{"report_id":"ba9c782c-078d-4543-bdcf-06b3837b171f","version":6,"status":"done","tags":[],"date":"2026-02-23T08:51:43Z","url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"104.21.23.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"title":"QMS","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"104.21.23.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-30T08:51:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-23T08:51:19Z","timestamp":1771836679,"ip_dst":{"addr":"Client IP","port":47854,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.18.29.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2026-02-23T08:51:19.739091+0000\",\"flow_id\":38496144666437,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.18.29.108\",\"src_port\":443,\"dest_ip\":\"172.18.0.51\",\"dest_port\":47854,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"sni\":\"ip.ddnspod.com\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":850,\"bytes_toclient\":213,\"start\":\"2026-02-23T08:51:19.732997+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-23T08:51:19Z","timestamp":1771836679,"ip_dst":{"addr":"Client IP","port":47864,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.18.29.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2026-02-23T08:51:19.746162+0000\",\"flow_id\":565291063396633,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.18.29.108\",\"src_port\":443,\"dest_ip\":\"172.18.0.51\",\"dest_port\":47864,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"sni\":\"ip.ddnspod.com\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":723,\"bytes_toclient\":213,\"start\":\"2026-02-23T08:51:19.739609+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":2,"received_data":66438,"sent_data":1038,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qms-ai.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":41,"request_count":41,"received_data":5161993,"sent_data":19676,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.qms-ai.net","ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-18","domain_rank":0,"first_seen":"2026-02-23T08:51:45.969935Z","last_seen":"2026-02-23T08:51:45.969935Z","alert_count":16,"request_count":16,"received_data":96148,"sent_data":9312,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ip.ddnspod.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-10-25","domain_rank":4307005,"first_seen":"2025-04-05T17:51:06.28219Z","last_seen":"2026-02-20T09:04:42.493649Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"worldtimeapi.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-06-28","domain_rank":18362,"first_seen":"2018-11-05T15:58:25Z","last_seen":"2026-02-19T23:05:32.235674Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":474,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-02-18T12:17:12.965123Z","alert_count":0,"request_count":1,"received_data":114323,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":3142,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2026-02-18T20:13:45.346668Z","alert_count":0,"request_count":1,"received_data":59423,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qms-ai.net/js/sfNMsx22hoD-EG5Wcw.