0fe1caab9c127d725e6460b01b8379da3046fc9e7fd0","first_seen":"2026-04-29T21:04:48.900253Z","last_seen":"2026-06-13T20:30:46.346433Z","times_seen":194,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-monaco-kUzn8ZZg.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/vendor-monaco-kUzn8ZZg.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 610\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: br\r\netag: \"63894c92aadba4ed790ded566cc40f1e\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 846eb992-845d-4ac7\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a0620414ca6d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1142,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1141)","md5":"49be2e75d39926a600e7680b7df4cab2","sha1":"a47763325722d605ebabea81330d8560fef38eb8","sha256":"b1cf8db666a7d7bfc05e8f8c93c4536728e9d086bf6f0270fa1fd0e607491519","sha512":"d748da376afbf0f9fea4511905d0f53bf41a0f17d16e75f550dd2dc0fec50b5b8cef198ec9a48a20622762b2a1056537f91ed1f2e5a76c90c8320404de1cca12","ssdeep":"","tlshash":"c1216a553198e13222295dd5f1b5b397f8a4285374110454710ecc929e1bec5d1e5d59","first_seen":"2025-06-21T22:39:56.838829Z","last_seen":"2026-08-09T10:16:26.792452Z","times_seen":438,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/ErrorLoadingApp-CP00zwgT.css","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/ErrorLoadingApp-CP00zwgT.css HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 3534\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\netag: \"ad9397d7649615f8c1c428bbff943c34\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 9d41f541-2e31-4332\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204165c2356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22044,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (21914)","md5":"cd7390230b7f8c8acaf084ef04c736a4","sha1":"ddb66ff2532a57dd8c00da3bd7719cfb8e6f650f","sha256":"410380393851cda33e7d5b715a54b943b9385656bf9e777779602e579f2b0e36","sha512":"9fb6a4c1aad2d2629bb2851efc44c45ca2bcd14dca2a9b1b693cc3b23c9cf37cfc8b214bc5533c549d527ba81bcb5697c5d3d9e02fb235cf8cac35a783e2b1d6","ssdeep":"384:mnRRvYvO5NDzxS8CwPhuE0BzsQELGbmSvxd6GOWtkuV:MghBzvELGbmSvxd6GOWtkuV","tlshash":"33a2b11dfd5728bf427a643ed14512d06fcafb73b0e3529af091e58916ee0680369a2c","first_seen":"2026-03-25T20:32:40.805969Z","last_seen":"2026-06-16T14:41:14.906856Z","times_seen":325,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/index-WTkNG_a6.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/index-WTkNG_a6.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 579\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\netag: \"e87ff4e907138c8e38314f2962e66a3c\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 74586ca3-a03e-49ab\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204167c3d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1097,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1096)","md5":"38a1e0cbe6193a8432fbf807d394dc6a","sha1":"fa986b61e40b874c41c81d92a796d32bd9dc063a","sha256":"3dfcdd0a44f67b0462a99bcac1f597a19417f32d09a572dc26e667564a92cdd3","sha512":"d45d0f702deb7bd443e5248747a57edf725b8bb672ab25405f633e6a17b83f3ce5d26ce14e3145db0b17155962ff19e3a5524247cbcf455231e9b20f32f8be39","ssdeep":"","tlshash":"1b1100493052629963320dccc627325f66583f94781f6bc4d4249521ba38e32e22bae0","first_seen":"2026-06-03T20:50:18.976402Z","last_seen":"2026-06-04T07:59:55.366758Z","times_seen":5,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/progress-xJrtvfyf.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/progress-xJrtvfyf.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 379\r\naccept-ranges: bytes\r\nage: 1\r\ncontent-encoding: br\r\netag: \"000ddc514eb3e1abc961703e3d86d29a\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: b3e4e070-5359-411a\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a062041efbdc56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":581,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (580)","md5":"af7406deca2b28098df2be215ca7747e","sha1":"2c712918990f8eae1ab97838a5f0208e74bce4cf","sha256":"48371e6d86c9e591bc9450e29a42cace8571ea9f436c84bec7160b6c4461e3e3","sha512":"96efe48ed42f81a7397bf6dac41584ae63031755762f211593b26158ec89d6d8a5efdca0649d54c006e37613f48476750dfdc4929ef08841d5675f39a3fcbbf0","ssdeep":"","tlshash":"1ef0e19d656047f5151f488dc0caa60791584ba133fdcdc6f53c5119131408b125e6c1","first_seen":"2026-06-03T20:50:18.987739Z","last_seen":"2026-06-04T07:59:55.382265Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/api/apps/public/prod/domain/fancy-ledger-quest-pro.com","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:23.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /api/apps/public/prod/domain/fancy-ledger-quest-pro.com HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nX-Origin-URL: https://fancy-ledger-quest-pro.com/login\r\nX-Request-ID: abe1f386-c7cb-4dcc-9bb9-6c53abf7006d\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:24 GMT\r\ncontent-type: application/json\r\ncontent-length: 30\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: cd66b89e-7dc5-4117\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\nx-request-id: abe1f386-c7cb-4dcc-9bb9-6c53abf7006d\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: a0620422ef4b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"7c3eda8bddcca1c32a9434253c0f7968","sha1":"fc1ef8885672dcd60639c2b502bf29c1b90989ec","sha256":"98a28b83aef68fac714d7b02cf650dcf97c6e7c397d7ef5e28ceeeba0468340e","sha512":"86ee72153abefe73b308be8fdd4f0adca3c6b63b360f222050888d9b22f823647453ff2f8ed188493474e40a3a3edfc9a0e418c79fc358f1462be8a6fbe4ca8d","ssdeep":"","tlshash":"998000bf2838b08200838202a03303ab030f00a80000280bba0c800080302203030c82","first_seen":"2026-06-03T22:09:07.44459Z","last_seen":"2026-06-03T22:09:07.44459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:19.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 03 Jun 2026 22:08:19 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::rjtpl-1780524065187-753fa8d6d6ad\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 434\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87oZ2VntNqoLLtPJpQUHfp5MqSU7OFv23yWW0SeirWyItBIhdh5bX6x6iu%2F7foTS%2ByEQEmW1H%2BrH2sNn5Whd5cU71WAcyolE5r6K9XCcd2aNBA30ZWfmKIYQJoSyDTajCtODTgk%3D\"}]}\r\ncf-ray: a062040c2cbddfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T07:57:31.65745Z","times_seen":17832625,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":32,"dns":22,"connect":1,"send":0,"wait":5,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-monaco-kUzn8ZZg.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:20.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/vendor-monaco-kUzn8ZZg.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/index-DTWORgjS.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 610\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\netag: \"63894c92aadba4ed790ded566cc40f1e\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 846eb992-845d-4ac7\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a0620412383d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1142,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1141)","md5":"49be2e75d39926a600e7680b7df4cab2","sha1":"a47763325722d605ebabea81330d8560fef38eb8","sha256":"b1cf8db666a7d7bfc05e8f8c93c4536728e9d086bf6f0270fa1fd0e607491519","sha512":"d748da376afbf0f9fea4511905d0f53bf41a0f17d16e75f550dd2dc0fec50b5b8cef198ec9a48a20622762b2a1056537f91ed1f2e5a76c90c8320404de1cca12","ssdeep":"","tlshash":"c1216a553198e13222295dd5f1b5b397f8a4285374110454710ecc929e1bec5d1e5d59","first_seen":"2025-06-21T22:39:56.838829Z","last_seen":"2026-08-09T10:16:26.792452Z","times_seen":438,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/context-menu-BWYP5m7U.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/context-menu-BWYP5m7U.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 2520\r\naccept-ranges: bytes\r\nage: 1\r\ncontent-encoding: br\r\netag: \"d0b229a757680166febcd1755a8b2f5d\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 074ecfb7-d26d-4633\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a062041efbdb56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9020,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (9019)","md5":"edebf61f1be407dbbab9ef962029e3f7","sha1":"d063b30d3d2d2b73d357524dceee30d8f4969bf4","sha256":"432f608cee71456683a95e09ddd9a95c98431b7683f1da07bf3f9a8c4040f561","sha512":"fb8c0ac49ed283dcd5b1b617d7fd0202b4e8fb85918c0b32eb705f77134bb7b6d0c99dec2840d3f39edc72595127c497a8cb44319103cdb950f2c5187c70628c","ssdeep":"192:OHkdX+VrpvDtrEfstfwI4HH0pvDtrEfstfwF1qZaEZoS/cZFbQY1b0vTEApajuxc:OEupv5rEQZ4HUpv5rEQ21WaEZlwuYCvC","tlshash":"cd12b6b1e05075e8ff3e08e2436d812a1f0ac558b3afd2e6e56d5d2c21c50a2b5f72d9","first_seen":"2026-06-03T20:50:18.99427Z","last_seen":"2026-06-04T07:59:55.393381Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Ffancy-ledger-quest-pro.com%2Flogin\u0026title=login%20%7C%20LedgerLegends\u0026referrer=\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"52.84.50.