{"report_id":"abed5e35-31c1-4691-8ad6-0e76cd0866a2","version":0,"status":"done","tags":[],"date":"2026-06-22T18:06:14Z","url":{"schema":"https","addr":"mail.qfsweb3.net/","fqdn":"mail.qfsweb3.net","domain":"qfsweb3.net","tld":"net"},"ip":{"addr":"148.113.207.235","port":0,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mail.qfsweb3.net/","fqdn":"mail.qfsweb3.net","domain":"qfsweb3.net","tld":"net"},"title":"Home - Web3 Vell - A crypto buy and sell marketplace","dom":{"size":2784678,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64800)","md5":"a50d37a22c712fa37260b714f47f93aa","sha1":"92091b1173b58a94091d69a52f6cf796beee7489","sha256":"d87e3666136a63592bcbba62dc141fdfa9a5fea8f063bc808ae74ecd20223329","sha512":"dfb5bfc2f856bbf4970f0e14b31cc62a6d1e56ed838f803582a9f68a3e0e036a93163abf240b45a1fcf6adf9e6ea991d64a5c73de6f4187ebe223b9bd232276c","ssdeep":"24576:scvETP4U/n+y5wXioxik8+fWUETIR5gxPA4F1I2x62fF4+oMvx/b1pbog4vq0rsF:/an+y5Esn+fTgxPnF1Vx9TpMZsNincn","tlshash":"8ad5133a47d214374d6755b6a3ef39296e368487c62acc9d7afc0142cf8afb45c82718","dom_hash":"domhashca27c58fc3173d64f2c8d13ca264d3fd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mail.qfsweb3.net/","fqdn":"mail.qfsweb3.net","domain":"qfsweb3.net","tld":"net"},"ip":{"addr":"148.113.207.235","port":0,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-27T18:06:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"mail.qfsweb3.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"www.qfsweb3.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mail.qfsweb3.net","ip":{"addr":"148.113.207.235","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":2872132,"sent_data":4085,"comment":"","tags":null,"fingerprints":[{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}]},{"fqdn":"www.qfsweb3.net","ip":{"addr":"148.113.207.235","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":438,"sent_data":512,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-06-19T04:14:05.462183Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.183.105.56","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-06-19T04:14:05.462631Z","alert_count":0,"request_count":1,"received_data":370,"sent_data":535,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mail.qfsweb3.net/","fqdn":"mail.qfsweb3.net","domain":"qfsweb3.net","tld":"net"},"ip":{"addr":"148.113.207.235","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"db8fc6aaad3b862076a60cb4b715b7af","sha1":"e7ea5f35f6d4d215346e71f73daa3151a73f52bc","sha256":"70eb59f078fe0980f8d7952188b8a8444005f2fb8662a9a7ab13abbdad577d82","sha512":"d1885a8b75d2d0b5b52b0ec7b0fa3b02d8ade4c4045f0810e8fd9b5be2d0ae9a773fa596cd158b73b78edf3d57d642ac324ae49e3ed406ba7362abeaeb596755","ssdeep":"","tlshash":"17e0ab7c3c70409457a311b8c0aae2293e0a30304054d967889a986868f0bda7d01994","size":416,"data":"","first_seen":"2026-06-22T18:06:19.495276Z","last_seen":"2026-06-22T18:06:36.855943Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-06-26T06:04:51.037957Z","times_seen":3807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Request failed with status 403","filename":"https://www.smartsuppchat.com/loader.js?","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"mail.qfsweb3.net/build/assets/app-wHqCoHq-.js","fqdn":"mail.qfsweb3.net","domain":"qfsweb3.net","tld":"net"},"ip":{"addr":"148.113.207.235","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.qfsweb3.net/","date":"2026-06-22T18:05:39.303Z","timestamp":1782151539303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.qfsweb3.