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57be22236e353588655d5a4aa87a3807","sha1":"452a0e4039b309135ed49751a5cb68542cd68def","sha256":"114d3ddd963d7f1954c071f9bac918b7566c049083e2a40c9e9ff40b222afb85","sha512":"121da548cc0ff2b805ae9210ce4d72ae5a14e07d7fc22051147259b6d6704f7929a5f87a6bf2aa4e84559af0f25a87f3ffec2080e6992354a401e15ba4093832","ssdeep":"3072:Ez7tnZY5kWoH6J+2JfnHYr0XyBxxSIl4CWpO+1+Q/4lPc:m7tnm5AH6J+2Jfn9Q0","tlshash":"91345c51740beb3ef4a3584968490800384d4fe6d51d99a6f2fc7b37abc2db0573a7a8","size":242364,"data":"","first_seen":"2026-02-23T08:51:53.662544Z","last_seen":"2026-02-25T20:02:51.422532Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/fJ0tY9yDZFBF8dHLp7.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"611e42bfa14d702f3b356dcd70bbd44a","sha1":"3731d31000afb2bc0f54ec4921fa437e5c3b7830","sha256":"51c44e428cbdd5ef14c5ac864d2ef5754dceefd7989c32fae426d1cb75d55289","sha512":"12f28dfde8fc1b41efa27372994a76eea92fa67e6666f2988cef0cfdefe5f2b1152f0c47971bd7019d5cb654d86548c72236b76258b2e22eaddc8e259330c1ef","ssdeep":"384:cOP5a28wa8HVRtzM9GMKZ6rOyrvUqKxnfDN:cSajwa81RdyGM1OCUD","tlshash":"3392837b00b007aafbf19320f101f9a627c91e866856b5f38dbf536259900e7b5cb65c","size":20990,"data":"","first_seen":"2026-02-23T08:51:53.653088Z","last_seen":"2026-02-23T08:51:53.653088Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/59KSjoPY1YBgeywT45.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"136b7c7b2170d63dc76e75ba456b9d4a","sha1":"1f987a3fec8d389ade59b59466328c2b208ef485","sha256":"958830f5cd85f8f3de35c4dc2b519a87287f3a529d8b4389acc22dfa2a0cf660","sha512":"cc029a003c43b096caf0fc7412c363ee496d33fad52a06c3ab1e1d9bee01d8b57cac0618b0d267909a738172bc3dcf6f6958fbe57291ea1b8bceda47a6fbfacb","ssdeep":"12288:Ptv3fO48SMcZN50T4eh4QktpVo2L4qB6sa7Ah6G0kcNEWcmSfnnoRIhfGT1V9SIo:jjF/BV+UBj","tlshash":"b27523286a1bf744e419c0d7f9373c84c59de68aa00754d26f790bb31ba2792eb9cd13","size":1579058,"data":"","first_seen":"2026-02-23T08:51:53.689574Z","last_seen":"2026-02-25T20:02:51.663431Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/5NxI6caF2BZjnBkq7N.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"11f5d92d903062c88e57fd7599d2dd48","sha1":"d45d7825e5a737fd96886842dbdf1795e87e9fdc","sha256":"2b065ab88267e51706790512a417a6a5bf808a71617ac332cbbf2475840f704b","sha512":"acbc47b3b2c48b5a66b4ca1683c83478065f72fe3c2146b3be252489e8c3105e73fbf699c73dbd9071a993020665aced1f26a7adabd7e614d3036a75ff7e1db8","ssdeep":"","tlshash":"824186acf911cabca6774a3884424050720c0fdfd120dee4e17e1e225bd6cb4756ab78","size":2252,"data":"","first_seen":"2026-02-23T08:51:53.650036Z","last_seen":"2026-02-25T20:02:51.261103Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bf065909385f90d22d0d6c46023cebe3","sha1":"b3238d725852bf42cc18af4b7a0605c19972309b","sha256":"ef526a6b833dc530619ef17063246c4fa5a9c50bbe3b730fe4865f16d4111d51","sha512":"cde07f23390f4a0966a638e608adbd14a5b4a9b7e85c9c4101c77b69f2c4c7e6e94844c76e4d2abb52a559d071df80c5d61d60d212a3fe6973318119f2ff4c38","ssdeep":"","tlshash":"c5c08cc4a0c2ad011a02681524af24e49024442b788c5f038dd4d8882e230b88233eac","size":147,"data":"","first_seen":"2023-10-29T04:01:47Z","last_seen":"2026-03-22T16:13:25.999792Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"76b3a8744d319d7ffea6d2e556b03c5e","sha1":"3f63d8981f5eaab89c61fa1b4e7633a8ef682337","sha256":"1b9df8cf5cbaae4b53dd7297183ea852f5fd2b18a94f5bc93aa56b09366a28b6","sha512":"f65402d77bd42930b02e9e60b88db3440664bf0ab35bfe7132596ef456c7cfd5726432c7bd15ec43d3fc3e728cc8471262158bd843ffcd51681bf04b528d10ed","ssdeep":"","tlshash":"b3c08ccaa0c22e102602a69010bf38e4a025842774885b028ce8ec483e670f08233f9c","size":149,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-05T07:46:40.125151Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