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:24.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 08 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:95:51:E5:EA:A2:1E:EE:DF:81:B3:8D:82:70:7A:EA:7B:B4:77:E1","sha256":"A7:DF:84:45:CD:E6:7C:41:4C:DC:A4:5A:2A:7D:BC:E2:A2:57:CA:14:BE:C6:11:DC:31:EB:0A:CD:FA:C2:42:CB"}}},"request":{"raw":"GET /v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 200\r\nx-amz-cf-pop: OSL50-P3\r\nlast-modified: Fri, 29 May 2026 20:13:29 GMT\r\naccept-ranges: bytes\r\nserver: Cloudfront\r\ndate: Wed, 03 Jun 2026 21:18:25 GMT\r\ncache-control: max-age=31536000\r\netag: \"3437aaddcdf6922d623e172c2d6f9278\"\r\nvary: Accept-Encoding\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 3000\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ncontent-security-policy: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report\r\ncontent-security-policy-report-only: base-uri 'none'; connect-src 'self' https://r.stripe.com; default-src 'self'; font-src 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src https://q.stripe.com; media-src 'none'; object-src 'none'; script-src 'self'; style-src 'self'; worker-src 'none'; report-uri https://q.stripe.com/csp-report\r\norigin-agent-cluster: ?1\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: koATOTtmCrS0HHJXZjMO7wlseZVnk--I3zh51lCk8g8om5tLjA6xew==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Stripe","description":"Stripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.","website":"https://stripe.com","common_platform_enumeration":"","icon":"Stripe.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":200,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"3437aaddcdf6922d623e172c2d6f9278","sha1":"f69066cf20141ac93418102d3eee7c0225b8a623","sha256":"35dcc382eb69d00369d708708cdc545f3968b68fa5bbe3e728d11fedd04f93bb","sha512":"2dae5c5c30c6a0e763d8128f2ce1d467ead432e582ab4ebb68e23991db08f57490abc0eed805fd33fab5503c1737d9d47d4cc1090ae15d7391593fbb295d66e7","ssdeep":"","tlshash":"c3d022e78c3100048ae87b844c52a30c0c09f51a3c528c522ef638b424c2b934c1a6c0","first_seen":"2023-12-22T02:11:13Z","last_seen":"2026-08-11T07:51:21.152932Z","times_seen":129059,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.stripe.com/6","fqdn":"m.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"44.239.85.241","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.stripe.network/inner.html#url=https%3A%2F%2Ffancy-ledger-quest-pro.com%2Flogin\u0026title=login%20%7C%20LedgerLegends\u0026referrer=\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","date":"2026-06-03T22:08:25.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.stripe.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 27 May 2026 00:00:00 GMT","end":"Thu, 03 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:5C:06:9F:A8:75:F7:F7:49:24:24:9C:4E:54:C0:0F:76:67:E4:6E","sha256":"C9:D4:D7:19:11:84:6D:CC:73:25:E8:53:EB:CF:B4:20:51:9E:7F:12:CA:77:8D:E0:C6:47:22:75:6F:34:E8:90"}}},"request":{"raw":"POST /6 HTTP/1.1\r\nHost: m.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3108\r\nOrigin: https://m.stripe.network\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.stripe.network/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3108,"data":"JTdCJTIydjIlMjIlM0ExJTJDJTIyaWQlMjIlM0ElMjJhZDRiZDY2MThlMTc0NzU0MWQwNzZjNzFiMGIxMDQ2NyUyMiUyQyUyMnQlMjIlM0EzMTElMkMlMjJ0YWclMjIlM0ElMjIlMjRucG1fcGFja2FnZV92ZXJzaW9uJTIyJTJDJTIyc3JjJTIyJTNBJTIyanMlMjIlMkMlMjJhJTIyJTNBJTdCJTIyYSUyMiUzQSU3QiUyMnYlMjIlM0ElMjJ0cnVlJTIyJTJDJTIydCUyMiUzQTAlN0QlMkMlMjJiJTIyJTNBJTdCJTIydiUyMiUzQSUyMnRydWUlMjIlMkMlMjJ0JTIyJTNBMCU3RCUyQyUyMmMlMjIlM0ElN0IlMjJ2JTIyJTNBJTIyZW4tVVMlMkNlbiUyMiUyQyUyMnQlMjIlM0EwJTdEJTJDJTIyZCUyMiUzQSU3QiUyMnYlMjIlM0ElMjJXaW4zMiUyMiUyQyUyMnQlMjIlM0EwJTdEJTJDJTIyZSUyMiUzQSU3QiUyMnYlMjIlM0ElMjJQREYlMjBWaWV3ZXIlMkNpbnRlcm5hbC1wZGYtdmlld2VyJTJDYXBwbGljYXRpb24lMkZwZGYlMkNwZGYlMkIlMkJ0ZXh0JTJGcGRmJTJDcGRmJTJDJTIwQ2hyb21lJTIwUERGJTIwVmlld2VyJTJDaW50ZXJuYWwtcGRmLXZpZXdlciUyQ2FwcGxpY2F0aW9uJTJGcGRmJTJDcGRmJTJCJTJCdGV4dCUyRnBkZiUyQ3BkZiUyQyUyMENocm9taXVtJTIwUERGJTIwVmlld2VyJTJDaW50ZXJuYWwtcGRmLXZpZXdlciUyQ2FwcGxpY2F0aW9uJTJGcGRmJTJDcGRmJTJCJTJCdGV4dCUyRnBkZiUyQ3BkZiUyQyUyME1pY3Jvc29mdCUyMEVkZ2UlMjBQREYlMjBWaWV3ZXIlMkNpbnRlcm5hbC1wZGYtdmlld2VyJTJDYXBwbGljYXRpb24lMkZwZGYlMkNwZGYlMkIlMkJ0ZXh0JTJGcGRmJTJDcGRmJTJDJTIwV2ViS2l0JTIwYnVpbHQtaW4lMjBQREYlMkNpbnRlcm5hbC1wZGYtdmlld2VyJTJDYXBwbGljYXRpb24lMkZwZGYlMkNwZGYlMkIlMkJ0ZXh0JTJGcGRmJTJDcGRmJTIyJTJDJTIydCUyMiUzQTAlN0QlMkMlMjJmJTIyJTNBJTdCJTIydiUyMiUzQSUyMjEyODB3XzEwMjRoXzI0ZF8xciUyMiUyQyUyMnQlMjIlM0EwJTdEJTJDJTIyZyUyMiUzQSU3QiUyMnYlMjIlM0ElMjIwJTIyJTJDJTIydCUyMiUzQTAlN0QlMkMlMjJoJTIyJTNBJTdCJTIydiUyMiUzQSUyMmZhbHNlJTIyJTJDJTIydCUyMiUzQTAlN0QlMkMlMjJpJTIyJTNBJTdCJTIydiUyMiUzQSUyMnNlc3Npb25TdG9yYWdlLWVuYWJsZWQlMkMlMjBsb2NhbFN0b3JhZ2UtZW5hYmxlZCUyMiUyQyUyMnQlMjIlM0EyJTdEJTJDJTIyaiUyMiUzQSU3QiUyMnYlMjIlM0ElMjIwMDAwMDAwMDAwMTAwMDExMDAwMDEwMDAxMDAwMDAwMDAwMDAwMDAwMDExMDAwMDAwMDEwMDAwJTIyJTJDJTIydCUyMiUzQTMwNiUyQyUyMmF0JTIyJTNBNTclN0QlMkMlMjJrJTIyJTNBJTdCJTIydiUyMiUzQSUyMiUyMiUyQyUyMnQlMjIlM0EwJTdEJTJDJTIybCUyMiUzQSU3QiUyMnYlMjIlM0ElMjJNb3ppbGxhJTJGNS4wJTIwKFdpbmRvd3MlMjBOVCUyMDEwLjAlM0IlMjBXaW42NCUzQiUyMHg2NCUzQiUyMHJ2JTNBMTM0LjApJTIwR2Vja28lMkYyMDEwMDEwMSUyMEZpcmVmb3glMkYxMzQuMCUyMiUyQyUyMnQlMjIlM0EwJTdEJTJDJTIybSUyMiUzQSU3QiUyMnYlMjIlM0ElMjIlMjIlMkMlMjJ0JTIyJTNBMCU3RCUyQyUyMm4lMjIlM0ElN0IlMjJ2JTIyJTNBJTIyZmFsc2UlMjIlMkMlMjJ0JTIyJTNBMjQ5JTJDJTIyYXQlMjIlM0E0JTdEJTJDJTIybyUyMiUzQSU3QiUyMnYlMjIlM0ElMjI5YzE5YTBiNTk5NDVjNWI4ZGZkNWE4N2EwMjZkMTgxNSUyMiUyQyUyMnQlMjIlM0EyMDclN0QlN0QlMkMlMjJiJTIyJTNBJTdCJTIyYSUyMiUzQSUyMiUyMiUyQyUyMmIlMjIlM0ElMjJodHRwcyUzQSUyRiUyRkJmRFJ0ZVFrc25fRDB6NzJDU0VmOHpEenJSMmRocHJiZVZDUF9DNGxOUFEuZzJ1OS1ocVp2R0lxWUpjUGxQZndKQWYtdjNSZ3lLX3gxTnBwekFsQTEyTSUyRkViMjRMdlFpSnFMYllucUlqZnJsUkVia0Jhd0prRW15VkJLZnQtLU9rbVklMjIlMkMlMjJjJTIyJTNBJTIyVElaS3oyWVQ0Y3dqUUxiUkdhMjZQOERvX3U4MktxY0NSNkdzMkpYQ1ZSQSUyMiUyQyUyMmQlMjIlM0ElMjJOQSUyMiUyQyUyMmUlMjIlM0ElMjJOQSUyMiUyQyUyMmYlMjIlM0FmYWxzZSUyQyUyMmclMjIlM0F0cnVlJTJDJTIyaCUyMiUzQXRydWUlMkMlMjJpJTIyJTNBJTVCJTIybG9jYXRpb24lMjIlNUQlMkMlMjJqJTIyJTNBJTVCJTVEJTJDJTIybiUyMiUzQTE5OSUyQyUyMnUlMjIlM0ElMjJmYW5jeS1sZWRnZXItcXVlc3QtcHJvLmNvbSUyMiUyQyUyMnclMjIlM0ElMjIxNzgwNTI0NTA1NTY0JTNBN2Y4ZWQxNmIxZTVkMjM1NmNlYTQ3NDY5Yzc0Y2UzZGE1YTk2YTljMjcxMzgxOTc5YzUzOTAzMDA5ZjhmZjNjZCUyMiU3RCUyQyUyMmglMjIlM0ElMjJhNWE1ZTE4YjE2N2JmMGI4YzU1MCUyMiU3RA=="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 22:08:26 GMT\r\ncontent-length: 156\r\nset-cookie: m=faf2990a-7ea0-403f-9203-eb3724ab2cacaac52e;Expires=Fri, 02-Jun-2028 22:08:26 GMT;Secure;HttpOnly; SameSite=None\r\nx-content-type-options: nosniff\r\nx-stripe-proxy-response: upstream\r\nx-stripe-server-rpc-duration-micros: 2195\r\naccess-control-allow-origin: https://m.stripe.network\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\ncontent-type: application/json;charset=utf-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"07cf7088328cccb8da395ab7b204d409","sha1":"b186fc4650b622cb2a02b0a2ac9042d821b3a42d","sha256":"76d52ec91fffabb4a1a7350db99c8dd281144ad6e979123e5dddde89a1eab1d5","sha512":"f567c1351327caae9eb158bbbf9df3f912e7c079e8d9436ee79332a3ac0f550cc85cdd8168050f0d484015f06acbff34921de188aeb0a0736f9c3abfe8cb2457","ssdeep":"","tlshash":"80c02b64813018001bdadd0b4f10109cb8c6c20efb668f6b086f13a6eb2e93ce92b1b0","first_seen":"2026-06-03T22:09:07.449454Z","last_seen":"2026-06-03T22:09:07.449454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":378,"dns":14,"connect":169,"send":0,"wait":172,"receive":1,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:19.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:19 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::vhhlv-1778775055415-ee1be01c049f\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1749442\r\nlast-modified: Wed, 03 Jun 2026 02:11:42 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXm0s5Z7kXIECoWCejWEEt4JtHd1W09VQiJhFveASaLoi8HRPeDpkFnGf1N5VioawKwfQIZSNj%2FPzu2MDpCh0kd5mZeHZMl7k7zIoYVT%2BLlmbyL5ayh3J1NDQCwnowRC32KUUvI%3D\"}]}\r\ncf-ray: a062040c3ce5dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-11T07:01:14.260163Z","times_seen":48783,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-utils-DdX10vNR.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/vendor-utils-DdX10vNR.