{"report_id":"a8f9272b-99eb-4893-ab3a-a03ab75375f6","version":6,"status":"done","tags":[],"date":"2026-04-22T13:14:11Z","url":{"schema":"http","addr":"qfsledger-vault.org","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":0,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"qfsledger-vault.org/","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"title":"QFS Ledger","dom":{"size":3101,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3094), with no line terminators","md5":"588da2f924ed271bb31289ed477a3e22","sha1":"79d16908dde44cbc7dc3e669aa3f3e7e6a179746","sha256":"593de0dd86f7a0e6fbaf3832d038526b5fa47ae4daddab69369f5c60551dae76","sha512":"abcd347698d36f23ee3fcdc65ec2df8c65ab647ddd7e094d573bc85dd73fa7eb5cfee34f7a975a18bff14ec9688a4fb8822da7769efac0f8ada1958e96c63647","ssdeep":"","tlshash":"385133a1609c501b9513d5d0f9a23aeef4cd000cc77169d07e2c36ef96dadb7189716d","dom_hash":"domhashe267eb60b27890093658a64c7f1c1597","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"qfsledger-vault.org","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":0,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T13:14:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"qfsledger-vault.org","ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":29,"request_count":29,"received_data":4217156,"sent_data":13997,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-04-19T22:43:20.40257Z","alert_count":0,"request_count":3,"received_data":25238,"sent_data":1550,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-04-20T11:05:03.521561Z","alert_count":0,"request_count":3,"received_data":421059,"sent_data":1604,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-04-20T14:32:28.508056Z","alert_count":0,"request_count":2,"received_data":83405,"sent_data":872,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":1,"received_data":7085,"sent_data":431,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/jquery.countTo.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"acad36d38da9f68c52bb074b2c478d0f","sha1":"922c71c5699f9306a415a7a344be46d92e0fc4a1","sha256":"00619814b3b256720a9ffd9408397d0ffe5559ff301d608eb66f585343fd83a2","sha512":"5be7c4d8f9e001a527d75e1fa0eb63edb24d0eaaea00d2ca8c66fa832cf5e7d868175f8d9c45917e042d1299f79022e3425510fc50214ec9a6a9034ec7f4413b","ssdeep":"","tlshash":"46716d49bbef2111956b20dd5f5f114c3234932b144b8548799d93c08fa6839e6eafbc","size":3761,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-25T08:01:59.416808Z","times_seen":1182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/jquery.magnific-popup.min.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-25T12:11:07.542968Z","times_seen":64546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/swiper.min.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc8fea11412de3b1121523646d6deaa0","sha1":"e4bfebe4ebe81ffa9b3a0327e394a2b56c31212b","sha256":"1d4e3bb31709133dc074100cc35058e04150965a1e049ee5bc7fa4986ebcb0b2","sha512":"44fddfceb1ff271429803b3d3e991710bc354355226fd7066db6bc58b8245b97941c1e9dbb862a20329a5bf039d23641ecd803fbeeac8cecabe2a90df4681f4d","ssdeep":"1536:Fj2qhgxfeuGMfo3i2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgn:wxoz6desFshaKi+HgZsUOUTqiqMT7EO","tlshash":"07d3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","size":139264,"data":"","first_seen":"2026-04-22T13:14:20.164041Z","last_seen":"2026-04-22T13:38:19.305066Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/onyx.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebc8660d596d9dc50ee2f76de0a87d49","sha1":"80dc89e61a0da06fb470716e32d6df036faf4931","sha256":"2e8407e7a55fa7b505d07ead0610cad3a387f2a6c5de0120d57410bc6ad48965","sha512":"12a06022db26b278e6c589fc463091f8ede81f27e64fa938ef09b28bab306a82d0b74b95115acfc963eeb3c0b15c45004179c30f7ff11c1220bf252215f5217c","ssdeep":"192:2QZVrIOl+dlD9+ut6d2QyJClf4Q2yjG4znX:zMOYQllbX","tlshash":"66829908fcb1495308bbf47a0b7fa600ea544007cb8ded15b91e97985f4462db4be7da","size":17603,"data":"","first_seen":"2023-03-14T09:06:45Z","last_seen":"2026-05-25T08:01:59.412065Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=AAAAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfol5EDAVBAUZnl22NrPpbX8UFAXxw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd3e5e88f56e2223d9ef3dc30817863f","sha1":"080ad8c078433403b83c284a02d2e95c22ec7ba6","sha256":"4be943c66cdfd8c2fa8c3570f14629e556bfa6e01afc413275d0440e3be97ddf","sha512":"8fa361b5ec195581ab7b7a2d52be9901fba9da0939063c36878180193414e26ff1bc86231176ffb68c31dde5b90a91ee7def81ac5ef7dfc00826de6b7a13670b","ssdeep":"3072:XJNmEj9es4bkvJ3NnvRx3kSzACvVcUJjNMByu3NFpFH4dzr+FnbTGssAEElTsF:ZrI0JSXYdzknbTGjn","tlshash":"4494e9d9b26274629266fca0a47f00c7b53dac57a4884c6cb249dcd62df090952b3f7f","size":419116,"data":"","first_seen":"2026-04-21T18:59:47.631327Z","last_seen":"2026-04-27T18:37:50.680091Z","times_seen":948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#153","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-05-25T09:19:34.069458Z","times_seen":35195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f1d3d36dc74f7a371b24c7da7000753","sha1":"032e1846ea5d310eab66e8b477ac223131c0dcbc","sha256":"cf9d15c432e24f6f84af1eaf24