c2be3988b46fa66cd8a7ee7e8f9f9f47","sha1":"bb4378e856fded7cba69bc8942caafa47c13cf54","sha256":"5099d7285f4ccdd8dd2a80da0ffad4942d6561925e3850226263224923b21da8","sha512":"1c0be939b14b11a97b825b80ec9318edef8ba9c6aa08d7d1b7ad29ec56a63a981d0b0b1389dac2f7064db65b411975454b1b8e040a890be169978815c1f7cad2","ssdeep":"","tlshash":"49c08cc4a0c63d001612645028af34e49034402ab0481b528da4d8582e630f08233e98","size":144,"data":"","first_seen":"2024-10-06T19:11:38.357641Z","last_seen":"2026-05-07T12:16:35.903684Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"92e81ef4d7ff796a20b80fcb8ecafb14","sha1":"3858157355200e83aa100cf5f214e911f10693ba","sha256":"d3a581bf91a70a8ca524ae1c262c4038b94530ea30d0464f6acecb58018931e4","sha512":"a23b0cc95270d3cd86f1ba4cd9605d791f61bc593f4570b1787e9cb84cea444ee4c8c3bd311fa45748451d191ac8b9c3736792935dfac95d25ef292b62f83983","ssdeep":"","tlshash":"1bc08cd8a0c22d105612a81211af29e490244026704c2b028c98e8483e230f08233eac","size":141,"data":"","first_seen":"2023-09-24T22:56:45Z","last_seen":"2026-06-06T01:45:51.954224Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/BaiR1QeXA1Dwj3qkfZ.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"020e0123817d488c2e190866d5d0f5d9","sha1":"61a703f96e54730fa4e93b780727e94c78222979","sha256":"9390135ed6d644e4a7ab47db70c7a43929ccb5899b13fc91b32e1d73a6e45c54","sha512":"00c6722dbad2f4707f73666bf9feca8d34eb008f353143b9efde8d484c9edda291fcfdc5d6f342b2c0a7764478998da80d003889a62eb269737693a6fbfed8d7","ssdeep":"","tlshash":"98f08b0b982186be95a75d542942306110483eacc72498c4e2f92575a792966a4aef58","size":543,"data":"","first_seen":"2026-02-23T08:51:53.626237Z","last_seen":"2026-02-25T20:02:51.484624Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/jccg7UjpKICTj41bwz.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f20eca31d26444f86d341e8248d5e393","sha1":"eea45ad610a82735797481e12614973af252396d","sha256":"91e095ef2a074c9086fdd7605e08e311cd5a868bfbf6bc03e663fe47faa067d2","sha512":"51fe3975642562f95b8c8c4817078032301ff0ee5a9fbdadccf14ae5d6121df9518ca8d37ae6f12522aab16089c4d1d2391577b8ef843a586aa49c1fb9fc7207","ssdeep":"96:0fXLjjA3qXkDai6xPtZ2ulKgRb2vbEj+U+Nka1Y34XJSq6F077W772E:0THvXKahVPlKXT4NjKYoXJQ0vW7T","tlshash":"b2b1283278a239036cc075f7794ccbce0e50053ae94398c3d2ea9e86d294f1cba69194","size":5319,"data":"","first_seen":"2025-05-15T07:17:42.12509Z","last_seen":"2026-03-27T02:24:47.36544Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/Z3GeUgWLIEDyEd2bNu.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4259dae3f27b88beeb0485fe11662d4f","sha1":"338190d823ac086343916cdf43aa85e2d3581012","sha256":"695e520c77961f4c23208d2aacd060609c37e3db7b40842972e45e1ee50f4a8c","sha512":"fc180550c7f7e60482fee10d23bc2b38ba2043321e130da54d587b469f6a8206b080bea706e912a4993d39e13b911239ff9a547c64396f7aa00777a6fa79720f","ssdeep":"384:g3ioLXabmFpBl3Cuaru1iacFmxMYanqGz9biifYl:g3ZLXemFp351iBFmxq5rQl","tlshash":"93a2d7606030c23afd55b1e05dd05c4a288d1bdaca9991daf1fdccc377c25b4ace929d","size":21902,"data":"","first_seen":"2026-02-23T08:51:53.642766Z","last_seen":"2026-02-25T20:02:51.302906Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/uf6nMkjTZMBZyTxjD3.