{"report_id":"a9787b9d-b213-41db-a4d6-c6d68782e8d8","version":0,"status":"done","tags":[],"date":"2026-06-25T00:15:25Z","url":{"schema":"http","addr":"qbhelpscheduler.com","fqdn":"qbhelpscheduler.com","domain":"qbhelpscheduler.com","tld":"com"},"ip":{"addr":"148.251.140.247","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"qbhelpscheduler.com/","fqdn":"qbhelpscheduler.com","domain":"qbhelpscheduler.com","tld":"com"},"title":"Appointment Booking","dom":{"size":12541,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3546)","md5":"78e18401fba546f1fc9fe81881605666","sha1":"83733280ee16590df153cd13cb0f277d012d3b89","sha256":"d97170408e654168c56ad3a0e59734a52b80c98cdfa52442a7d6dc33c4be2bd4","sha512":"4f7ca7780b397e374dac8ae07ee87cd95ec08bc82ec8899982f43bfd21b784b060e659d6183786d50348510c7d28717ba663bf94bab27d6019bf32eed08b187f","ssdeep":"192:WcdV/iUJDlnGy5eq357wC1Pzr2uq6ywIakgcvoDpK4ZGIB5mNcjDHu:Wcz/iryPzr2uq6ywIaOoYsGA5wN","tlshash":"b042de51a5f2092712bbd8d51afa8f4236d2c013c4871498f2ecabfc1fdad44747e66a","dom_hash":"domhash4f41107a1f67d2c4bde5c91f533eefe5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"qbhelpscheduler.com","fqdn":"qbhelpscheduler.com","domain":"qbhelpscheduler.com","tld":"com"},"ip":{"addr":"148.251.140.247","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-30T00:15:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"qbhelpscheduler.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"qbhelpscheduler.com","ip":{"addr":"148.251.140.247","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-18T19:25:34.645943Z","last_seen":"2026-03-18T19:25:34.645943Z","alert_count":12,"request_count":3,"received_data":21201,"sent_data":1515,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:8.1.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-21T22:46:13.623663Z","alert_count":0,"request_count":3,"received_data":303138,"sent_data":1506,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/flatpickr","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19f49a9a1665777b11b2004ff4926d92","sha1":"7d5bfbf9261ed89b9ca842487f7a6464964744b9","sha256":"1eeab1cb779471a0b0aaa93dd91c2eb1aa537d696f01ab05ea9dabc55e8525a1","sha512":"2bfa3242d317a71238f8ad16ec7db9528a6333ca73ab4cab55d15d1b6d458797417bdd48e34a4377d0389733651cf1c120fd9cc19ba8c5a5125f418948e6ef18","ssdeep":"1536:YahLxxQRgIRTIVS7fVJEqUxge4xbVi/GeUGHYjIUpdxyx:YeXBxgenKG4i","tlshash":"8e33c64b391c393352da78acc46e021abf305fe648ca5450795ff1142fbad86927efa4","size":50679,"data":"","first_seen":"2023-03-07T01:28:39Z","last_seen":"2026-06-27T08:51:06.137902Z","times_seen":6838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qbhelpscheduler.com/","fqdn":"qbhelpscheduler.com","domain":"qbhelpscheduler.com","tld":"com"},"ip":{"addr":"148.251.140.247","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa4985e64feb81a5276a08198a2a9cfa","sha1":"e28c88811b5789b5f5d81dd54f2bd0496fa8c69f","sha256":"0e671dcaa25d32dbd2f8c36c201f5331cc449e2a6e6869f6256abe4b854bc4e9","sha512":"cadb9f5a4fe8edc1911373d10756bd8700fcf632e571e41940365a6ddb1dbc1fdec3072b6d8626c8046bd9e8b10d0a8e7ebc38acd66d6aa39d4f05739eb103d2","ssdeep":"","tlshash":"ec01ce2b71b24c7149ff333b859a8bc83a2141872c0659497dac59952f00c9548febc3","size":850,"data":"","first_seen":"2026-06-25T00:15:27.450464Z","last_seen":"2026-06-25T02:03:44.633817Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qbhelpscheduler.com/","fqdn":"qbhelpscheduler.com","domain":"qbhelpscheduler.com","tld":"com"},"ip":{"addr":"148.251.140.247","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-25T00:15:03.063Z","timestamp":1782346503063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qbhelpscheduler.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 15:59:57 GMT","end":"Fri, 18 Sep 2026 15:59:56 GMT"},"fingerprint":{"sha1":"6A:C5:E9:00:F9:F5:35:BB:7F:8A:4F:B0:85:C5:32:83:0F:DB:6E:D5","sha256":"A5:16:AF:13:12:E0:1E:DC:DA:02:3D:EE:09:97:12:1E:E1:0B:DF:B4:12:F6:90:96:6A:19:6E:DD:BE:CC:2C:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qbhelpscheduler.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.1.32\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1648\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 25 Jun 2026 00:15:03 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:8.1.