b6827be11091a22c83412a6f389c68a221fdee","sha512":"019797c4041e57f73e41ebefbb0600a711c21597467b26cdb879acf69b92bb6a33868daf8a1ca640553c21ab075e12a42ca94aeaf147abb3ad9d6eeb4a86fcd9","ssdeep":"","tlshash":"9ed0c917b071444e14a6b02ae7aa69ccb179850b053d1c24778e918b3ff2f9c275d5a8","size":270,"data":"","first_seen":"2026-04-22T13:14:20.176921Z","last_seen":"2026-04-22T13:38:19.329593Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=BBA4/d=1/rs=AN8SPfrvWxNtaBTz3Cqj0GGAYEmdZ0Lg_Q/m=el_conf","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8919f1d279de9963f6b4b371b1c75c5f","sha1":"587bf8f33a8dc2111aca4da66b95ca3097108694","sha256":"4b02b53222922fccb3ca167a3ddb0783205562ee7f6361eb58c8552cdb7f0217","sha512":"dc681aba0b8c0c958cdc8f31dc1541cd2fe88cba7fac4a0136973665aaecc9a5dffcef187d3d751506d3f5206f1a3e8167a1d77a69a77cf180a9acf1ae1da94a","ssdeep":"1536:XNzri7CtoSq2LILZLUGtYirKrhm3oQQ4CuPKucbRrWKiBwNWmF:X9tILcirKrhQCKKicF","tlshash":"0c83c8c8b6a674a59353b5b5513f000eb23f589df8084dacb288d8f2adb5948413bf7d","size":80955,"data":"","first_seen":"2026-04-22T13:14:20.160991Z","last_seen":"2026-04-22T13:54:19.799426Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1576da7f57935199d4ce3b9e1385566c","sha1":"f77d8c9830f13c9072201d6dd67ca5f0c8e0eb80","sha256":"5be7ec9580abef0966d74b7b97f3494b98445c09966fefc8a6e045b4dcde5767","sha512":"38fe6994530b9846a379e5f0a07d2cebf121de479fdc34ef3c53f49211c0e30eb84b313741062574ceb0d31b37669930f96467a3006d4d00b16d0d4f99abbfc1","ssdeep":"","tlshash":"f3c08c07b030400a0087f109d38254887124810b01390d24324c608a3fb3f8d034d1ac","size":182,"data":"","first_seen":"2023-03-10T20:09:00Z","last_seen":"2026-04-28T10:37:57.946933Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/jquery-3.4.1.min.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"3145668b473d0df4d23f63c312022593","sha1":"6dcba9646a995d5b77573c4babda4ddf8bf9d48d","sha256":"81ada955f3deb0f5f37d627d33e74be4273692a5a9818d327740065550f171a0","sha512":"be6bce4580e54099914a95ce8af7187442cfdea180b889c0e852753b6a6c7f2397a73122a587c702a257575b94b13ef60cf40e285157133220e61adec651ea31","ssdeep":"1536:2TExXUZinxD7oPEZxkMV4SYKFMbRHZ6DVHOHCWrcE5zuu7BRKKKBEqBsojZlOP+a:2gZm0DVHO5WgKKWZyP+HQ47GKe","tlshash":"368318dd72c6b06257b761ba00bf540bf236599e6c4d4410f124e4eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2026-04-22T13:14:20.15792Z","last_seen":"2026-04-22T13:38:19.275057Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/bootstrap.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffcd65b7f48aea5c910ec3000c3f5738","sha1":"28b4677466efbf48907614d4071f20ba0a4f3aba","sha256":"a84fb10d4ac751de74e2d2d603a4215cb4edef1053e5077a680b73b87b6472e9","sha512":"150ff09ff7c7188ff122ff7acf0c679bffdd4c682bb732a11f75141e1f8ed5d1cd371a824fec148476bc61ca72b9f60c4b1b3c77f24eb235cbdc2fc99096e92e","ssdeep":"1536:5XMG/5lzsiLOvFUqZGbVLK/vuOhubEq12NQdYz:759siWFUOvhMEq1rdK","tlshash":"a0d3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","size":131639,"data":"","first_seen":"2025-08-29T18:47:30.341291Z","last_seen":"2026-05-22T05:09:49.44905Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"2377721b193947f7550b2c9da55bc17b","sha1":"e0111961c3a541291e76160eff884c64ec0d3511","sha256":"ff322534742820e4075629c7c9fd791c0baba5d7ac1cb30b1d743da9537704d8","sha512":"00fd2ded89e6b2972acecfc869eb3a5ce3a98d42a660bf3e53f8172f0741db611945d6d345ea69c3b5479243f15db8caa0874baa9cd077dac09eb9a0e8a14324","ssdeep":"","tlshash":"90513fa2605ca01b9513c5d1f8a23eeef4de0058c77269d07e1c29dfeada8b7049716d","size":3011,"data":"","first_seen":"2026-04-21T18:59:47.652149Z","last_seen":"2026-05-11T18:40:08.275282Z","times_seen":1475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/css/main.css","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/css/main.css HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/css; charset=\"utf-8\"\r\ncontent-length: 16893\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-1f91f-gzip\"\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":129311,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4ca91f30fa7b19627e42e4c3502a322e","sha1":"1eabf62f9dd4f8b1b0bbdb9afcba5bff468485f2","sha256":"c9aed0a10c73869dff39aa427dfb9cf9bd2b0b842ae2c3d5c636040d7446adcb","sha512":"0bbd2e849b70310a6d14c06681b5d3a594382e9d3b930a7229e130d72862c6fcbafce100be1337e184bd3303187e42da5e4acd78801975ab0b5488298a4a576e","ssdeep":"3072:YzCR0UTWst6mq11l9q4F5vCMIj82OdpOsTJ6F6xNFumsmho:YzCR0UOmq11l9q4F5vCMIj82OdpOsTJE","tlshash":"5ec39153afea0909301fd1fc3a56aa65f77c58b2824fdeb8bbe930189f415d5403ea44","first_seen":"2026-04-22T13:14:20.155664Z","last_seen":"2026-04-22T13:38:19.31476Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1201,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:52.