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: br\r\netag: \"100939588838bbd1fff9a66f9c7c050c\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 919ffae2-fe51-47c0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a0620414ca6e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170002,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37588)","md5":"e512b293f2598dca7ff3b8b714ab5059","sha1":"5ab6984809de084f8558e0e32d4232c48a4cfaf2","sha256":"2ee05db0d2d1596751b771f562d7856446a1d838ff7e9eb142e28861b98d18d3","sha512":"1a2a5dd0d1557afebf1e545096c353d7788e173f480eaa01caa3e465b0f67290b98029f3d9e32829829e009a1f9f85332bff55cb3d54ddb95046b66de3061880","ssdeep":"1536:+ZGHJ570pV5z2obudfFY09QMmuxl2zhcc5y+zCQddCTjsbZE9B9+lZEQ9HQxG+gj:eGHTcVrP0OccLzCQ7Cx9+lZwGR1zFV9","tlshash":"12f3d7d830c3b055a3a719b440bf004ff23d6d61b84dc954e09ad6ea7d7990a92bbf9c","first_seen":"2026-06-03T20:50:19.014758Z","last_seen":"2026-06-04T07:59:55.405741Z","times_seen":5,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/UserAppMain-Dgihpmma.css","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/UserAppMain-Dgihpmma.css HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\netag: \"29d5ccb388e5fd3054ae76c0d4638bbc\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 74869a80-7e89-4d08\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204166c2656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15037,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15036)","md5":"7b943679edfb7ad4f9398a27ae63fbd5","sha1":"056c20a36e3e3502a46e5b9b1a846a26ae59c633","sha256":"7e14f0f44c4713eb7519182d93575f59139200ca781397a493a11f1dff0ce5e1","sha512":"39461e314b412cfc63381c15e07518f52c5ca4c59a7479a5a382d0cf27bde50039c85e7c4a261c5d55fed52ab5bb7e1fbc5211768f9b68653a064ea992352ac8","ssdeep":"192:VY8KvExv2+ZavRWLNZIg56gdEQUqxtAIX1TjRcoWpWT4ymxHK/cSAGvt:VDKvIvvcvCN6E6VQUqxtt3WpWGnKt","tlshash":"5d62a423b37c3369e866811fe6b496743d16a842d163cbbdb6ccb707c3c9a285c53118","first_seen":"2025-04-04T08:24:46.099783Z","last_seen":"2026-08-11T06:46:17.842402Z","times_seen":856,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/context-menu-BWYP5m7U.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/context-menu-BWYP5m7U.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 2520\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\netag: \"d0b229a757680166febcd1755a8b2f5d\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 074ecfb7-d26d-4633\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204167c3756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9020,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (9019)","md5":"edebf61f1be407dbbab9ef962029e3f7","sha1":"d063b30d3d2d2b73d357524dceee30d8f4969bf4","sha256":"432f608cee71456683a95e09ddd9a95c98431b7683f1da07bf3f9a8c4040f561","sha512":"fb8c0ac49ed283dcd5b1b617d7fd0202b4e8fb85918c0b32eb705f77134bb7b6d0c99dec2840d3f39edc72595127c497a8cb44319103cdb950f2c5187c70628c","ssdeep":"192:OHkdX+VrpvDtrEfstfwI4HH0pvDtrEfstfwF1qZaEZoS/cZFbQY1b0vTEApajuxc:OEupv5rEQZ4HUpv5rEQ21WaEZlwuYCvC","tlshash":"cd12b6b1e05075e8ff3e08e2436d812a1f0ac558b3afd2e6e56d5d2c21c50a2b5f72d9","first_seen":"2026-06-03T20:50:18.99427Z","last_seen":"2026-06-04T07:59:55.393381Z","times_seen":5,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/index-CRrd9Q5q.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/index-CRrd9Q5q.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3081\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\netag: \"39bdf6277a117ec17ef9b133e581dd0c\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 0c4b1061-6d63-4e8e\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204167c3e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7639,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (7638)","md5":"e958fc71a743e0b244e4534f906c657d","sha1":"081163e1b09089cb27d444666a60819f53682ae0","sha256":"0f8ea86736e335e78e48e49d5063a1318bb84ebb19fccf25efe75b6772ae3351","sha512":"f0ba653c80af412fa1fcb7e867f342cc6999a275e096a9f4ba5bb9006b1ffb0cdff430014ab7717b7c585bc50609c0a2b2a15fd32d6f0aa66c6388a3cbe3bdbe","ssdeep":"192:sIukT/GV5dPkMElp6AZu1ZsnghqUwqETHyserW:CkT/GjdsdphZuzsnQ4qETHvZ","tlshash":"44f1d88a7095a0e0d7354dc2c8bfc528ef7a2550340b8590f57e5c59fb37231925fae9","first_seen":"2026-06-03T20:50:18.968047Z","last_seen":"2026-06-04T07:59:55.424437Z","times_seen":5,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/UserAppMain-C7VVsosr.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/index-DTWORgjS.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: br\r\netag: \"6dcba19ee3012122a8a082a4065796fb\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 6ab7cde3-5f59-4f67\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a062041a6fe256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2646220,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54657)","md5":"95ff83f3b208c84715f7b1c3efe14a0d","sha1":"a8b6cafd630faa606490475a2d729645e03cb831","sha256":"497ed2a8b4a65ea7a7b22c5546745be2c753668f49f71fe9e5ff5c1cd2a4b971","sha512":"a32b5518fcb51d625ecad04db9665192a6c26ce8f549b55849634e4bac2ed10b3266e61ad47eba2549fc69a039944c9838c3c790338230efaa17314a80b15546","ssdeep":"12288:cNg/RiI81bxM0fnFullrHrstKlQpiHmDsDBgFFNiyd9ysAqGAi:cepif1bxM3rHrAL4wsDBgFFNiyPylAi","tlshash":"6935078732d2701542d394ec10fb2c4bb33aab17654c88d9f278d9de6db8589906bf39","first_seen":"2026-06-03T22:09:07.454969Z","last_seen":"2026-06-03T22:09:07.454969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/ErrorLoadingApp-6nLA3Jwr.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/ErrorLoadingApp-6nLA3Jwr.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nage: 1\r\ncontent-encoding: br\r\netag: \"13057693d72e8a4c2abc05e117fd24b1\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 7f9f4af6-ba73-4e69\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a062041eebd456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1893129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35215)","md5":"ca628c2db846bdc6a0d71968b7657541","sha1":"8fea3160d3b8e5bc5bb1e44245550fe2cc9d4412","sha256":"0e102185ad1029ebc512127bb2e3767e4e1711e2a5712b63d1a7e544d1ad64e2","sha512":"1345662a74858803d5ae559471b1cc7315af8f2dcc3a9da0577d8ae1a0365b6e7c694ea14af14bd6c0800c512c78f5c85c78dd94ab36d7957a3946225ed06584","ssdeep":"12288:St8p9Ub84PvchPK7X9HwQpvdIXXSVCeazAmvh8k8uDy:W8p2b8y9HZvdISVCeazJ58kvDy","tlshash":"b52507d931d678b146c791e6007b4006f73968557048849cfb6cdaebbe2ac4aa03bf7d","first_seen":"2026-06-03T20:50:18.979827Z","last_seen":"2026-06-04T07:59:55.369986Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/webviewDetection-BGkn8C8u.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/webviewDetection-BGkn8C8u.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 389\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: br\r\netag: \"a496a7226e3497bb04fa2be56c25fea3\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 9d7a90f1-11aa-47b4\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a062041eebd556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":667,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (666)","md5":"b2742d8178ecf8ea53a731e342a31497","sha1":"12418dd31bb2eb86f2f23b120cc60bdfe9d9e521","sha256":"2f1d61e1c24e8cfef698191a4570ed5ca4201923a6758a294517ae5bece5716f","sha512":"587b8fafddc48fac2c20db3a2aa79b94f910ebbdec87ebf1fbb1daf27c3588e97073627aed64864f8339da4d43ff47292253979b5174bb6b3beb30713a2dbfb7","ssdeep":"","tlshash":"3401d3e8499b301e577a9c11217b3811d876421dbc2f4dc1e1df2d69013a1e1533afa6","first_seen":"2026-03-17T23:41:19.417803Z","last_seen":"2026-06-16T14:41:14.904213Z","times_seen":336,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-monaco-Cdw5dZYH.css","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:19.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/vendor-monaco-Cdw5dZYH.css HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:20 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\netag: \"97aa437a5be00a1a474ab94814746e8d\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 1bbf4286-2568-41b0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a062040beac656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":133206,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"92badbeb2a68507142bc49f24dc89816","sha1":"3c52932f3d1c5a8324c0d592e5672f46ff657bff","sha256":"fd538a425b0451924aa6b950092b7a41439371524cd61b47ad67ee2b98e8cf8f","sha512":"8ad29bf6d9030dea7805873471d1f56009a7fd97c1f4ea11b1438f118837acdaedc14a1c27ff0589dee90bfa1d91d3bb8753ea82afb633cdced3a2aec013faea","ssdeep":"1536:gRuuS2iOE4PfPuPjPAPl3vPQt45J4wSPqPKPFPSPOWQCBPeNq1+fb7QosJsE0akq:sdA4osJsE0akq","tlshash":"e4d341ef6101192872ebd1379682de9935fda573ed624ee8fcbcbb2051ca5e10213538","first_seen":"2026-03-25T20:32:40.74357Z","last_seen":"2026-06-16T14:41:14.918902Z","times_seen":328,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/index-Devik0gV.css","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:19.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/index-Devik0gV.css HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:20 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\netag: \"0881d77fcafd9cb704e54db2b71cfe50\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 4bf66984-5ee9-4d7f\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a062040beac756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":663724,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ea571e8911cef30ab206e77b2eeae12f","sha1":"0b7b6f914a65e5264553ca2020a8fb746ee0387e","sha256":"7a433ff5adf55b078f1119666fe0e762c92695dd70902da8084528b328580cec","sha512":"1ba56e279210582cd7cae170469cc4d73f84856c53a9f548dc2177d0a06d8189d21b56c9bb4343a7822cea63ffde5d37a20a0a18e0380dd3cf8ed1b29e0b0e1f","ssdeep":"6144:caFHv93bIBD+Xu3lMw7qvzbCl4h7fi5KGZtgPHLQxVtg7jbIZdv5oP5QabJeRe6f:dVdDifxrk2T","tlshash":"9ce40e7956b4603b7c17f1f4d698b86de92bf1d0df3e45aaac81022467f23f64c5aa00","first_seen":"2026-06-03T15:09:15.011278Z","last_seen":"2026-06-04T08:44:12.232319Z","times_seen":7,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-ui-BkXSx_Sw.