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 14:46:19 GMT","end":"Fri, 11 Sep 2026 14:46:18 GMT"},"fingerprint":{"sha1":"B8:07:A7:9A:63:BF:73:8F:75:E6:11:59:1C:1B:CB:31:1F:35:56:5E","sha256":"13:EA:0F:C2:91:EE:C9:AD:FC:E5:A5:95:07:1A:CB:35:E0:46:E9:76:8F:ED:9E:62:17:D5:65:7C:F2:DF:4D:45"}}},"request":{"raw":"GET /build/assets/app-wHqCoHq-.js HTTP/1.1\r\nHost: mail.qfsweb3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.qfsweb3.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5BTmwxaFRJWnlNaGVSWHFHZlNoYWc9PSIsInZhbHVlIjoicHkyT1diazJyU1FrajZqVzE3OXFuWmlhbjdvdmxDR05JeVM5SDh2cUpXYjN2UHdHMFJWZU52TU5LMElRYm1qKytmZEpoRitoSGw4NVhYKzlQMTZCMXVocjc2ZnR1ekt0Q1NGMHBML0Vvd0dlS1pPc0ZycUlyd2xsdkhwYkQ5NkgiLCJtYWMiOiI4MDQxMDA5NWFmOGQ4ZmU2MGRiY2RiYzJlNmMyYzYwNmQxMjljOTZlOGRiYmE0MmQ5NWRkYmE4ZjdjMmRlZDg2IiwidGFnIjoiIn0%3D; qfsweb3_session=eyJpdiI6IlF5b2NOQ2laTHd1VzExNVZ2SldGSkE9PSIsInZhbHVlIjoiK25kVCtvTlMwZW1wMmZWa29YaVIvbC9CWGNIMUlRYklITkxKNCtvRmpleFpFT1JKQzlGcWV3RmI1S3BpVk1ZaGtxeHFxN0JHWU1BWmdUQmo2eENhOHBOK3ZuU29XNytRblZTcUJrSCtyT0hkcUZTc1pVYU5Yc3FnWmRuZnFsdTciLCJtYWMiOiI3NDU4YTI1ODIwM2NkMGI5NzllYTkzZTBjNjhkNmU5Njg2YWM0NTg0Y2Y1YzliMjdkNDA5YTNkODc0ZmE0N2Y4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2895\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 22 Jun 2026 18:05:39 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-26T06:55:03.618869Z","times_seen":16731264,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"mail.qfsweb3.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.qfsweb3.net/","fqdn":"mail.qfsweb3.net","domain":"qfsweb3.net","tld":"net"},"ip":{"addr":"148.113.207.235","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T18:05:38.161Z","timestamp":1782151538161,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.qfsweb3.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 14:46:19 GMT","end":"Fri, 11 Sep 2026 14:46:18 GMT"},"fingerprint":{"sha1":"B8:07:A7:9A:63:BF:73:8F:75:E6:11:59:1C:1B:CB:31:1F:35:56:5E","sha256":"13:EA:0F:C2:91:EE:C9:AD:FC:E5:A5:95:07:1A:CB:35:E0:46:E9:76:8F:ED:9E:62:17:D5:65:7C:F2:DF:4D:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.qfsweb3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Im5BTmwxaFRJWnlNaGVSWHFHZlNoYWc9PSIsInZhbHVlIjoicHkyT1diazJyU1FrajZqVzE3OXFuWmlhbjdvdmxDR05JeVM5SDh2cUpXYjN2UHdHMFJWZU52TU5LMElRYm1qKytmZEpoRitoSGw4NVhYKzlQMTZCMXVocjc2ZnR1ekt0Q1NGMHBML0Vvd0dlS1pPc0ZycUlyd2xsdkhwYkQ5NkgiLCJtYWMiOiI4MDQxMDA5NWFmOGQ4ZmU2MGRiY2RiYzJlNmMyYzYwNmQxMjljOTZlOGRiYmE0MmQ5NWRkYmE4ZjdjMmRlZDg2IiwidGFnIjoiIn0%3D; expires=Mon, 22 Jun 2026 20:05:38 GMT; Max-Age=7200; path=/; secure; samesite=lax\nqfsweb3_session=eyJpdiI6IlF5b2NOQ2laTHd1VzExNVZ2SldGSkE9PSIsInZhbHVlIjoiK25kVCtvTlMwZW1wMmZWa29YaVIvbC9CWGNIMUlRYklITkxKNCtvRmpleFpFT1JKQzlGcWV3RmI1S3BpVk1ZaGtxeHFxN0JHWU1BWmdUQmo2eENhOHBOK3ZuU29XNytRblZTcUJrSCtyT0hkcUZTc1pVYU5Yc3FnWmRuZnFsdTciLCJtYWMiOiI3NDU4YTI1ODIwM2NkMGI5NzllYTkzZTBjNjhkNmU5Njg2YWM0NTg0Y2Y1YzliMjdkNDA5YTNkODc0ZmE0N2Y4IiwidGFnIjoiIn0%3D; expires=Mon, 