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 06:40:18 GMT\r\nexpires: Thu, 22 Apr 2027 06:40:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 23614\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-05-25T09:57:47.488839Z","times_seen":47395,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/translate.google.com/translate_a/elementa0d8a0d8a0d8a0d8.html?cb=googleTranslateElementInit","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8a0d8a0d8a0d8.html?cb=googleTranslateElementInit HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1158\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nstatus: 404 Not Found\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T12:41:01.787204Z","times_seen":15690396,"resource_available":true,"data":null}},"time_used":1363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1199,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/jquery-3.4.1.min.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncontent-length: 30673\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Fri, 27 Mar 2026 13:54:21 GMT\r\netag: \"69c68c0d-15851-gzip\"\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"3145668b473d0df4d23f63c312022593","sha1":"6dcba9646a995d5b77573c4babda4ddf8bf9d48d","sha256":"81ada955f3deb0f5f37d627d33e74be4273692a5a9818d327740065550f171a0","sha512":"be6bce4580e54099914a95ce8af7187442cfdea180b889c0e852753b6a6c7f2397a73122a587c702a257575b94b13ef60cf40e285157133220e61adec651ea31","ssdeep":"1536:2TExXUZinxD7oPEZxkMV4SYKFMbRHZ6DVHOHCWrcE5zuu7BRKKKBEqBsojZlOP+a:2gZm0DVHO5WgKKWZyP+HQ47GKe","tlshash":"368318dd72c6b06257b761ba00bf540bf236599e6c4d4410f124e4eabc78a4a823bf7d","first_seen":"2026-04-22T13:14:20.15792Z","last_seen":"2026-04-22T13:38:19.275057Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1015,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:14:02.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nOrigin: https://qfsledger-vault.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://qfsledger-vault.org\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 22 Apr 2026 13:14:02 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T12:41:01.787204Z","times_seen":15690396,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:14:02.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1175\r\nOrigin: https://qfsledger-vault.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1175,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en\",null,\"TE_20260420\",null,null,[4,0]]],1871,[[1776863632727,null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"EE4F0007-932F-4C56-B916-CFA8F570ACFD\\\",[\\\"https://qfsledger-vault.org\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[null,21000000],[null,22000000],[null,70000000],[null,70000000],[null,446000000],[null,251000000],null,[null,696000000],[null,696000000],5266,4867,21931]],[\\\"translate:page_load_to_initialized\\\",[null,696000000],[3,35000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],1776863642729]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://qfsledger-vault.org\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 22 Apr 2026 13:14:02 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-05-25T12:40:44.972885Z","times_seen":543406,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/css24d2f4d2f4d2f.html?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /css24d2f4d2f4d2f.html?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1202\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nstatus: 404 Not Found\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T12:41:01.787204Z","times_seen":15690396,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/logo1.png","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:52.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/logo1.png HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 27480\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-6b58\"\r\nstatus: 200 OK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":27480,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 169 x 186, 8-bit/color RGBA, non-interlaced","md5":"8bf011c87c10d7e5bd983c9182b1478a","sha1":"bdd1ff917cb47c2cc27156139f79c93300be6299","sha256":"62d0560b5e0465c79882db9d9ae4b82e7ffce9fed256d8e11e7c1785fc1ef7df","sha512":"c64f47346b6c827ff920be852b9656e5da3d9e0049357069a28eae7ae9909cb95c56bf09420a247e5c0f2d82439bf0d9ef9c6ea177f076a26e2b3a2a01003cf5","ssdeep":"384:mKnFnt61zgR34qgPlAYMKpDjimjRZwlhcFsGW13YoPihH1CSFHMrkjrO7mgWb6mY:h4Ex4qklIKVjimNZQh2q3YCMVbM6OAbY","tlshash":"29c2e1f75176380c2c44df4ba742d008521edacaffd5d8366a211a5cc63a119f4ebafa","first_seen":"2026-04-22T13:14:20.159633Z","last_seen":"2026-04-22T13:38:19.285189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":613,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:52.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T12:41:01.787204Z","times_seen":15690396,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/css/magnific-popup.css","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/css/magnific-popup.css HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/css; charset=\"utf-8\"\r\ncontent-length: 1816\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-1b27-gzip\"\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":6951,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"30b593b71d7672658f89bfea0ab360c9","sha1":"d6963db6faa9294387bb3175813a61bc3f859437","sha256":"45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e","sha512":"58440dbfd777facab21e3aea519a1b0e11404590e4a36c2959d7dca6fe3896cca9b12b8c3b490719ddcc43caebb019ff41adfd5688e985d53a08c92925498357","ssdeep":"192:hRQ4fS5bzRyIy++mcS3n2s96/LEpeXHFykgxe:Alx3pSFh","tlshash":"a5e11bd39fb22305e525e9a8a657a76973120013e70fcc6bbfd12448df8d7c942a3b85","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-05-25T08:01:59.315399Z","times_seen":25546,"resource_available":true,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":842,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 