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:20.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/vendor-ui-BkXSx_Sw.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/index-DTWORgjS.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\netag: \"a07a5f6e008315078f21d361df095f1f\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 1029568c-7faf-4134\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a0620412383c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1184912,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37621)","md5":"8186d7c412dcf9c6335e1649e588f6d1","sha1":"4cebb8d40d9a94cc2b97a7bab2df433ce0fa266f","sha256":"cf27b64552f4ba8e0a37829c0c19e5a19ccf78a185e36460e531a1a01b804576","sha512":"a077a8faaaccd3e970373247c8337f307f219c499d5bcee63f058522470e427405da505e6d3c1f101edf186edc94cb64bbbe6909f46a602946976aaa4671091a","ssdeep":"6144:V2yEhaDPYwOb0MHhncGiLHNVc8RY9ipCSrXG7d+mMnBM:UAaomnUtVc8RY9ipCwG7d+dM","tlshash":"5725767e5b98127b0562c9681f0fe1caab9c127d725e6460b01b8379da3046fc9e7fd0","first_seen":"2026-04-29T21:04:48.900253Z","last_seen":"2026-06-13T20:30:46.346433Z","times_seen":194,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"fancy-ledger-quest-pro.com/ws/socket.io/?EIO=4\u0026transport=websocket","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /ws/socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://fancy-ledger-quest-pro.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: KruwsrrvsdxcY7lw4lJ8Iw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 03 Jun 2026 22:08:22 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: whIWc6byj4K5L3ajBGNJsIYRqgU=\r\ncf-cache-status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: a06204164c0a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T07:57:31.65745Z","times_seen":17832625,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":23,"connect":23,"send":0,"wait":591,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/UserAppMain-C7VVsosr.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\netag: \"6dcba19ee3012122a8a082a4065796fb\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 6ab7cde3-5f59-4f67\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204167c3056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2646220,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54657)","md5":"9a3ad83d57e558044a2e2af08d039082","sha1":"513fa95789a6706b4c866d81b5c13af6417eebab","sha256":"7b104cfd824cc336b5e2b5814e1c37d4b50b8d8417e8cb20c11b3176f45e9ffd","sha512":"ee32db07bc7b12d998ac524f04b6e9f2f3612cef30c455276a32ad5e7b8756e789b6e409552d82f12af46e62b35999e918b5a2186a142466e3e401f488d71bb6","ssdeep":"12288:cNg/RiI81bxM0fnFullrHrstKlQpiHmDsDBgFFNiyd9yevOR8EvtEvTJEvtEvD:cepif1bxM3rHrAL4wsDBgFFNiyPyrR81","tlshash":"af353a873296701542d394ac10ff0c0bb33a6b27644880d8f679dddfada9899917bf39","first_seen":"2026-06-03T20:50:19.003886Z","last_seen":"2026-06-04T07:59:55.425341Z","times_seen":5,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-react-BX3LLGLT.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/vendor-react-BX3LLGLT.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\netag: \"32046978dcea76b524730b57d635d9dd\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 83da85a4-3287-47eb\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204167c3156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85790,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38304)","md5":"c7145b3b6e791313f6f56e61d208db8e","sha1":"a5af737a8a53529f78c45f07ae5a13e04dce47e9","sha256":"ad4bc01936f6648608d64d4fe1aa91f3eeda13abf113e34fdc4f367f6a50c97e","sha512":"2e83d361a836fa716807ec8ce1c392609707ff8abe869fa0326fe29a36f9a08a636eea7e9fea83d7c3ae5b06df84e4e77b3ef27845e317ad18f246648752b097","ssdeep":"768:+dkKLlScuAJhDwrPHqhoR/YD9Rr6TIBHUUr9OGlctoaIe3Ve7dP4OV6p2JRtHxgk:+2GwriyRwZATIBHUvbIJ7dAOVmytOnk","tlshash":"31830afa735274724bfb42e5c0bb0161b3752caa20698012b1ad9d4e3474d4ca777f7a","first_seen":"2026-06-03T20:50:18.960844Z","last_seen":"2026-06-04T07:59:55.423518Z","times_seen":5,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/domainValidation-C2COoIZ_.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/domainValidation-C2COoIZ_.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 217\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\netag: \"50d953a7a2aed87428938d37b9f6c86e\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 7ebb0fc9-2a56-48f3\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204168c4356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (340)","md5":"35f0990e3597e2ade2526d6371538d22","sha1":"2e6928b2abb134f20ba908f560b8cbb491633096","sha256":"426dec343c3762e6903518ea8ce528ccfef30ef3221e1f381b764b56c5ed315c","sha512":"4a5371d7139e2fdfb69351739da9b2a359f780854d1a16ef68282bb6423aebc0fb9e5aa6428eca0fda7d0887aa8d65d86ae566fddfea91f641fa1a4b34585f93","ssdeep":"","tlshash":"f4e020f0f8e7508055f2067c027af500f15d1d5628894405c69a5dd4bc2e9b9fa3b965","first_seen":"2026-03-17T23:41:19.409137Z","last_seen":"2026-06-16T14:41:14.860624Z","times_seen":336,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-react-BX3LLGLT.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/vendor-react-BX3LLGLT.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nage: 1\r\ncontent-encoding: br\r\netag: \"32046978dcea76b524730b57d635d9dd\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 83da85a4-3287-47eb\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a062041eebd356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85790,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38304)","md5":"c7145b3b6e791313f6f56e61d208db8e","sha1":"a5af737a8a53529f78c45f07ae5a13e04dce47e9","sha256":"ad4bc01936f6648608d64d4fe1aa91f3eeda13abf113e34fdc4f367f6a50c97e","sha512":"2e83d361a836fa716807ec8ce1c392609707ff8abe869fa0326fe29a36f9a08a636eea7e9fea83d7c3ae5b06df84e4e77b3ef27845e317ad18f246648752b097","ssdeep":"768:+dkKLlScuAJhDwrPHqhoR/YD9Rr6TIBHUUr9OGlctoaIe3Ve7dP4OV6p2JRtHxgk:+2GwriyRwZATIBHUvbIJ7dAOVmytOnk","tlshash":"31830afa735274724bfb42e5c0bb0161b3752caa20698012b1ad9d4e3474d4ca777f7a","first_seen":"2026-06-03T20:50:18.960844Z","last_seen":"2026-06-04T07:59:55.423518Z","times_seen":5,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-utils-DdX10vNR.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:20.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/vendor-utils-DdX10vNR.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/index-DTWORgjS.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\netag: \"100939588838bbd1fff9a66f9c7c050c\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 919ffae2-fe51-47c0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a0620412383e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170002,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37588)","md5":"e512b293f2598dca7ff3b8b714ab5059","sha1":"5ab6984809de084f8558e0e32d4232c48a4cfaf2","sha256":"2ee05db0d2d1596751b771f562d7856446a1d838ff7e9eb142e28861b98d18d3","sha512":"1a2a5dd0d1557afebf1e545096c353d7788e173f480eaa01caa3e465b0f67290b98029f3d9e32829829e009a1f9f85332bff55cb3d54ddb95046b66de3061880","ssdeep":"1536:+ZGHJ570pV5z2obudfFY09QMmuxl2zhcc5y+zCQddCTjsbZE9B9+lZEQ9HQxG+gj:eGHTcVrP0OccLzCQ7Cx9+lZwGR1zFV9","tlshash":"12f3d7d830c3b055a3a719b440bf004ff23d6d61b84dc954e09ad6ea7d7990a92bbf9c","first_seen":"2026-06-03T20:50:19.014758Z","last_seen":"2026-06-04T07:59:55.405741Z","times_seen":5,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-data-BB79dn4K.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/vendor-data-BB79dn4K.