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f59e042ec1bc3649aac1a5a608675e0e","sha1":"80aec7f4d669cf90df0c41b59d7f48edcc1d3bba","sha256":"8f66d9756452e2ae821a6696b7dd17c17564dca4a059352cfb963d70460618ad","sha512":"65663105fdf103b35894d37036c3b510d94fe44779ae222edb4cb6c51fb9a04eb2aa6d99237730fed540ce243234a1e1b26ed9207252ce6cb4c72bebe5ce0d14","ssdeep":"","tlshash":"48517709d462afb3caa39aadb2db2820e01827ebc618041150f956193f4ddf4573ff59","size":2532,"data":"","first_seen":"2026-02-23T08:51:53.67246Z","last_seen":"2026-02-23T08:51:53.67246Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"121189e361b1b6f3e7b0dc47fec6b383","sha1":"d98a2320209759d2f3f6d0991e45917703feb238","sha256":"c9c236ba3c81fd6f5cc61494d64d13153014817bc343fef249d9bf9826a5266c","sha512":"cdb2ea94f746977e8d6ad0d01d7f131f8adf9c32976e736d5f9b0a72151c1ed651d8fb31e27a5624bc5b8f780453be496348873b57a05c3a6743593c661389f2","ssdeep":"1536:kQ870ziaayzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:78chTl49dx0G","tlshash":"6e43d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","size":58763,"data":"","first_seen":"2025-12-10T19:39:08.014146Z","last_seen":"2026-03-28T01:15:14.30461Z","times_seen":12539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/P0VZgX6hbpDYlgohlj.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ee56ba5bf731e91cc886ce5208c3a78","sha1":"9f44a37cb2167831331009896315235047133e90","sha256":"9a7fb6f8c922a5bd73f98f3a84745d42f21f92a94c8499654f5721f23f4c0d15","sha512":"8aa10f79df8d2daa14f4e8738ceda908977aec9c27c8be3d5379e76b13c3f149982e4de26b1ecd9a19ea22d95bb7225d8284c2de636d6062a9dcf20a4dc3e707","ssdeep":"","tlshash":"cb51706d7cd89435c6bb5dc4d4270812a62b0b1d922899f1e4ae6d8d2a3e444a17ff3c","size":2930,"data":"","first_seen":"2026-02-23T08:51:53.640751Z","last_seen":"2026-02-23T08:51:53.640751Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8beace18c7e835864af22a8a0f0dc02c","sha1":"25b2f68fb421f92f1e303264001891a28330cff6","sha256":"6bffa7b464833f18a3e1841bc53485c289b6b4228868294f8eeadc4af0e96044","sha512":"78c1e3b56e174c5b39d44fec9e92892018e13e872e7423d7eab9b963de302c937800f71f2fe458d23910fedd377a585fc21949a2cee11e678e6218c941e0663d","ssdeep":"","tlshash":"cfc08cc4a0c22d001a02686424af34e89034442b79481b028cd4d8882e230b49233ee8","size":147,"data":"","first_seen":"2023-10-29T04:01:47Z","last_seen":"2026-03-22T16:13:26.000297Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"287a9120c4e538d53f08a9461e32c69b","sha1":"38265c6318f79de165c3494ac6b9a9cbf227f2af","sha256":"b48f642e24274d932d7719487562be9632f1596740a2fb46c58d9836d0b0256b","sha512":"b1f5f644a541cf1fc560c662d6e4df66bcb84f627df991d0fc0c051f314761baa806c0a9307137e091a9ecc2bcd4f386efbb3bb2d4269c36254b97a584b4b1f2","ssdeep":"","tlshash":"53c08cc8a0c22d002602a65060af39e4b028842b70885b128ce4ec883e630f58233e98","size":147,"data":"","first_seen":"2023-06-18T17:51:32Z","last_seen":"2026-06-03T11:25:17.795413Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-06T08:41:47.681458Z","times_seen":5561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e945cfacf91f6c0a27635339d8d37ff6","sha1":"4f09b7c9214edf2a190c29e64b54d2b6a69ca5c4","sha256":"9348a780a91a576eed3adcc0bae4d097a1761cbbe9fc3fb35029e60e604355c2","sha512":"2ac7ee471a447b022595f7e876b74c45bcbff208d1432e42faa5d3d152e034456910bd5fa6c25fc8a2cca51d32ea9f98b352c88465071c8f8e79d99b893f271d","ssdeep":"","tlshash":"515122193ad4b7298257b0b4987fcd49f520053a02e8d8484b1cd6fae82587dabb9cdd","size":2985,"data":"","first_seen":"2024-06-08T06:59:42Z","last_seen":"2026-06-06T01:45:51.956187Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/NvEnybrgvmdeuOe6WR.