22 Apr 2026 13:13:49 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-BUCKET=CBk; Domain=.google.com; Expires=Mon, 19-Oct-2026 13:13:49 GMT; Path=/; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80955,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2056)","md5":"8919f1d279de9963f6b4b371b1c75c5f","sha1":"587bf8f33a8dc2111aca4da66b95ca3097108694","sha256":"4b02b53222922fccb3ca167a3ddb0783205562ee7f6361eb58c8552cdb7f0217","sha512":"dc681aba0b8c0c958cdc8f31dc1541cd2fe88cba7fac4a0136973665aaecc9a5dffcef187d3d751506d3f5206f1a3e8167a1d77a69a77cf180a9acf1ae1da94a","ssdeep":"1536:XNzri7CtoSq2LILZLUGtYirKrhm3oQQ4CuPKucbRrWKiBwNWmF:X9tILcirKrhQCKKicF","tlshash":"0c83c8c8b6a674a59353b5b5513f000eb23f589df8084dacb288d8f2adb5948413bf7d","first_seen":"2026-04-22T13:14:20.160991Z","last_seen":"2026-04-22T13:54:19.799426Z","times_seen":8,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":69,"dns":27,"connect":8,"send":0,"wait":27,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/KEYRING-PRO-Iphone-14-floating-1.png","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/KEYRING-PRO-Iphone-14-floating-1.png HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 137310\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Fri, 27 Mar 2026 14:12:12 GMT\r\netag: \"69c6903c-2185e\"\r\nstatus: 200 OK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":137310,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1055 x 1239, 8-bit colormap, non-interlaced","md5":"3ee4b9947beca55c9ea4b61740eaf761","sha1":"af91f94cd1359a57b751f05a1719b9a70e23b42a","sha256":"e254f3ff2e52e680a2fb5f02be34bb873fbe89bcc3ed2aca099eb83bc0830391","sha512":"ce90f21d5d6c600c0ad4c5491c86991c9dcce5ab55f563c8430081e2b6064ba66aabef75148b17e486b6ecf59e436e9c520c43a1fa373c4080eadc3594d67771","ssdeep":"3072:x+MEWL9jewsnh9KpG4zaPnyyvL68/Tz4q4NDZ8fNr1xzqa:xYMjeL2jaPyaLL/34ZRZOOa","tlshash":"9fd31243604fc7e5cabb82fdee2611ae70b9cc4825a8d25df107af43546a87641ce4f6","first_seen":"2026-04-22T13:14:20.162082Z","last_seen":"2026-04-22T13:38:19.301997Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1198,"receive":373,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/menu.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/js/menu.js HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1206\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nstatus: 404 Not Found\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T12:41:01.787204Z","times_seen":15690396,"resource_available":true,"data":null}},"time_used":1014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1014,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/lg.png","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/lg.png HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 2126634\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Fri, 27 Mar 2026 14:31:20 GMT\r\netag: \"69c694b8-20732a\"\r\nstatus: 200 OK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":2126634,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"0988dde5deb6fd3257162a008aa7f806","sha1":"15f22de6609546f8f76adf3cc506806f4f78a53c","sha256":"1c7f9954809f219e7c8c617e760aa44d3a041fa60e9dd2ee7858d1611d0b56a9","sha512":"ccfebab598508a96fdcbd4c19ead64171970070fb9c3d9beee81c43cbb54001497f4d835ffba35a676e3968c72aa40ab41de0d7a998b9190ba6ebe5ada616fb4","ssdeep":"24576:D0v2vJ+NqeDEiMQntYmzX5z9/2mxuj3MIAiC7/rgkGzCW:vRSEiVxp5u+u5A1brnoCW","tlshash":"8025239a1a452e38d407cfb51a52088f35d34ee90afb134e81b5775d270079afc8ae7e","first_seen":"2026-04-22T13:14:20.162986Z","last_seen":"2026-04-22T13:38:19.279724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1967,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1186,"receive":781,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/swiper.min.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/js/swiper.min.js HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:09 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncontent-length: 35539\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-22000-gzip\"\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":139264,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"dc8fea11412de3b1121523646d6deaa0","sha1":"e4bfebe4ebe81ffa9b3a0327e394a2b56c31212b","sha256":"1d4e3bb31709133dc074100cc35058e04150965a1e049ee5bc7fa4986ebcb0b2","sha512":"44fddfceb1ff271429803b3d3e991710bc354355226fd7066db6bc58b8245b97941c1e9dbb862a20329a5bf039d23641ecd803fbeeac8cecabe2a90df4681f4d","ssdeep":"1536:Fj2qhgxfeuGMfo3i2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgn:wxoz6desFshaKi+HgZsUOUTqiqMT7EO","tlshash":"07d3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","first_seen":"2026-04-22T13:14:20.164041Z","last_seen":"2026-04-22T13:38:19.305066Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1195,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/jquery.magnific-popup.min.