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: br\r\netag: \"d461b3778c1d9cbba182aa1f939aa76e\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: dc49fc08-bf98-4978\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a0620414ca7056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145877,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33397)","md5":"4b211781ba78bc5db995f0faa0e872c5","sha1":"89c597ea00f8be44056e0290a1691a30c165fbf7","sha256":"3bac9079feef13f35fa73feb5f39344cb51186a2ed28059aece6e8d75bae7888","sha512":"216d41eb8766f2ab5e1bb4498ae90e060081d88a84d2e6e2e8fa5912d7800940175351963f4d59b166256faf735b4b2e780653b366f4455938bbb6cbe542e80d","ssdeep":"3072:/qO70WdLAXjUuGvEgCTM2W/G40XQsVufyNvW1wv5F8W1DoFt:/R70WdLAXjacZTAG40gsVMyNvW1wv5Fg","tlshash":"cde319c83257a0161bf655e4907e0103e2697e19700e80a8f4ad9eea7eadd06f377f34","first_seen":"2026-06-03T20:50:19.002113Z","last_seen":"2026-06-04T07:59:55.389608Z","times_seen":5,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:38:17 GMT","end":"Mon, 10 Aug 2026 18:38:16 GMT"},"fingerprint":{"sha1":"A4:EE:F3:BC:0C:0B:0D:8C:E9:89:12:99:8F:58:8F:3D:72:DD:A5:6E","sha256":"8E:F0:72:6E:B0:7F:0A:77:24:9B:0E:ED:B9:E9:46:FB:A7:75:83:4A:BD:C9:6C:EC:D1:88:C1:3B:FA:B4:63:F3"}}},"request":{"raw":"GET /gsi/client HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nexpires: Wed, 03 Jun 2026 22:08:22 GMT\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncache-control: private, max-age=1800\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncontent-security-policy: script-src 'nonce-saH585bB2XXV5l7cum_wOA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":262308,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2663)","md5":"08f9e34a55cf4cf578deaa0c9c30d4be","sha1":"a5d9523aca39093826e23b403d22e58de2776604","sha256":"05c42e3ef8df1d3ed18300bd3fac714e50c924208c9ced43a5f15dce85ba86a0","sha512":"31be9598529eedb809022c58d14cfca626d550350581fcad8b7840a413e4e04e49b1d3b376306e7b0036198a901d7a1a799eaef9e19c53c68bda572145147c4e","ssdeep":"6144:Tdt07hxy5MhIJNeS/4MjtIwnB76iM7a6llLyFg:T74hs1/4MjesZJM7a6llLYg","tlshash":"dc444adcb6e270355212f9b5c43f410ab076a679f0498cacfa95c6f5acb0d890163f7a","first_seen":"2026-05-28T23:30:54.476429Z","last_seen":"2026-06-04T13:21:15.497434Z","times_seen":1110,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":240,"dns":11,"connect":31,"send":0,"wait":37,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/ComposedChart-D6nY0Mzy.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/ComposedChart-D6nY0Mzy.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3944\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: br\r\netag: \"9ea6ad0085f97b52b5c69fc1f484687c\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 52da0f7d-0d16-44e5\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a062041efbd956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12124,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12123)","md5":"4c5bdfccf5d3a48737c4699d4bed4e3f","sha1":"e2de9b07740f976644f76219342433b1b7ccff98","sha256":"df1ca4982521297717ed65013e7b63588fb318fbe762eb7e26326df129e9cbca","sha512":"33ff84202e90aa3943ececee34fb12c4f0eea8905e70eadbbda7ac7e372dc4394a9d4d7addb34e2920fa010d2061911b2812e62ce9149be0a56a0a07a2e360c6","ssdeep":"192:JVhqaU8Cb6UC86UErfGxwgWoZj+RZrE3J9sGlrG3IpwLPtiG:J/VU8VrfGqR0PsGrG3I2LPtv","tlshash":"ae42c8c8b170f4b8079716a6002f2607f378292988add0d4b266d9f57ef5859473bf3a","first_seen":"2026-06-03T20:50:18.964564Z","last_seen":"2026-06-04T07:59:55.406736Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/AppLogsAPI-DrU1nq2m.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/AppLogsAPI-DrU1nq2m.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 277\r\naccept-ranges: bytes\r\nage: 1\r\ncontent-encoding: br\r\netag: \"c089b08a4d7eabf1588117f837aa4e9a\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: be56f585-92fd-45d9\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a062041efbdf56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":451,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (450)","md5":"bfed823b4061de2edc21569857e4024e","sha1":"cdb3a66235afc00ec656781cc757de9182e0b5f0","sha256":"191d457731f689b3140d40caa222c56b44c0c867729b9967fcf0763c27286508","sha512":"1a569a669ef86b3b8f80e05fc4be642ab8be471023774130c4b2d64fdb8b0ccca02d713c159c0840e6cb2ebc42f180f00761afefc4be465bc91b8872c89bb33a","ssdeep":"","tlshash":"70f0dc602daaf238967048f2ac528203e1ab2de1774da09c5c190dc2f13c903793cb71","first_seen":"2026-06-03T20:50:18.970811Z","last_seen":"2026-06-04T07:59:55.391556Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/domainValidation-C2COoIZ_.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/domainValidation-C2COoIZ_.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 217\r\naccept-ranges: bytes\r\nage: 1\r\ncontent-encoding: br\r\netag: \"50d953a7a2aed87428938d37b9f6c86e\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 7ebb0fc9-2a56-48f3\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a062041efbe156bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (340)","md5":"35f0990e3597e2ade2526d6371538d22","sha1":"2e6928b2abb134f20ba908f560b8cbb491633096","sha256":"426dec343c3762e6903518ea8ce528ccfef30ef3221e1f381b764b56c5ed315c","sha512":"4a5371d7139e2fdfb69351739da9b2a359f780854d1a16ef68282bb6423aebc0fb9e5aa6428eca0fda7d0887aa8d65d86ae566fddfea91f641fa1a4b34585f93","ssdeep":"","tlshash":"f4e020f0f8e7508055f2067c027af500f15d1d5628894405c69a5dd4bc2e9b9fa3b965","first_seen":"2026-03-17T23:41:19.409137Z","last_seen":"2026-06-16T14:41:14.860624Z","times_seen":336,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"media.base44.com/images/public/69fb2bff4d68e1e0cfca6597/c8b680072_logo.png","fqdn":"media.base44.com","domain":"base44.com","tld":"com"},"ip":{"addr":"54.240.174.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:24.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.base44.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 11:05:13 GMT","end":"Sun, 30 Aug 2026 11:05:12 GMT"},"fingerprint":{"sha1":"36:F3:D8:2D:85:44:22:7F:64:FB:FB:67:08:B7:CE:2E:81:A2:AF:E0","sha256":"5B:84:8B:A2:CD:80:15:38:34:82:34:69:DF:A5:60:95:64:96:C3:71:37:A7:71:BB:47:10:DB:8C:52:84:D4:DC"}}},"request":{"raw":"GET /images/public/69fb2bff4d68e1e0cfca6597/c8b680072_logo.png HTTP/1.1\r\nHost: media.base44.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 749316\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-7f66b449c6-6248v\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/3EN7LdyLzFtISJx2iTUV3LVNxDX\r\ndate: Thu, 28 May 2026 22:25:18 GMT\r\nvia: 1.1 google, 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nage: 517386\r\nx-amz-cf-id: P-9FHoofU8J-x-ZNo-vbMi7utMldeAOtCRPiuPvUQjnazpTurUNxTw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":749316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"e46073206994645956759ef43a5267d5","sha1":"ded9251e6b7713b24e1599c979792bce6b9584f0","sha256":"bf8f9736dbcd19a19ea07fecd0504cdbb3b57190438c3790e9415eed6550e41a","sha512":"0a5c6ef5be12cdb8152f9d86486a8d9b628438e554312fb5eef753e2cf334b2bfb9262a3a66f611b73ac31e9eb04a2aa364c485bf44189cadd03664f136521fc","ssdeep":"12288:En9gcpuak8ObLeAZfseDGL1dmB4e0fGXjP5zU8dya7H6auVDhicLZ1eNAYtA:y9gcpu38ObwmB4e0cLNdyaj6vVDAvBK","tlshash":"5af4231761ce51e3f11bba7ab251ef608d3675e328a5ac4849949f2cbbc12c1b50ef1c","first_seen":"2026-06-03T22:09:07.468597Z","last_seen":"2026-06-03T22:09:07.468597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/api/frontend-config.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:19.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /api/frontend-config.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:20 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 547\r\ncache-control: no-cache, no-store, must-revalidate\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 02e1c764-5003-4b27\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\ncf-ray: a062040beac356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":957,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (957), with no line terminators","md5":"ef24735d02637a70f5c7f6dd7c5f14aa","sha1":"3211400862afb4a489989a12b56388b2d749d6ee","sha256":"e178842a47fa6ba60751d763277bb3d200cf373a206974f740dd3a52ea48063f","sha512":"1a849768c2b90cc9a93844197c0689b99cdcfe52c8c45b8a1793359fb67a1f32694886df80df5e4ceea02225e099b14054dce7cb18589ae7bcbe78be32a587ab","ssdeep":"","tlshash":"c711dc7b27807513874109ea2891362ca62f180d09a8cae4d481d9a9fd5edb43d022ee","first_seen":"2026-06-03T22:09:07.470825Z","last_seen":"2026-06-04T03:02:52.236035Z","times_seen":2,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/vendor-data-BB79dn4K.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:20.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/vendor-data-BB79dn4K.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/index-DTWORgjS.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\netag: \"d461b3778c1d9cbba182aa1f939aa76e\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: dc49fc08-bf98-4978\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a0620412384056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145877,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33397)","md5":"4b211781ba78bc5db995f0faa0e872c5","sha1":"89c597ea00f8be44056e0290a1691a30c165fbf7","sha256":"3bac9079feef13f35fa73feb5f39344cb51186a2ed28059aece6e8d75bae7888","sha512":"216d41eb8766f2ab5e1bb4498ae90e060081d88a84d2e6e2e8fa5912d7800940175351963f4d59b166256faf735b4b2e780653b366f4455938bbb6cbe542e80d","ssdeep":"3072:/qO70WdLAXjUuGvEgCTM2W/G40XQsVufyNvW1wv5F8W1DoFt:/R70WdLAXjacZTAG40gsVMyNvW1wv5Fg","tlshash":"cde319c83257a0161bf655e4907e0103e2697e19700e80a8f4ad9eea7eadd06f377f34","first_seen":"2026-06-03T20:50:19.002113Z","last_seen":"2026-06-04T07:59:55.389608Z","times_seen":5,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/ErrorLoadingApp-6nLA3Jwr.