22 Jun 2026 20:05:38 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\ntransfer-encoding: chunked\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 22 Jun 2026 18:05:38 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}],"data":{"size":2796023,"size_decoded":1872495,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64717), with CRLF line terminators","md5":"47f473e5229334ee721aa3df46b31a5f","sha1":"994e5e7358de1aa3290afeb61cbee6aa02325d5c","sha256":"2888081d09967496189de34f357bc255aa372fc90b5569bee21cb17c6043cd87","sha512":"f43670aa3d95a249c91eb5bd91d70333d6ab5f080f0e02aaca3bbf5f93c5a24610baecd22dbe0838c5f0d2fe548cb886835bb31de8b03f19011d1c16cb0d18d0","ssdeep":"12288:1xRh+Hp6kk15TP4UOuSmR+xe2mhfEBbXTWmARoomxikY5:SHpkTP4U/T+xcQXioxikq","tlshash":"8c25e12d468254365d7753faebab212cff274087ca2689597eec41024fb6bb45c82f1c","first_seen":"2026-06-22T18:06:19.489988Z","last_seen":"2026-06-22T18:06:36.853352Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2157,"timings":{"blocked":-1,"dns":139,"connect":99,"send":0,"wait":247,"receive":1266,"ssl":406},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"mail.qfsweb3.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.qfsweb3.net/assets/css/fonts.css","fqdn":"mail.qfsweb3.net","domain":"qfsweb3.net","tld":"net"},"ip":{"addr":"148.113.207.235","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.qfsweb3.net/","date":"2026-06-22T18:05:39.298Z","timestamp":1782151539298,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.qfsweb3.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 14:46:19 GMT","end":"Fri, 11 Sep 2026 14:46:18 GMT"},"fingerprint":{"sha1":"B8:07:A7:9A:63:BF:73:8F:75:E6:11:59:1C:1B:CB:31:1F:35:56:5E","sha256":"13:EA:0F:C2:91:EE:C9:AD:FC:E5:A5:95:07:1A:CB:35:E0:46:E9:76:8F:ED:9E:62:17:D5:65:7C:F2:DF:4D:45"}}},"request":{"raw":"GET /assets/css/fonts.css HTTP/1.1\r\nHost: mail.qfsweb3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.qfsweb3.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5BTmwxaFRJWnlNaGVSWHFHZlNoYWc9PSIsInZhbHVlIjoicHkyT1diazJyU1FrajZqVzE3OXFuWmlhbjdvdmxDR05JeVM5SDh2cUpXYjN2UHdHMFJWZU52TU5LMElRYm1qKytmZEpoRitoSGw4NVhYKzlQMTZCMXVocjc2ZnR1ekt0Q1NGMHBML0Vvd0dlS1pPc0ZycUlyd2xsdkhwYkQ5NkgiLCJtYWMiOiI4MDQxMDA5NWFmOGQ4ZmU2MGRiY2RiYzJlNmMyYzYwNmQxMjljOTZlOGRiYmE0MmQ5NWRkYmE4ZjdjMmRlZDg2IiwidGFnIjoiIn0%3D; qfsweb3_session=eyJpdiI6IlF5b2NOQ2laTHd1VzExNVZ2SldGSkE9PSIsInZhbHVlIjoiK25kVCtvTlMwZW1wMmZWa29YaVIvbC9CWGNIMUlRYklITkxKNCtvRmpleFpFT1JKQzlGcWV3RmI1S3BpVk1ZaGtxeHFxN0JHWU1BWmdUQmo2eENhOHBOK3ZuU29XNytRblZTcUJrSCtyT0hkcUZTc1pVYU5Yc3FnWmRuZnFsdTciLCJtYWMiOiI3NDU4YTI1ODIwM2NkMGI5NzllYTkzZTBjNjhkNmU5Njg2YWM0NTg0Y2Y1YzliMjdkNDA5YTNkODc0ZmE0N2Y4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Jun 2026 18:05:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Feb 2026 17:38:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 47542\r\ndate: Mon, 22 Jun 2026 18:05:39 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63589,"size_decoded":48071,"mime_type":"text/css","magic":"ASCII