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:09 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncontent-length: 7346\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-4ef8-gzip\"\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-25T12:11:07.542968Z","times_seen":64546,"resource_available":true,"data":null}},"time_used":1198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1195,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/onyx.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/js/onyx.js HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncontent-length: 3238\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-44c3-gzip\"\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":17603,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"magic text fragment for file(1) cmd, 2nd line \"/*-----------------------------------------------------------\", 3rd line \"* Template Name    : Onyx | Responsive One Page HTML Template\"","md5":"ebc8660d596d9dc50ee2f76de0a87d49","sha1":"80dc89e61a0da06fb470716e32d6df036faf4931","sha256":"2e8407e7a55fa7b505d07ead0610cad3a387f2a6c5de0120d57410bc6ad48965","sha512":"12a06022db26b278e6c589fc463091f8ede81f27e64fa938ef09b28bab306a82d0b74b95115acfc963eeb3c0b15c45004179c30f7ff11c1220bf252215f5217c","ssdeep":"192:2QZVrIOl+dlD9+ut6d2QyJClf4Q2yjG4znX:zMOYQllbX","tlshash":"66829908fcb1495308bbf47a0b7fa600ea544007cb8ded15b91e97985f4462db4be7da","first_seen":"2023-03-14T09:06:45Z","last_seen":"2026-05-25T08:01:59.412065Z","times_seen":49,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/jquery.countTo.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/js/jquery.countTo.js HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:09 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncontent-length: 1128\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-eb1-gzip\"\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":3761,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"acad36d38da9f68c52bb074b2c478d0f","sha1":"922c71c5699f9306a415a7a344be46d92e0fc4a1","sha256":"00619814b3b256720a9ffd9408397d0ffe5559ff301d608eb66f585343fd83a2","sha512":"5be7c4d8f9e001a527d75e1fa0eb63edb24d0eaaea00d2ca8c66fa832cf5e7d868175f8d9c45917e042d1299f79022e3425510fc50214ec9a6a9034ec7f4413b","ssdeep":"","tlshash":"46716d49bbef2111956b20dd5f5f114c3234932b144b8548799d93c08fa6839e6eafbc","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-25T08:01:59.416808Z","times_seen":1182,"resource_available":true,"data":null}},"time_used":1359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1195,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/fonts/LineIcons.woff2","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:51.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/fonts/LineIcons.woff2 HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://qfsledger-vault.org/static/temp/assets/css/LineIcons.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51676\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-c9dc\"\r\nstatus: 200 OK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51676,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51676, version 1.0","md5":"ab4f93708f366ab8c6576d60e1646dbd","sha1":"099c8552ddc2cfb05159333577c1821d2c6d4919","sha256":"22d65627d2483a04af29571b0637043746d2536c84a977860bc3ece769cf3418","sha512":"922a15cc852de48f4c1f6456d1c35bd3c37d434d6071c7ce9513176cf10ecfe85c484cfe06e7258c75ae028ea31116e96ea9449a75403d8af4d81b142299419b","ssdeep":"1536:300E1+oUoXBAlRcofcklQagQN4zBiKgNT:k0q+JoXBY+S6QOBRgNT","tlshash":"5933f12c3416b2d2567850afb84e8afa4c5ef576ecc257ad98110650cd833c9fe7d08a","first_seen":"2023-04-30T20:48:07Z","last_seen":"2026-05-25T08:01:59.40463Z","times_seen":574,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":486,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/ad.mp4","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:51.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/ad.mp4 HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://qfsledger-vault.org/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:10 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 25136770\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-17f8e82\"\r\ncontent-range: bytes 0-25136769/25136770\r\nstatus: 206 Partial Content\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":696152,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"e219b26d3c4e465dd1481b999ccad0e3","sha1":"3231e89bab5a5af61eb65acaabdfe4af255fa93a","sha256":"67019c6e74448b2390f0e1c4df0f476b2b058686952fac1e820525d597c6ac4e","sha512":"4e3df5e8d6d39998754b9781646898d52b5a298aa2c67c3606acc01ebe99f0b7c659f0c14f99af8b23ebf7994ee18ed18e0ccdf6ef362437d2b8dc8dc3b7572c","ssdeep":"12288:kWI8JRAokW/km/Vf/9EAnc8k61OdTEg5G8s2/HAMcjgzmRuKE/y/Nu3eL:kWI8JR5kW/rVH9E6cR6iIz8sagRM6L6+","tlshash":"e9e422a5e3940528f8866234a2c263146f28d872249387d74691c3bffe2f1eddd1b9e5","first_seen":"2026-04-22T13:14:20.167715Z","last_seen":"2026-04-22T13:14:20.167715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/css/bootstrap.css","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/css/bootstrap.css HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:09 GMT\r\ncontent-type: text/css; charset=\"utf-8\"\r\ncontent-length: 25436\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-2ef5c-gzip\"\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":192348,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (570)","md5":"bd551f56ce2be3eba2812e605ab4f5b2","sha1":"94d6450720dd8deb413760cc9184204b46802e9c","sha256":"35fbb6dc3891aacaf1ffa07abec2344fdbc454aab533a2a03bcf93577eb7837b","sha512":"3310948ae23eb805e0afd67d7f11f563cd829ea46b5b2496a877a367250c5b9e5526a2f8b6b7fd15733f4a24fb3505d97781f49c93abe85000253123026ae6f8","ssdeep":"1536:2ycclspJfXkgUpuoRnm4ADXeASzja+QTzNlXK1wqLq9S/zDL4iDF4jg:25jkgUA2wqsS/zDL4iDF40","tlshash":"60147458fdf11504746b826c64d6f7f57b6d8087c61edebabae22224cf493c14cb2988","first_seen":"2023-04-05T16:44:06Z","last_seen":"2026-05-25T08:01:59.446325Z","times_seen":1486,"resource_available":false,"data":null}},"time_used":1369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1205,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/css/swiper.min.css","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/css/swiper.min.css HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/css; charset=\"utf-8\"\r\ncontent-length: 4128\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-3563-gzip\"\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13667,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13411)","md5":"08a2179b7e519e9258cd789a70c0c02e","sha1":"970250d20f2ec314420a20e9b2c27ec02b89639d","sha256":"607b6373b529d07da80e5c0bbce46ea42f08f93c3c0d5c26aa231cff4a2d80a5","sha512":"1bcce525618810f9fbbd80ca7e7f47cf2860cbb81a8194ddf31945f1d818c7dcf05ea0d8a165b793d49a14abba415a1fe7e580d36f6e52f243565cc0012b59da","ssdeep":"384:VbUbeQS7Rgx9BU0W/XCcif65W/1mXA82FHpx:VIb67gbhW/XDif65W/1mXA82Fn","tlshash":"8652236417003837f3774f6e4aa1e6b59f60cc838a934d9db2c0dd44d6fa8b9122eb95","first_seen":"2023-04-17T09:05:25Z","last_seen":"2026-05-25T08:01:59.42456Z","times_seen":1012,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/img/019b231e-23dc-4c7e-8412-e96433966535%20(1.html).jpg","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:51.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/img/019b231e-23dc-4c7e-8412-e96433966535%20(1.html).jpg HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/static/temp/assets/css/main.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, Cookie\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nstatus: 404 Not Found\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":3978,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e7680c24f550fec5a01a540fbef29ed6","sha1":"b73ad563e14c8947d6d7f356dbf04a53cbb3eb6d","sha256":"66c31b3fb10b5327eed6c7bdaca40de3bf451ce4f255f21a1153268367a5017f","sha512":"b95fae93a6cadd3c6247ae833074bdc85e4c6b411a498864be26df9c8ab860a3ff59ec6d3ec452538159b273c098c25e93ec19ec337f3bf47a303b4bda305b5a","ssdeep":"","tlshash":"7b818221a1f1334a6060d4ba7e5127566f2c927ba10a2d3c7e4d4b7cef48f508d9fa2c","first_seen":"2026-04-22T13:14:20.169735Z","last_seen":"2026-04-22T13:38:19.286763Z","times_seen":2,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/s3.tradingview.com/external-embedding/embed-widget-ticker-tape.html","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:51.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-ticker-tape.html HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1154\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nstatus: 404 Not Found\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T12:41:01.787204Z","times_seen":15690396,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:52.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Apr 2026 20:51:12 GMT\r\nexpires: Mon, 19 Apr 2027 20:51:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 231760\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-05-25T09:57:47.528182Z","times_seen":67308,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":33,"dns":1,"connect":7,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/logo1.png","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/logo1.png HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 27480\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-6b58\"\r\nstatus: 200 OK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":27480,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 169 x 186, 8-bit/color RGBA, non-interlaced","md5":"8bf011c87c10d7e5bd983c9182b1478a","sha1":"bdd1ff917cb47c2cc27156139f79c93300be6299","sha256":"62d0560b5e0465c79882db9d9ae4b82e7ffce9fed256d8e11e7c1785fc1ef7df","sha512":"c64f47346b6c827ff920be852b9656e5da3d9e0049357069a28eae7ae9909cb95c56bf09420a247e5c0f2d82439bf0d9ef9c6ea177f076a26e2b3a2a01003cf5","ssdeep":"384:mKnFnt61zgR34qgPlAYMKpDjimjRZwlhcFsGW13YoPihH1CSFHMrkjrO7mgWb6mY:h4Ex4qklIKVjimNZQh2q3YCMVbM6OAbY","tlshash":"29c2e1f75176380c2c44df4ba742d008521edacaffd5d8366a211a5cc63a119f4ebafa","first_seen":"2026-04-22T13:14:20.159633Z","last_seen":"2026-04-22T13:38:19.285189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/bootstrap.