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/ErrorLoadingApp-6nLA3Jwr.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\netag: \"13057693d72e8a4c2abc05e117fd24b1\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 7f9f4af6-ba73-4e69\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204167c3256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1893129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35215)","md5":"ca628c2db846bdc6a0d71968b7657541","sha1":"8fea3160d3b8e5bc5bb1e44245550fe2cc9d4412","sha256":"0e102185ad1029ebc512127bb2e3767e4e1711e2a5712b63d1a7e544d1ad64e2","sha512":"1345662a74858803d5ae559471b1cc7315af8f2dcc3a9da0577d8ae1a0365b6e7c694ea14af14bd6c0800c512c78f5c85c78dd94ab36d7957a3946225ed06584","ssdeep":"12288:St8p9Ub84PvchPK7X9HwQpvdIXXSVCeazAmvh8k8uDy:W8p2b8y9HZvdISVCeazJ58kvDy","tlshash":"b52507d931d678b146c791e6007b4006f73968557048849cfb6cdaebbe2ac4aa03bf7d","first_seen":"2026-06-03T20:50:18.979827Z","last_seen":"2026-06-04T07:59:55.369986Z","times_seen":5,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"media.base44.com/images/public/69fb2bff4d68e1e0cfca6597/c8b680072_logo.png","fqdn":"media.base44.com","domain":"base44.com","tld":"com"},"ip":{"addr":"54.240.174.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.base44.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 11:05:13 GMT","end":"Sun, 30 Aug 2026 11:05:12 GMT"},"fingerprint":{"sha1":"36:F3:D8:2D:85:44:22:7F:64:FB:FB:67:08:B7:CE:2E:81:A2:AF:E0","sha256":"5B:84:8B:A2:CD:80:15:38:34:82:34:69:DF:A5:60:95:64:96:C3:71:37:A7:71:BB:47:10:DB:8C:52:84:D4:DC"}}},"request":{"raw":"GET /images/public/69fb2bff4d68e1e0cfca6597/c8b680072_logo.png HTTP/1.1\r\nHost: media.base44.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 749316\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-7f66b449c6-6248v\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/3EN7LdyLzFtISJx2iTUV3LVNxDX\r\ndate: Thu, 28 May 2026 22:25:18 GMT\r\nvia: 1.1 google, 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: yWWf92dWn3XZrQ25mrJuzhq3_tXN0bhC9DnCfSBZkqj5piZpKsU96w==\r\nage: 517384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":749316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"e46073206994645956759ef43a5267d5","sha1":"ded9251e6b7713b24e1599c979792bce6b9584f0","sha256":"bf8f9736dbcd19a19ea07fecd0504cdbb3b57190438c3790e9415eed6550e41a","sha512":"0a5c6ef5be12cdb8152f9d86486a8d9b628438e554312fb5eef753e2cf334b2bfb9262a3a66f611b73ac31e9eb04a2aa364c485bf44189cadd03664f136521fc","ssdeep":"12288:En9gcpuak8ObLeAZfseDGL1dmB4e0fGXjP5zU8dya7H6auVDhicLZ1eNAYtA:y9gcpu38ObwmB4e0cLNdyaj6vVDAvBK","tlshash":"5af4231761ce51e3f11bba7ab251ef608d3675e328a5ac4849949f2cbbc12c1b50ef1c","first_seen":"2026-06-03T22:09:07.468597Z","last_seen":"2026-06-03T22:09:07.468597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":53,"connect":1,"send":0,"wait":63,"receive":81,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/index-WTkNG_a6.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/index-WTkNG_a6.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 579\r\naccept-ranges: bytes\r\nage: 1\r\ncontent-encoding: br\r\netag: \"e87ff4e907138c8e38314f2962e66a3c\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 74586ca3-a03e-49ab\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a062041efbe356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1097,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1096)","md5":"38a1e0cbe6193a8432fbf807d394dc6a","sha1":"fa986b61e40b874c41c81d92a796d32bd9dc063a","sha256":"3dfcdd0a44f67b0462a99bcac1f597a19417f32d09a572dc26e667564a92cdd3","sha512":"d45d0f702deb7bd443e5248747a57edf725b8bb672ab25405f633e6a17b83f3ce5d26ce14e3145db0b17155962ff19e3a5524247cbcf455231e9b20f32f8be39","ssdeep":"","tlshash":"1b1100493052629963320dccc627325f66583f94781f6bc4d4249521ba38e32e22bae0","first_seen":"2026-06-03T20:50:18.976402Z","last_seen":"2026-06-04T07:59:55.366758Z","times_seen":5,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"52.84.50.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Ffancy-ledger-quest-pro.com%2Flogin\u0026title=login%20%7C%20LedgerLegends\u0026referrer=\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","date":"2026-06-03T22:08:25.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 08 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:95:51:E5:EA:A2:1E:EE:DF:81:B3:8D:82:70:7A:EA:7B:B4:77:E1","sha256":"A7:DF:84:45:CD:E6:7C:41:4C:DC:A4:5A:2A:7D:BC:E2:A2:57:CA:14:BE:C6:11:DC:31:EB:0A:CD:FA:C2:42:CB"}}},"request":{"raw":"GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 526\r\nx-amz-cf-pop: OSL50-P3\r\nlast-modified: Fri, 29 May 2026 20:13:27 GMT\r\naccept-ranges: bytes\r\nserver: Cloudfront\r\ndate: Wed, 03 Jun 2026 21:20:40 GMT\r\ncache-control: max-age=31536000\r\netag: \"d96c709017743c0759cf3853d1806ba5\"\r\nvary: Accept-Encoding\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2866\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: AB1ma2s3OYQ9PcVzwwaSBz3wdKiUjMZrf40C5LNMj9q4HTKOZSt94g==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":526,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (526), with no line terminators","md5":"d96c709017743c0759cf3853d1806ba5","sha1":"72e21587610c49c8305a55e71f73fa88ed618205","sha256":"ba2338aa6670580269c762f51c4291daef913201aa8f4d4fd166c1a878262652","sha512":"974e260ed8bd1d99628fc3248f07179f6ea228e37a6b9d3ef906dba57571f2df54d73f93d1f3460902d28a90bd4793bca35477b2ef8fbf424b9112147f04bccf","ssdeep":"","tlshash":"13f0507a75620d7c819e844173df7b00767bd86944057e01865da8c4b760dcbe257bc9","first_seen":"2023-03-07T01:03:26Z","last_seen":"2026-08-11T07:51:21.12786Z","times_seen":131719,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/login","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-03T22:08:19.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1729\r\ncontent-encoding: br\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 469bf5ea-ee4e-43a2\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a06204090def49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5423,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d815e5125875bcc08d1d64c8ac139062","sha1":"ca9c94b239168840487fb28cde78e034a85fac87","sha256":"ba26454fd121fccd222bfd5190332a0323d943a0404d1964516b20fa17274be7","sha512":"84b04cac41c5264b21f9b79909df45e459a8958a802db55bb2dcd8aa000345b267d13ee4d199ed3b323301fd21d8068d8bca4670ce0c954b7a15b3bc0330c423","ssdeep":"96:XJa6iaCCpBtu8SJXyT00X/iS/zQ01S4jyVViCNxn:XJa6iaCEqZyAu/dOFxn","tlshash":"7cb165d6ec944003929106199de6fc1af31bec9ac14ce814f0dc9a984fc5fe099b7add","first_seen":"2026-06-03T22:09:07.473769Z","last_seen":"2026-06-03T22:09:07.473769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/webviewDetection-BGkn8C8u.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/webviewDetection-BGkn8C8u.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 389\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\netag: \"a496a7226e3497bb04fa2be56c25fea3\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 9d7a90f1-11aa-47b4\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204167c3356bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":667,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (666)","md5":"b2742d8178ecf8ea53a731e342a31497","sha1":"12418dd31bb2eb86f2f23b120cc60bdfe9d9e521","sha256":"2f1d61e1c24e8cfef698191a4570ed5ca4201923a6758a294517ae5bece5716f","sha512":"587b8fafddc48fac2c20db3a2aa79b94f910ebbdec87ebf1fbb1daf27c3588e97073627aed64864f8339da4d43ff47292253979b5174bb6b3beb30713a2dbfb7","ssdeep":"","tlshash":"3401d3e8499b301e577a9c11217b3811d876421dbc2f4dc1e1df2d69013a1e1533afa6","first_seen":"2026-03-17T23:41:19.417803Z","last_seen":"2026-06-16T14:41:14.904213Z","times_seen":336,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/ComposedChart-D6nY0Mzy.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/ComposedChart-D6nY0Mzy.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3944\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\netag: \"9ea6ad0085f97b52b5c69fc1f484687c\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 52da0f7d-0d16-44e5\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204167c3556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12124,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12123)","md5":"4c5bdfccf5d3a48737c4699d4bed4e3f","sha1":"e2de9b07740f976644f76219342433b1b7ccff98","sha256":"df1ca4982521297717ed65013e7b63588fb318fbe762eb7e26326df129e9cbca","sha512":"33ff84202e90aa3943ececee34fb12c4f0eea8905e70eadbbda7ac7e372dc4394a9d4d7addb34e2920fa010d2061911b2812e62ce9149be0a56a0a07a2e360c6","ssdeep":"192:JVhqaU8Cb6UC86UErfGxwgWoZj+RZrE3J9sGlrG3IpwLPtiG:J/VU8VrfGqR0PsGrG3I2LPtv","tlshash":"ae42c8c8b170f4b8079716a6002f2607f378292988add0d4b266d9f57ef5859473bf3a","first_seen":"2026-06-03T20:50:18.964564Z","last_seen":"2026-06-04T07:59:55.406736Z","times_seen":5,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/AppLogsAPI-DrU1nq2m.