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6495,"size_decoded":2050,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"2413bf7179fae8b9526ca71b099d4ce0","sha1":"7f3f9a05b4915ef54135e5c66c8a02525170ffe8","sha256":"31ab2620c4ec900954702702b7c9fb1a03dc8f5e8630e0d4e2d544c9e0092f98","sha512":"1e0b9b8b76ef17c4dbeff762c847345b52fb10ba9f12317738add5324ebf46cb807c8c61ee6aa069969fbbe73b64b7869ae78741eaba804b343b6e774fe42244","ssdeep":"192:UcdV/BUJDlnGy5eq357wC1Zzr2uq6ywIaAB7voDpK4Y:Ucz/BryZzr2uq6ywIayoYJ","tlshash":"10d17663f0f11da7220744b56a66ae4437a1c103c28aa85cfaed3af25fc1d84457b3e7","first_seen":"2026-06-25T00:13:46.22174Z","last_seen":"2026-06-25T02:03:44.632173Z","times_seen":3,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":3,"connect":36,"send":0,"wait":41,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"qbhelpscheduler.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qbhelpscheduler.com/","date":"2026-06-25T00:15:03.586Z","timestamp":1782346503586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qbhelpscheduler.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 25 Jun 2026 00:15:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33186\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"38df4-HxOZgbm0enZu+gphu3ito1HxbEs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230189-FRA, cache-ber1080020-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3428675\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWTgte8v8lVGU0FB%2F%2BTJoTqiPSQnykBEGFJEdyUs2mZdO5NWyCBRx1XfGZxmhofuo4g0pDeHDeHLVh1TcMeZj%2FAZEJtraxmWpGCssjZbawgpRCDLcOE%2FRJ%2BXM8sNKW9i25U%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a10fc68f8b073181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232948,"size_decoded":34319,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-06-27T08:19:35.4907Z","times_seen":17271,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":6,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/flatpickr/dist/flatpickr.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qbhelpscheduler.com/","date":"2026-06-25T00:15:03.588Z","timestamp":1782346503588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/flatpickr/dist/flatpickr.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qbhelpscheduler.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 25 Jun 2026 00:15:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 3115\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.6.13\r\nx-jsd-version-type: version\r\netag: W/\"3f26-J8BN8VjBcy9mnostEH/TFP6t00A\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220187-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 22570\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YCVyL2Lrv2ccbRlfI2kNwZApWSTNvVN3R60kAfD19SVzxhP7t0Ju9FiFPLkUSWE4GsBsE%2Br216jss6P66tRXKzrlMX%2FRzA%2B5i%2Bm83fDOpf9JMIYA3642WbQtbJtT0kScL2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a10fc690c8eaa0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16166,"size_decoded":4225,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11819)","md5":"d5a8fe5612330fee581d3f83b37ef858","sha1":"27c04df158c1732f669e8b2d107fd314feadd340","sha256":"1b34a42552c96f10e4dfaaa4a367276b03868aacff63c1ac42ffe331352bc754","sha512":"3105ddb8ef08427255ab5aa6c92a4df3b4109224756d91eda2b6c9043d2dcf2effd14f7e6080bddd05877864c4a288cc547596364a02a7c57a3b355262b5f4a1","ssdeep":"192:zrB/w2d2wOgXF/TV6w51BY0LjINEJkPFHRDjYIuN/GhOUkl8/d7YPir:vBY2TjINEJgvLudGhOUkl8","tlshash":"2072423695321219a527eb3b1ef026893312c132a5c21adee6de77318bc770e25f92d5","first_seen":"2023-04-06T08:07:20Z","last_seen":"2026-06-27T08:41:17.975661Z","times_seen":8469,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":5,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/flatpickr","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qbhelpscheduler.com/","date":"2026-06-25T00:15:03.591Z","timestamp":1782346503591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/flatpickr HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qbhelpscheduler.