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/js/bootstrap.js HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncontent-length: 25073\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-20237-gzip\"\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131639,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (328)","md5":"ffcd65b7f48aea5c910ec3000c3f5738","sha1":"28b4677466efbf48907614d4071f20ba0a4f3aba","sha256":"a84fb10d4ac751de74e2d2d603a4215cb4edef1053e5077a680b73b87b6472e9","sha512":"150ff09ff7c7188ff122ff7acf0c679bffdd4c682bb732a11f75141e1f8ed5d1cd371a824fec148476bc61ca72b9f60c4b1b3c77f24eb235cbdc2fc99096e92e","ssdeep":"1536:5XMG/5lzsiLOvFUqZGbVLK/vuOhubEq12NQdYz:759siWFUOvhMEq1rdK","tlshash":"a0d3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","first_seen":"2025-08-29T18:47:30.341291Z","last_seen":"2026-05-22T05:09:49.44905Z","times_seen":12,"resource_available":true,"data":null}},"time_used":1014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1002,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/img/footer.jpg","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:51.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/img/footer.jpg HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/static/temp/assets/css/main.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 339797\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-52f55\"\r\nstatus: 200 OK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":339797,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"7ec435c418edd9f98e2e644e36af4402","sha1":"74e57926f814ba1113a1e6ef4e6533109e8edc26","sha256":"bd5a155b051de5323937c2a19a2fa5e31d2d3bdd569610b6752b12e44615293b","sha512":"5b21cc7b6e18d611aacd4e15a2e9e24ceb295e241950fdf9c63690bf639b6a3f20d1259ee3dcab76c04cc2ba083ba9b44d6befe7a0b59960df546d97e51e7904","ssdeep":"6144:rV5mHYMJRHz2v/rFrn5agY/Ju52fxi9M0+YPp9BBohhJgeQWSbqeDspO:LmTHz2nl5ab/JhfaM/w9TShD2b4pO","tlshash":"9074238e558b25e5dbba0b7c496d0a201175f7936f8b7c3deb0f8e70b31826610e805e","first_seen":"2023-06-27T21:49:27Z","last_seen":"2026-05-25T08:01:59.349741Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":725,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=AAAAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfol5EDAVBAUZnl22NrPpbX8UFAXxw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:52.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=AAAAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfol5EDAVBAUZnl22NrPpbX8UFAXxw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 120999\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 17:33:05 GMT\r\nexpires: Wed, 21 Apr 2027 17:33:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Apr 2026 19:10:48 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 70847\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":419116,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"fd3e5e88f56e2223d9ef3dc30817863f","sha1":"080ad8c078433403b83c284a02d2e95c22ec7ba6","sha256":"4be943c66cdfd8c2fa8c3570f14629e556bfa6e01afc413275d0440e3be97ddf","sha512":"8fa361b5ec195581ab7b7a2d52be9901fba9da0939063c36878180193414e26ff1bc86231176ffb68c31dde5b90a91ee7def81ac5ef7dfc00826de6b7a13670b","ssdeep":"3072:XJNmEj9es4bkvJ3NnvRx3kSzACvVcUJjNMByu3NFpFH4dzr+FnbTGssAEElTsF:ZrI0JSXYdzknbTGjn","tlshash":"4494e9d9b26274629266fca0a47f00c7b53dac57a4884c6cb249dcd62df090952b3f7f","first_seen":"2026-04-21T18:59:47.631327Z","last_seen":"2026-04-27T18:37:50.680091Z","times_seen":948,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":77,"dns":0,"connect":21,"send":0,"wait":24,"receive":62,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/s3.tradingview.com/external-embedding/embed-widget-ticker-tape.html","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-ticker-tape.html HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1154\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nstatus: 404 Not Found\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T12:41:01.787204Z","times_seen":15690396,"resource_available":true,"data":null}},"time_used":1003,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1003,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:51.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 18:30:38 GMT\r\nexpires: Wed, 21 Apr 2027 18:30:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 67393\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-05-25T10:14:17.646687Z","times_seen":8043,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":96,"dns":1,"connect":21,"send":0,"wait":22,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/translate.google.com/translate_a/elementa0d8a0d8a0d8a0d8.html?cb=googleTranslateElementInit","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:51.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8a0d8a0d8a0d8.html?cb=googleTranslateElementInit HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1158\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nstatus: 404 Not Found\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T12:41:01.787204Z","times_seen":15690396,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/js/menu.js","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:51.