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/AppLogsAPI-DrU1nq2m.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 277\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\netag: \"c089b08a4d7eabf1588117f837aa4e9a\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: be56f585-92fd-45d9\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204168c4256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":451,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (450)","md5":"bfed823b4061de2edc21569857e4024e","sha1":"cdb3a66235afc00ec656781cc757de9182e0b5f0","sha256":"191d457731f689b3140d40caa222c56b44c0c867729b9967fcf0763c27286508","sha512":"1a569a669ef86b3b8f80e05fc4be642ab8be471023774130c4b2d64fdb8b0ccca02d713c159c0840e6cb2ebc42f180f00761afefc4be465bc91b8872c89bb33a","ssdeep":"","tlshash":"70f0dc602daaf238967048f2ac528203e1ab2de1774da09c5c190dc2f13c903793cb71","first_seen":"2026-06-03T20:50:18.970811Z","last_seen":"2026-06-04T07:59:55.391556Z","times_seen":5,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/index-CRrd9Q5q.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/index-CRrd9Q5q.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/static/UserAppMain-C7VVsosr.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3081\r\naccept-ranges: bytes\r\nage: 1\r\ncontent-encoding: br\r\netag: \"39bdf6277a117ec17ef9b133e581dd0c\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 0c4b1061-6d63-4e8e\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a062041efbde56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7639,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (7638)","md5":"e958fc71a743e0b244e4534f906c657d","sha1":"081163e1b09089cb27d444666a60819f53682ae0","sha256":"0f8ea86736e335e78e48e49d5063a1318bb84ebb19fccf25efe75b6772ae3351","sha512":"f0ba653c80af412fa1fcb7e867f342cc6999a275e096a9f4ba5bb9006b1ffb0cdff430014ab7717b7c585bc50609c0a2b2a15fd32d6f0aa66c6388a3cbe3bdbe","ssdeep":"192:sIukT/GV5dPkMElp6AZu1ZsnghqUwqETHyserW:CkT/GjdsdphZuzsnQ4qETHvZ","tlshash":"44f1d88a7095a0e0d7354dc2c8bfc528ef7a2550340b8590f57e5c59fb37231925fae9","first_seen":"2026-06-03T20:50:18.968047Z","last_seen":"2026-06-04T07:59:55.424437Z","times_seen":5,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/api/apps/public/login-info/by-id/69fb2bff4d68e1e0cfca6597","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:24.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /api/apps/public/login-info/by-id/69fb2bff4d68e1e0cfca6597 HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nX-Origin-URL: https://fancy-ledger-quest-pro.com/login\r\nX-Request-ID: 3a5df4f5-2ad9-4ca7-bd01-509507a4074a\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: mp_eff913a25a5a2642acc7794bb28dc621_mixpanel=%7B%22distinct_id%22%3A%22%24device%3Aa48a6e3f-688e-451c-b5df-7c7ad78af7c9%22%2C%22%24device_id%22%3A%22a48a6e3f-688e-451c-b5df-7c7ad78af7c9%22%2C%22environment%22%3A%22prod%22%2C%22platform%22%3A%22desktop_web%22%2C%22%24initial_referrer%22%3A%22%24direct%22%2C%22%24initial_referring_domain%22%3A%22%24direct%22%2C%22__mps%22%3A%7B%7D%2C%22__mpso%22%3A%7B%22%24initial_referrer%22%3A%22%24direct%22%2C%22%24initial_referring_domain%22%3A%22%24direct%22%7D%2C%22__mpus%22%3A%7B%7D%2C%22__mpa%22%3A%7B%7D%2C%22__mpu%22%3A%7B%7D%2C%22__mpr%22%3A%5B%5D%2C%22__mpap%22%3A%5B%5D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:24 GMT\r\ncontent-type: application/json\r\ncontent-length: 509\r\ncontent-encoding: br\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: d6075048-3840-43e7\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\nx-request-id: 3a5df4f5-2ad9-4ca7-bd01-509507a4074a\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: a06204278b4256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":951,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"896cb550d9497d393dda40034f6ba80c","sha1":"c80d57fcc9333eb7eed74702a3778c21b3c86836","sha256":"169ea69939d8e539e56b4d3c0017bfcf602773e6713ae3d0af3a97f333b76c3e","sha512":"d46f4c3c63b7993d9d49788b1bcf4c317e2facae8a9a324beef4397ef054c1e5d69188653915800c53a391821d393d82b4d6093eb15cc72b5a58e89e778ff68f","ssdeep":"","tlshash":"58112d6fa67ca823e598e590c429bb55262e1c6b2043bc78f6ac412808231f2033bd27","first_seen":"2026-06-03T22:09:07.476046Z","last_seen":"2026-06-03T22:09:07.476046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fancy-ledger-quest-pro.com/","fqdn":"www.fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.251","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-03T22:08:18.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:34 GMT","end":"Wed, 05 Aug 2026 23:17:23 GMT"},"fingerprint":{"sha1":"BA:0C:8F:A5:FC:A8:9C:47:45:DE:CC:06:A8:01:6E:A3:AE:8A:C4:C5","sha256":"B7:6B:2B:7F:44:50:AD:64:1F:76:A0:CA:92:58:65:22:40:21:D4:59:7E:F0:7C:3A:71:B9:9F:C4:4B:2B:F6:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 03 Jun 2026 22:08:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 70\r\nlocation: https://fancy-ledger-quest-pro.com/\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a0620403c9a04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5423,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T07:57:31.65745Z","times_seen":17832625,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":196,"dns":170,"connect":1,"send":0,"wait":184,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"www.fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"www.fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/progress-xJrtvfyf.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:21.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/progress-xJrtvfyf.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 379\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\netag: \"000ddc514eb3e1abc961703e3d86d29a\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: b3e4e070-5359-411a\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: MISS\r\ncf-ray: a06204167c3b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":581,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (580)","md5":"af7406deca2b28098df2be215ca7747e","sha1":"2c712918990f8eae1ab97838a5f0208e74bce4cf","sha256":"48371e6d86c9e591bc9450e29a42cace8571ea9f436c84bec7160b6c4461e3e3","sha512":"96efe48ed42f81a7397bf6dac41584ae63031755762f211593b26158ec89d6d8a5efdca0649d54c006e37613f48476750dfdc4929ef08841d5675f39a3fcbbf0","ssdeep":"","tlshash":"1ef0e19d656047f5151f488dc0caa60791584ba133fdcdc6f53c5119131408b125e6c1","first_seen":"2026-06-03T20:50:18.987739Z","last_seen":"2026-06-04T07:59:55.382265Z","times_seen":5,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"media.base44.com/images/public/69fb2bff4d68e1e0cfca6597/c8b680072_logo.png","fqdn":"media.base44.com","domain":"base44.com","tld":"com"},"ip":{"addr":"54.240.174.127","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:22.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.base44.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 11:05:13 GMT","end":"Sun, 30 Aug 2026 11:05:12 GMT"},"fingerprint":{"sha1":"36:F3:D8:2D:85:44:22:7F:64:FB:FB:67:08:B7:CE:2E:81:A2:AF:E0","sha256":"5B:84:8B:A2:CD:80:15:38:34:82:34:69:DF:A5:60:95:64:96:C3:71:37:A7:71:BB:47:10:DB:8C:52:84:D4:DC"}}},"request":{"raw":"GET /images/public/69fb2bff4d68e1e0cfca6597/c8b680072_logo.png HTTP/1.1\r\nHost: media.base44.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 749316\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-7f66b449c6-6248v\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/3EN7LdyLzFtISJx2iTUV3LVNxDX\r\ndate: Thu, 28 May 2026 22:25:18 GMT\r\nvia: 1.1 google, 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 8JnUEGLTi8PGVXroEEHfyjRZEkRtIEBkPmS6dyz_359jXjyMH6cthw==\r\nage: 517384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":749316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"e46073206994645956759ef43a5267d5","sha1":"ded9251e6b7713b24e1599c979792bce6b9584f0","sha256":"bf8f9736dbcd19a19ea07fecd0504cdbb3b57190438c3790e9415eed6550e41a","sha512":"0a5c6ef5be12cdb8152f9d86486a8d9b628438e554312fb5eef753e2cf334b2bfb9262a3a66f611b73ac31e9eb04a2aa364c485bf44189cadd03664f136521fc","ssdeep":"12288:En9gcpuak8ObLeAZfseDGL1dmB4e0fGXjP5zU8dya7H6auVDhicLZ1eNAYtA:y9gcpu38ObwmB4e0cLNdyaj6vVDAvBK","tlshash":"5af4231761ce51e3f11bba7ab251ef608d3675e328a5ac4849949f2cbbc12c1b50ef1c","first_seen":"2026-06-03T22:09:07.468597Z","last_seen":"2026-06-03T22:09:07.468597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":52,"connect":0,"send":0,"wait":64,"receive":97,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.stripe.com/v3","fqdn":"js.stripe.com","domain":"stripe.com","tld":"com"},"ip":{"addr":"52.84.50.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:23.