text, with very long lines (43043)","md5":"d8958b375b6ed6287afc1c75e01299c3","sha1":"d490e3261037e26d926c6b8ee2889b044eac29e8","sha256":"bce7fcbc3afc9eaf5bf9e9203503e638951beb9f1d848494fa1dc9ee3b08b7a5","sha512":"6f87e6c33a6e7d885a6a4016ee531f1fb976f684a16e4e8a2f7cdf3b6d9985ea9b5fba9c35fe9a1407dcd01b9d0f5b6e3ea3d5e6e3f71d4569f05b47a29eec49","ssdeep":"1536:A1AtRUFR8uQAIiUD9kBmvcCi2YegIrpxx2Pr2xbF+r:1RkR8uQxDu4vDYe/xAObo","tlshash":"ae53f27a4b8ff0452b4d33682b150eadfb5e1bd719af668916bdc1d93e48c306205a0e","first_seen":"2026-02-07T13:57:20.030791Z","last_seen":"2026-06-22T18:21:26.849841Z","times_seen":10,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":105,"send":0,"wait":160,"receive":209,"ssl":229},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"mail.qfsweb3.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qfsweb3.net/images/icon.png","fqdn":"www.qfsweb3.net","domain":"qfsweb3.net","tld":"net"},"ip":{"addr":"148.113.207.235","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.qfsweb3.net/","date":"2026-06-22T18:05:39.346Z","timestamp":1782151539346,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.qfsweb3.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 14:46:19 GMT","end":"Fri, 11 Sep 2026 14:46:18 GMT"},"fingerprint":{"sha1":"B8:07:A7:9A:63:BF:73:8F:75:E6:11:59:1C:1B:CB:31:1F:35:56:5E","sha256":"13:EA:0F:C2:91:EE:C9:AD:FC:E5:A5:95:07:1A:CB:35:E0:46:E9:76:8F:ED:9E:62:17:D5:65:7C:F2:DF:4D:45"}}},"request":{"raw":"GET /images/icon.png HTTP/1.1\r\nHost: www.qfsweb3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.qfsweb3.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2892\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 22 Jun 2026 18:05:40 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-26T06:55:03.618869Z","times_seen":16731264,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"www.qfsweb3.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.qfsweb3.net/","date":"2026-06-22T18:05:40.329Z","timestamp":1782151540329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:49 GMT","end":"Wed, 02 Sep 2026 14:34:48 GMT"},"fingerprint":{"sha1":"77:06:42:CE:73:9F:CA:05:A3:6E:99:99:F2:3F:B7:EE:E4:60:E9:29","sha256":"E7:6E:68:C5:CD:6C:F6:14:84:A0:18:1A:D7:94:77:7A:28:F6:67:8E:90:58:94:AE:3A:65:6A:B7:95:0F:5D:1B"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.qfsweb3.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 22 Jun 2026 18:05:43 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: k9p1inM6k7yo+ketEw5SZFnPkbRpqge1qyM7bW4lBlH/wFBz0tbNMcN3wGepzq1rHErUFwk\r\nx-77-nzt-ray: fdb5412363416b697779396a2ae8bf21\r\nx-77-cache: HIT\r\nx-77-age: 42\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-06-26T06:04:51.037957Z","times_seen":3807,"resource_available":true,"data":null}},"time_used":3241,"timings":{"blocked":-1,"dns":34,"connect":9,"send":0,"wait":8,"receive":0,"ssl":3190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/891ebc73c9f7547a8e499f065f9cecb64fd5dfd4.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.183.105.56","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.qfsweb3.net/","date":"2026-06-22T18:05:43.626Z","timestamp":1782151543626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/891ebc73c9f7547a8e499f065f9cecb64fd5dfd4.