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5b54ab20c12086417897281396199e35","sha1":"0b7182c95852b7485ec22c2a3bc08d8375f54f55","sha256":"8e80268fd22264585a87b217236a96923d390685f5cf77258b9d1561f20a9795","sha512":"89a33e93e8760f76af57188c5e47f53b42646513ef7d2c5c23eba3694890f32447a4895b36238d4c7ec061edb5cf35aa41f68b271917ed1042b288b672f70b43","ssdeep":"","tlshash":"d5317099b81a8fbdb0b74c395907c01590184bdef335eb45b0e84a2617e6c78626ab78","size":1683,"data":"","first_seen":"2026-02-23T08:51:53.638055Z","last_seen":"2026-02-25T20:02:51.315144Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/9mnvA8EnEWDqLbue3b.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ed4df6c23ef7a053df5a001f79b0835e","sha1":"7baeb5598de295469719a2c117b0b9e745776db0","sha256":"2bafc50a57a93d6eb3706c2ff5072408f48e066e76d11aaf43fa1486142a8d1d","sha512":"a49ab310f9ca317273afac7d5088ab4119caedc497fab89d42b9c5dd1dc08a6ceed3a17520b7c4456047fe575725ad942a5fb468d7ad5efde14ff2f7e9cb9921","ssdeep":"","tlshash":"7e0110acb45312f88522495450152552618d1e9e273c09c2a269052adbe58bcbb3fb8c","size":704,"data":"","first_seen":"2026-02-23T08:51:53.613767Z","last_seen":"2026-02-23T08:51:53.613767Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e540b8a6e0ab05ba69616cde0434fc1f","sha1":"47bb48e3c85711567e0474429c8aaedc0f5908b0","sha256":"24b10fd9933a855adf5ff0f46d99fbb696e71d5d1318888d0da03d992acc0b02","sha512":"b52299129cc124f49e167c26e6a249c4d68f6cc17b4713a3d26386d5882ddecc7aeab09f6ba308ccc50618b7d9b6372ac687c3dcf3be142af091a6c678571426","ssdeep":"","tlshash":"74c08cc4a0c26d00a602685064af74e8a024443a70486b028d94dc482ea24f48233e98","size":147,"data":"","first_seen":"2023-12-31T05:29:03Z","last_seen":"2026-05-15T03:18:53.072985Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/cOFHfbkdHNCL8THbBV.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2ff9fd5d77c2ba330c316843e2832db3","sha1":"e8605a85eaf8e5907d2eae0898890fc94514b85d","sha256":"3fd3d2ed643d2828250614b146740fe8740f055e2d41beb9c8be0d5364f08c77","sha512":"447005498bbb08478004d9da7fe6c95ffc1488fb061b93dc25b713e38438fd0e561ddd5694c19f134624f053c36c1048b79c09ce563ba7a9bd6cd8ad5ce46ddf","ssdeep":"","tlshash":"e3d0970c8860a2b2a0320ddcf33130238a303e1633b88c86e04e053aab654fb209ff4c","size":260,"data":"","first_seen":"2026-02-23T08:51:53.646338Z","last_seen":"2026-02-23T08:51:53.646338Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad7e35095f9a2452e79ebcc25fb81251","sha1":"3533927767ca29d6e0b31695488ef232872758a7","sha256":"91ae7e639fdbf3e17c99d0a5181209e00b574191a993bf842a3ebf8836c80f6f","sha512":"b2f77b83a888c755bc0032d77272ab73f68fa24ae71de4d16427b1347eab3608698ebadb6b413d7cd7e0ee92ae78e5a1dd3f785d92ce3f3d1f5ffbda94cc7e3f","ssdeep":"","tlshash":"a4f09e1b1c47b1ae1bd6a5baa77f9d1b22112246319054137e0c80286fe083c5fe9e8c","size":508,"data":"","first_seen":"2024-06-08T06:59:42Z","last_seen":"2026-06-06T01:45:51.958344Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":113990,"data":"","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-05-12T02:27:32.127067Z","times_seen":3808,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"585bd093398adcca9c32b34732c37bec","sha1":"96a392e95f918d9e3f1bdb9580e449d2efae29a3","sha256":"61650dcdc8a73394c151be14084ae4baaeca952889b4bb593be70922e4150d04","sha512":"0775cc084b6d8ed8f39b1e784110ccd26a3dce8b19412f1045b40bca5a8595b3f9393ca0ef88cbbe253c4ab172b45f881940d98167de52998a866041b9d1bd4b","ssdeep":"","tlshash":"f311aa2824ea160c8117ba95b1bfff0c762c612565e4dc0c814dd079182edbed6dd9af","size":1070,"data":"","first_seen":"2024-06-08T06:59:43Z","last_seen":"2026-06-06T01:45:51