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 08 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:95:51:E5:EA:A2:1E:EE:DF:81:B3:8D:82:70:7A:EA:7B:B4:77:E1","sha256":"A7:DF:84:45:CD:E6:7C:41:4C:DC:A4:5A:2A:7D:BC:E2:A2:57:CA:14:BE:C6:11:DC:31:EB:0A:CD:FA:C2:42:CB"}}},"request":{"raw":"GET /v3 HTTP/1.1\r\nHost: js.stripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 03 Jun 2026 21:03:32 GMT\r\nserver: Cloudfront\r\ncontent-encoding: br\r\ndate: Wed, 03 Jun 2026 22:07:16 GMT\r\ncache-control: max-age=120\r\netag: W/\"7506bb45463c4b94da31e036a49bcab5\"\r\nvary: Accept-Encoding\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 68\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 0FROv_a3xPa_rGcTkm4j3kaJidIDGGgMOCaUPwLAo3Ss3NqPI7ty5Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1020597,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7506bb45463c4b94da31e036a49bcab5","sha1":"0d4deb3b2d93055ee1e582dfd785674094ff6a67","sha256":"dcc5c20fb4c75b87cc6da8c943f5a619f051142833f7336a369a2c18654c9d6b","sha512":"c27dc9c358151990ed18350a8ad8df7d05448b601bf10b8474a117561cd3c7d00e8c6323462631bd6deff0b43678aafb4d81d52e40f23e584fa036f907329057","ssdeep":"24576:URh68mE1WaO93SFAPqqqKBiQm8iq0zfhazk:URh6JE1xFA3BiQm8iq0zfok","tlshash":"ab25299db69b703103db756aa13b610eb33a6900250d4010f695dedc2ebee9be533b5c","first_seen":"2026-06-03T21:06:35.114123Z","last_seen":"2026-06-04T18:07:00.187329Z","times_seen":547,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":119,"dns":109,"connect":1,"send":0,"wait":3,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.stripe.network/inner.html#url=https%3A%2F%2Ffancy-ledger-quest-pro.com%2Flogin\u0026title=login%20%7C%20LedgerLegends\u0026referrer=\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","fqdn":"m.stripe.network","domain":"stripe.network","tld":"network"},"ip":{"addr":"52.84.50.15","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Ffancy-ledger-quest-pro.com%2Flogin\u0026title=login%20%7C%20LedgerLegends\u0026referrer=\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","date":"2026-06-03T22:08:25.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 08 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:95:51:E5:EA:A2:1E:EE:DF:81:B3:8D:82:70:7A:EA:7B:B4:77:E1","sha256":"A7:DF:84:45:CD:E6:7C:41:4C:DC:A4:5A:2A:7D:BC:E2:A2:57:CA:14:BE:C6:11:DC:31:EB:0A:CD:FA:C2:42:CB"}}},"request":{"raw":"GET /inner.html HTTP/1.1\r\nHost: m.stripe.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://js.stripe.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 930\r\nlast-modified: Wed, 10 Sep 2025 21:05:01 GMT\r\naccept-ranges: bytes\r\nserver: Cloudfront\r\ndate: Wed, 03 Jun 2026 22:05:04 GMT\r\ncache-control: max-age=300, public\r\netag: \"441070f07f0e89a26ecd81c9afcab8ed\"\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 202\r\ncontent-security-policy: base-uri 'none'; connect-src https://m.stripe.network https://m.stripe.com; default-src 'none'; font-src https://m.stripe.network https://fonts.gstatic.com; form-action 'none'; frame-src https://m.stripe.network https://js.stripe.com; img-src https://m.stripe.network https://m.stripe.com https://b.stripecdn.com; script-src https://m.stripe.network 'sha256-e357n1PxCJ8d03/QCSKaHFmHF1JADyvSHdSfshxM494=' 'sha256-5DA+a07wxWmEka9IdoWjSPVHb17Cp5284/lJzfbl8KA=' 'sha256-/5Guo2nzv5n/w6ukZpOBZOtTJBJPSkJ6mhHpnBgm3Ls='; style-src https://m.stripe.network; report-uri https://q.stripe.com/csp-report\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: NZn6oLOyCv6MdNYOLH3dk1iIcH3UcImdv2waFvubNIQKtV0E2PoRfA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":930,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (930), with no line terminators","md5":"441070f07f0e89a26ecd81c9afcab8ed","sha1":"4fe0f929d48c96ee4e78a1f0ce331eda37edfc60","sha256":"92844e6b1ad5890a9e5e4b9dfb7abdb37dca64e8ca7365052c9d2fc8103c349d","sha512":"464029faf1c59e1f8c6f82c4f0bce314a98b0f3574f764ec067d4bd8cbe6d2016b83357bf242df348f1fb6173485372c2cc9601bc65ca1c99d57809c79cefb27","ssdeep":"","tlshash":"db11049639c85a3442394712a6abb309321657275874ec108406dca87fb4c9bd8637c2","first_seen":"2025-09-10T21:19:46.090509Z","last_seen":"2026-08-11T07:51:21.169178Z","times_seen":110100,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":91,"dns":75,"connect":3,"send":0,"wait":6,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.stripe.network/out-4.5.45.js","fqdn":"m.stripe.network","domain":"stripe.network","tld":"network"},"ip":{"addr":"52.84.50.15","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.stripe.network/inner.html#url=https%3A%2F%2Ffancy-ledger-quest-pro.com%2Flogin\u0026title=login%20%7C%20LedgerLegends\u0026referrer=\u0026muid=NA\u0026sid=NA\u0026version=6\u0026preview=false\u0026__shared_params__[version]=v3","date":"2026-06-03T22:08:25.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.stripecdn.com","organization":"Stripe, Inc"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 08 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9A:95:51:E5:EA:A2:1E:EE:DF:81:B3:8D:82:70:7A:EA:7B:B4:77:E1","sha256":"A7:DF:84:45:CD:E6:7C:41:4C:DC:A4:5A:2A:7D:BC:E2:A2:57:CA:14:BE:C6:11:DC:31:EB:0A:CD:FA:C2:42:CB"}}},"request":{"raw":"GET /out-4.5.45.js HTTP/1.1\r\nHost: m.stripe.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.stripe.network/inner.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nlast-modified: Wed, 10 Sep 2025 21:05:01 GMT\r\nserver: Cloudfront\r\ncontent-encoding: gzip\r\ndate: Wed, 03 Jun 2026 22:03:54 GMT\r\ncache-control: max-age=300, public\r\netag: W/\"f4d61b273ea36d2e71ce1a601ab0caa2\"\r\nvary: Accept-Encoding, Origin\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 271\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: vZ4r0juWsu8xYg-ODjBbmIBnaFpVhFPypeJwYubW5q_Wn7TFVKTOFQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":88737,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"f4d61b273ea36d2e71ce1a601ab0caa2","sha1":"832e652c884863f3a56a13a6a0a43fd56b5e2c85","sha256":"f2a8a36c74c59cfbe7a73d441cfd180ca6e6a9942a74ef9b240191d1c6056a59","sha512":"fe3c3e033551f745e0a8528d0afc239baf3b1045a0442aff9483a8b796ce332310de2230b6803483bd64d7cc6a0a3f420f12b95651822f7ef7687ff311845391","ssdeep":"1536:2sHx8vawlWXGzbS1iSc6q1jboAmKum7EqI47d+/:2sHx8vzWX8O1iSg1jboAmKum7Eq3p+/","tlshash":"608353c97aa6f45942f368ba802f610bf23f9d15044da041f6a1d8e17c791ed8273f6e","first_seen":"2025-09-10T21:19:46.014301Z","last_seen":"2026-08-11T07:51:21.148322Z","times_seen":110461,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-03T22:08:18.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 03 Jun 2026 22:08:19 GMT\r\ncontent-length: 0\r\nlocation: /login\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 45a0a41f-702d-49f8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a06204058f0549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5423,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T07:57:31.65745Z","times_seen":17832625,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":86,"dns":64,"connect":1,"send":0,"wait":556,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fancy-ledger-quest-pro.com/static/index-DTWORgjS.js","fqdn":"fancy-ledger-quest-pro.com","domain":"fancy-ledger-quest-pro.com","tld":"com"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fancy-ledger-quest-pro.com/login","date":"2026-06-03T22:08:19.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fancy-ledger-quest-pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 22:17:31 GMT","end":"Wed, 05 Aug 2026 23:17:29 GMT"},"fingerprint":{"sha1":"FC:19:71:C5:EC:00:F8:2A:EF:06:01:5C:1E:6A:9D:30:EB:03:06:35","sha256":"4F:E4:EA:EC:B5:2F:79:1E:6D:01:97:D6:FE:A5:98:29:25:9A:46:4D:5C:5C:76:7A:35:1F:9A:AB:53:21:39:3F"}}},"request":{"raw":"GET /static/index-DTWORgjS.js HTTP/1.1\r\nHost: fancy-ledger-quest-pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fancy-ledger-quest-pro.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 22:08:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\netag: \"2e9420e82744ab49d592701fbf143b1a\"\r\nlast-modified: Wed, 03 Jun 2026 19:59:25 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nrndr-id: 137ca853-2af5-494a\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-render-origin-server: uvicorn\r\ncf-cache-status: HIT\r\ncf-ray: a062040beac556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4025198,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63732)","md5":"b39ce69d3156f108bdd9d901727a16ef","sha1":"c2485dc06268599f7ac92d3586056687609e01da","sha256":"c862af0cb6bf1d024d3c42a97beee351b779526bbe3b703ebdee8dfa2519b2a3","sha512":"d89ecdce9b46e9c9d508819ec7eb9e14f73d14468a9c5d285b680409b281b0863f3a373a1a39c0899732a2450d8197b99403867793321afa75c3b9d3337a1ed1","ssdeep":"24576:7FfnCCBY+T/PuXxYhAyrQapaEda9f1ruOZW3pLD/mqBd:7FfJY+DGxYhbrQapAxDZ+LD+4","tlshash":"f3256c1b9d51663d0fd353a73985a95a77b8822a93c14421dcddc03e02a8be6d23f7f8","first_seen":"2026-06-03T22:09:07.480891Z","last_seen":"2026-06-04T07:43:56.620709Z","times_seen":3,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":529,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"fancy-ledger-quest-pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}