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 25 Jun 2026 00:15:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15053\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.6.13\r\nx-jsd-version-type: version\r\netag: W/\"c5f7-fVv7+SYe2JucqEJIf3pkZJZHRLk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230106-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 40886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1XnabPdwAxJ%2BqhLkOetKia8erZ9P%2BhvyoSqgUEgrb7vdiwAZju%2BCB4yCJbIqf3K6yFJhECra79NH76YeAARRgWAaPGvdZOBGJ%2BP5tZR7zTNT%2BEvODicZwkxAjjEzk11N5Jw%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a10fc68f8b083181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50679,"size_decoded":16155,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50640)","md5":"19f49a9a1665777b11b2004ff4926d92","sha1":"7d5bfbf9261ed89b9ca842487f7a6464964744b9","sha256":"1eeab1cb779471a0b0aaa93dd91c2eb1aa537d696f01ab05ea9dabc55e8525a1","sha512":"2bfa3242d317a71238f8ad16ec7db9528a6333ca73ab4cab55d15d1b6d458797417bdd48e34a4377d0389733651cf1c120fd9cc19ba8c5a5125f418948e6ef18","ssdeep":"1536:YahLxxQRgIRTIVS7fVJEqUxge4xbVi/GeUGHYjIUpdxyx:YeXBxgenKG4i","tlshash":"8e33c64b391c393352da78acc46e021abf305fe648ca5450795ff1142fbad86927efa4","first_seen":"2023-03-07T01:28:39Z","last_seen":"2026-06-27T08:51:06.137902Z","times_seen":6838,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":6,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qbhelpscheduler.com/qb.webp","fqdn":"qbhelpscheduler.com","domain":"qbhelpscheduler.com","tld":"com"},"ip":{"addr":"148.251.140.247","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qbhelpscheduler.com/","date":"2026-06-25T00:15:03.598Z","timestamp":1782346503598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qbhelpscheduler.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 15:59:57 GMT","end":"Fri, 18 Sep 2026 15:59:56 GMT"},"fingerprint":{"sha1":"6A:C5:E9:00:F9:F5:35:BB:7F:8A:4F:B0:85:C5:32:83:0F:DB:6E:D5","sha256":"A5:16:AF:13:12:E0:1E:DC:DA:02:3D:EE:09:97:12:1E:E1:0B:DF:B4:12:F6:90:96:6A:19:6E:DD:BE:CC:2C:95"}}},"request":{"raw":"GET /qb.webp HTTP/1.1\r\nHost: qbhelpscheduler.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qbhelpscheduler.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Jul 2026 00:15:03 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 03 Dec 2025 17:00:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12400\r\ndate: Thu, 25 Jun 2026 00:15:03 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12400,"size_decoded":12845,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3a24d2722b2e4b59e245170bf9bd717","sha1":"c9c03de74dfe7f85b8e85876b2a49fe1ec5e5701","sha256":"2a7ed280665e85a99e7f31212a2bcb342e3f9cd3c4b3e051c68c72ca228e4626","sha512":"0b817844ff60cdc7145aa1b6d8e69b9a7f467ba553214c1608234855cc53cc2eb7ed47a002927d689326045dcddc57ba661dcd1ec4482d2ed6e948df56c75e8f","ssdeep":"192:jPJ/e9g4v2r9Giuh5JLOdOci+/+kNnJqYs1VZYrZ1sp9IWMgreFBlr3+Sww:F8v2r9GiuFLiVmWMfLxoNgqB1uC","tlshash":"5d42bf53b8b1de5ec8f0763fea847f65324cba11e564bf04804136215d2b4a6d7f5242","first_seen":"2025-09-23T04:59:34.92406Z","last_seen":"2026-06-25T02:03:44.63099Z","times_seen":13,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"qbhelpscheduler.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qbhelpscheduler.com/favicon.ico","fqdn":"qbhelpscheduler.com","domain":"qbhelpscheduler.com","tld":"com"},"ip":{"addr":"148.251.140.247","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qbhelpscheduler.com/","date":"2026-06-25T00:15:03.844Z","timestamp":1782346503844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.qbhelpscheduler.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 15:59:57 GMT","end":"Fri, 18 Sep 2026 15:59:56 GMT"},"fingerprint":{"sha1":"6A:C5:E9:00:F9:F5:35:BB:7F:8A:4F:B0:85:C5:32:83:0F:DB:6E:D5","sha256":"A5:16:AF:13:12:E0:1E:DC:DA:02:3D:EE:09:97:12:1E:E1:0B:DF:B4:12:F6:90:96:6A:19:6E:DD:BE:CC:2C:95"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: qbhelpscheduler.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qbhelpscheduler.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 25 Jun 2026 00:15:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-27T08:35:57.577956Z","times_seen":136076,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"qbhelpscheduler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-25","alert":"Phishing Block","trigger":"qbhelpscheduler.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}