.961931Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de3ed6f62fa4508e69491bd89eb274b5","sha1":"eb8c50c4a1b5641abcb034fd7f88a95d15ed919e","sha256":"909705f246c8ead542b59e1f02453e6769864dcea4c1cfe24b8818a3a98ec0a3","sha512":"e7891d59adb2ea08b3810e31000d3b5df108358dc50347cd0bbad5fa3bfff24b170e934cbbce1bebc9baf1a352e9a1d34afda920db85c6f12e9759649fc03295","ssdeep":"","tlshash":"2ef022d91997593006eb11ff2b9e301060304003e908ffa0346f05046fed72ae7e1be8","size":618,"data":"","first_seen":"2024-12-08T21:22:12.696799Z","last_seen":"2026-06-06T01:45:51.962696Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/swiper.DXPMWcF4.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"34b41686c14550e29a12b8098d3def50","sha1":"a7d0f950913be35d7025c02d558482395f41f13f","sha256":"ed6b53d498161658edd77d9bbc31f359e5de1bf97c80d166bf1c7fd71d210f65","sha512":"9f836a72e9e0bc669e1e3a827684d831b436a10adb1e46584a00928102eed143954503dade15797cdd0740cbccb555b4d37d9bb9fcb7f12d0aad62c15512cbc6","ssdeep":"3072:sGvDusNtFqrZirVK0v0EumyP7EhOh0DvP/r02M0bdH:sA6ItFqrZiU0imyPYhOh0DvP/r02TdH","tlshash":"6bf34a997250b13252fb19e742768111b37909497809d4e8b1ad9ceb2d3b84812ffffe","size":167472,"data":"","first_seen":"2025-10-26T19:18:50.691449Z","last_seen":"2026-02-25T20:02:51.301496Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/yLAIU26dz1DPZvN9xl.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7c169b08f49e4b9aa1a2f9c3385de140","sha1":"b00c3b59b036a471549c702176e2cbcecb1b6e6a","sha256":"10f915ace3b7c4ba2a813edc6e36f8405d6369fc230bb1b05ef6a57f817251ff","sha512":"8a4a6f03d1a8a4a94a6c748a3008c931172bd45311c5514306b4d4a63ed64a0fd9957b11d22cd61478de8620b446cd029fb123a633a5a69402da49c16086babe","ssdeep":"","tlshash":"dd01258c48f6cbf9d49702643d8a10a5d050674c9b35d866f06cad32674fcf095de738","size":790,"data":"","first_seen":"2026-02-23T08:51:53.677313Z","last_seen":"2026-02-25T20:02:51.606733Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e88e37bf19ff5d2d05764eb7c6b9234d","sha1":"32e505345d58193e56af7d361cdde032d12fcd02","sha256":"0d8dc23741ac0e3b6fbd5506e0d6314f7e19564e5af4b8301712bda1ff03940b","sha512":"cb21fa594c0fa2b795d524c910df1847434af505b6d509e4bd8a731e1756f0400dabd3c7a6fbae686fef0ecc37b25550fcd60410c2dfba393e1fbf234e88eab8","ssdeep":"","tlshash":"c3c08cc4a0e22d202602a46020bf25e49038402670881b038c98d8482e221b09233e98","size":144,"data":"","first_seen":"2025-10-14T12:31:03.870591Z","last_seen":"2026-03-22T16:13:25.992528Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-06-06T08:09:57.713702Z","times_seen":2252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e4a98d3f4d7e849f032e39297c9a877d","sha1":"e3484d6ac23d451ae9f7d16f16b5f60ce61b6c8d","sha256":"308dc6ad27fdfad4bc0b0e2b67e77612facb884c75ad9021f02c5a05052d359b","sha512":"2f353724c98db8ecf62f9a61e1e424f934f7f4eff1818b2b19bdb9bddc9c3887dd0ca6b24f42b93f9307ed4c30f4b723d9a84c5e2bc8fb9844107be95119ee0d","ssdeep":"","tlshash":"b3c08cc9a0c62d202a06e95010bf38e8a028842770891b028de4ec483e330f48233ed8","size":150,"data":"","first_seen":"2024-10-17T16:12:41.128495Z","last_seen":"2026-03-22T16:13:25.998177Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-06T08:38:55.776923Z","times_seen":6449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-06T01:45:51.974497Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0a135a3820c44612d285347e945db1a0","sha1":"c751ab64ae029f5969e555a5dbec7dc15eb8f339","sha256":"6a02a962e9797eb8838be4ec5b3dbd47c5c6ced0fdee45ff8b242e92130a9d61","sha512":"92028e04908a6c3cdf03c75cf98c4678eb7bfbbdd11939716bad337599380d34293b296b7a059358cbdd3632a32b9f6b64f6768256fd20aa2efb83ff15d3a65f","ssdeep":"","tlshash":"6ec08cc4a0c23d001a22641068af34f4a034406ab14c1b528e94d8583e230f09233f98","size":147,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-06-06T01:45:51.976167Z","times_seen":991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/iloA06nxPYDDB1mooT.