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/js/menu.js HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1206\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nstatus: 404 Not Found\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T12:41:01.787204Z","times_seen":15690396,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:52.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 04:59:20 GMT\r\nexpires: Thu, 22 Apr 2027 04:59:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 29672\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-05-25T09:57:47.519198Z","times_seen":62976,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260420","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:53.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260420 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 22 Apr 2026 13:13:53 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy: script-src 'nonce-P9Pu8bIibfkmPOpGkkFnVA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw15BiEOLmmDh58Xk2gRV7TwkpKSXlF8aXFCXmFecklqQWpxaVpRbFGxkYmRmYGBnoGZjHFxgAAPR-EdE\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=33.SE=odUWsGlgjqxQ0tLiUFbcYfhNkWGnspNhiX9QVuZy49PXbujs_K9J-2pfU4WTB7rm3TSJKTnxhbqWbLvFO65XbLuxBhoxBk06VC4LVQ0QQQ1JoIXFpTZGeDcc72fhBiEuR6xOpCyAbZolVyv0t_WywkyoCILCcSV_Y_dozQ1_7kdgXecYPg1tKShcUyIEM19HQ_1cLX8Wy3morgNiX-_5X2w5CfvZj544mAbt5xpOzjCJRsp53BfXY5s; expires=Sun, 23-May-2027 05:32:11 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T12:41:01.787204Z","times_seen":15690396,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T13:13:49.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 4867\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}],"data":{"size":21931,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"5ff1604f128afe2448736ffc17449241","sha1":"3c469ce9fed4937fed0d5e04345c86538e8f0f77","sha256":"ae69db1784671570aa908fc0c681cc101b006a575e92c62fc3a9ca559ab47b88","sha512":"a7864e87b508ef37fb3ba435548b7713ee9a429af7aad7ed3cc7d78fcefab25689da91ff0a5e4067e970f1ae30a4291f6c45a889176229e0c30e12bfa5950255","ssdeep":"192:cgJNNQWwF1xj6euN/qvZ/EpKipv26HuYCwnqHCCnFCaWjh5qM:5NedFOpKO24fmCRN5qM","tlshash":"53a2212698f600270053d1a47ae02b4f7fa1d507c95f9a5876fc0bc46fd3e8acd57968","first_seen":"2026-04-22T13:14:20.17471Z","last_seen":"2026-04-22T13:38:19.324353Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1098,"timings":{"blocked":424,"dns":48,"connect":179,"send":0,"wait":249,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/css2-133e133e133e1.html?family=Muli:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /css2-133e133e133e1.html?family=Muli:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1196\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nstatus: 404 Not Found\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T12:41:01.787204Z","times_seen":15690396,"resource_available":true,"data":null}},"time_used":1207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1205,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsledger-vault.org/static/temp/assets/css/LineIcons.css","fqdn":"qfsledger-vault.org","domain":"qfsledger-vault.org","tld":"org"},"ip":{"addr":"169.239.181.174","port":443,"asn":328364,"as":"Host-Africa-AS","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsledger-vault.org/","date":"2026-04-22T13:13:49.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsledger-vault.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 12:34:42 GMT","end":"Thu, 25 Jun 2026 12:34:41 GMT"},"fingerprint":{"sha1":"F0:51:9B:01:36:A6:78:8D:B9:CF:A8:28:EB:76:3D:8F:03:13:64:61","sha256":"74:66:A5:21:21:9B:62:C1:03:8D:B7:1F:A1:79:80:36:E2:78:19:35:2F:CC:E7:4B:DE:15:AC:8E:B7:CF:DC:83"}}},"request":{"raw":"GET /static/temp/assets/css/LineIcons.css HTTP/1.1\r\nHost: qfsledger-vault.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsledger-vault.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 13:13:08 GMT\r\ncontent-type: text/css; charset=\"utf-8\"\r\ncontent-length: 4868\r\ncache-control: max-age=0, public\r\naccess-control-allow-origin: *\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R) 6.0.26\r\nlast-modified: Tue, 30 Jul 2024 00:27:43 GMT\r\netag: \"66a8337f-6e64-gzip\"\r\nstatus: 200 OK\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.0.26","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":28260,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9bdd836bfef4e60ac3b5c337ded27292","sha1":"6c8041b87228dac6ea6c5b7a54e506c894840a34","sha256":"56d09c4cd80f372c855706df481c12ff5d22e25cab78db087cc92b283f1d107b","sha512":"218bdc1700f2a14bebd69352c5e2f03c9066482680dfed4bcd358675d7a4f868603db7e88b12f5b6f0c552680def612097596d0f6d69a58fa21db1609634586d","ssdeep":"192:fq1XhYDGyqlxTBsdXK9EYEBPJljOET5TEVpfeAfbMJVxp5OyohTrfj4fGUxH7n/E:wlsU0jSET5TE/9/IlxH7nZUt","tlshash":"83c222e4d9ff0cd09b0dd0dd2247a620eb1cb2b5a8074c1dd7a2798e67e261464dabdc","first_seen":"2023-04-17T09:05:25Z","last_seen":"2026-05-25T08:01:59.311979Z","times_seen":641,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"qfsledger-vault.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}