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://mail.qfsweb3.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.qfsweb3.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Mon, 22 Jun 2026 18:05:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":null,"data":{"size":57,"size_decoded":370,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-06-26T06:02:49.856156Z","times_seen":3087,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":3,"connect":25,"send":0,"wait":30,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.qfsweb3.net/favicon.png","fqdn":"mail.qfsweb3.net","domain":"qfsweb3.net","tld":"net"},"ip":{"addr":"148.113.207.235","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.qfsweb3.net/","date":"2026-06-22T18:05:40.598Z","timestamp":1782151540598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpanel.qfsweb3.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 14:46:19 GMT","end":"Fri, 11 Sep 2026 14:46:18 GMT"},"fingerprint":{"sha1":"B8:07:A7:9A:63:BF:73:8F:75:E6:11:59:1C:1B:CB:31:1F:35:56:5E","sha256":"13:EA:0F:C2:91:EE:C9:AD:FC:E5:A5:95:07:1A:CB:35:E0:46:E9:76:8F:ED:9E:62:17:D5:65:7C:F2:DF:4D:45"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: mail.qfsweb3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.qfsweb3.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5BTmwxaFRJWnlNaGVSWHFHZlNoYWc9PSIsInZhbHVlIjoicHkyT1diazJyU1FrajZqVzE3OXFuWmlhbjdvdmxDR05JeVM5SDh2cUpXYjN2UHdHMFJWZU52TU5LMElRYm1qKytmZEpoRitoSGw4NVhYKzlQMTZCMXVocjc2ZnR1ekt0Q1NGMHBML0Vvd0dlS1pPc0ZycUlyd2xsdkhwYkQ5NkgiLCJtYWMiOiI4MDQxMDA5NWFmOGQ4ZmU2MGRiY2RiYzJlNmMyYzYwNmQxMjljOTZlOGRiYmE0MmQ5NWRkYmE4ZjdjMmRlZDg2IiwidGFnIjoiIn0%3D; qfsweb3_session=eyJpdiI6IlF5b2NOQ2laTHd1VzExNVZ2SldGSkE9PSIsInZhbHVlIjoiK25kVCtvTlMwZW1wMmZWa29YaVIvbC9CWGNIMUlRYklITkxKNCtvRmpleFpFT1JKQzlGcWV3RmI1S3BpVk1ZaGtxeHFxN0JHWU1BWmdUQmo2eENhOHBOK3ZuU29XNytRblZTcUJrSCtyT0hkcUZTc1pVYU5Yc3FnWmRuZnFsdTciLCJtYWMiOiI3NDU4YTI1ODIwM2NkMGI5NzllYTkzZTBjNjhkNmU5Njg2YWM0NTg0Y2Y1YzliMjdkNDA5YTNkODc0ZmE0N2Y4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2895\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 22 Jun 2026 18:05:40 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}],"data":{"size":9954,"size_decoded":3155,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1618)","md5":"104cf75508ea2579158b31a27621fca9","sha1":"7e562f9cb4e638fcde3629b0a5ba9b325f30e235","sha256":"11dc1f34652005b1503a3adcc0ed482ec060b0dff63a30c733346a33b42da23b","sha512":"fbc6805829bafdaf613b3dd85fd47216d4b4ce882d8c0ccc73b4ba4b06012c8acfcf69f990181d04730be73c544e672ce70addc73d423b508342e89cbb6368fa","ssdeep":"192:iR98Gw1W/1Bb71bVX15l1PN13c1Ky514X14L1F71Vo1uL1Fw1WH1J81qf1u3En7Z:09i03LBreB5KG3Aiock+wU7/oFuH","tlshash":"ae22b93914fc143d5093cc61b6e27f25de69d183ce6ab2beb25d01d16fc6d28e983988","first_seen":"2026-06-22T18:06:19.494021Z","last_seen":"2026-06-22T18:06:36.854061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-22","alert":"Phishing Block","trigger":"mail.qfsweb3.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}