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da9acc1b15028296e79c72db495d6704","sha1":"065e552c026263f0ba90e9dfced3798290bacbd8","sha256":"c97dab6c2fa0c2ad969779d4ae01dc7b868adfeb5a9ef7e19831c7269bc156d3","sha512":"fd3b30d6910e62980a9a51d8d07889ef8f7c9d0599fc71aa0e0200f73cfc856df21db574c3265b34aaafe3cc46ae9431c1040bcbe18d6ce3a3cc1f9c421fbb7f","ssdeep":"6144:ryX3zGvUZzCQpKcj+TtsUWHmrWUNiYFLqxafdnhjXIwR/RVx3dw5EseeyCvDaoXV:IL","tlshash":"cab48488d1b9cbf8e57f674e744a5820e19d9fdfc1111129b6fd0e322e95ce09a38368","size":513378,"data":"","first_seen":"2026-02-23T08:51:53.675628Z","last_seen":"2026-02-23T08:51:53.675628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-06T07:57:09.073832Z","times_seen":4057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"be6c6f7a537854b4766695802dc546e6","sha1":"6fc4b0a8b4898319df310010b6a93cf0fcbf195e","sha256":"6bf3090aadfdf6d515a11269c1d0784e258c8da21d83fee2ffdb735cf94931c8","sha512":"15a26ab3e9403da16169c06258d12c628d4a724ef226dc3a27fc916af95979a00b5cdce55af3148b1606a666573c182ffe469773a9b8de5aedafc4f65e497339","ssdeep":"","tlshash":"4bc08ccaa0ca3e202a42e55010bf38e8a028842774991b028de8ec483e770f58233edc","size":158,"data":"","first_seen":"2024-10-17T16:12:41.154905Z","last_seen":"2026-03-22T16:13:25.987724Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df5e904e2a419fd848b94f0d8a9c5338","sha1":"ded3da98e8f557e3702034442c0527b9b6f2939d","sha256":"f46e53c31226b8a14d07eb98f71e7e9a331f5c34b36be4b50c4b23c4ad71796c","sha512":"c6afea57dbf39cd7d34d2ea55d4ecaab8c57547ca2ac0320e45e3e39d6b2e0388df4247c91746749c1f4d57539ec42ff0576a2abf6a9f090adc79fefee60c97c","ssdeep":"","tlshash":"90e0c02a18ea18b99757a2b6313ffc053102300d626883727a4cc505ef91d7f87a4f8c","size":388,"data":"","first_seen":"2024-08-25T20:57:00Z","last_seen":"2026-06-06T01:45:51.964904Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd1bd11fd11651336c660ae4dcaffe70","sha1":"247c11c7aa0d5767918f2cc20c26f1e7aecb77db","sha256":"77bc3df32a0c1eb2d90672990d2c97863055bf9ee0ab062a59a0e235e428a122","sha512":"2807830aaf907a83d221d0da285768e897ff63517947cb2a3979f5e1fbda93e80abf24deb0b7692cb8874b8cad0be6acfc1c1f608a5835474ce7dfaf0a831353","ssdeep":"","tlshash":"6b01eb230cd910af6f2710bd2b3faa1236b01113144ac420fc0e8720af20e7c1724acc","size":700,"data":"","first_seen":"2025-11-11T13:02:28.956822Z","last_seen":"2026-06-06T01:45:51.977865Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://qms-ai.net/\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Feb 2026 18:09:09 GMT\r\nexpires: Wed, 17 Feb 2027 18:09:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 484932\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-06-06T09:01:03.440799Z","times_seen":14358,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/9mnvA8EnEWDqLbue3b.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/9mnvA8EnEWDqLbue3b.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/iloA06nxPYDDB1mooT.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrJofLchU75toiASi6eG3T%2F6PEDAjvBsRddWpgiTPaahOL03X%2FjUAgpBaVq3%2BJ250WHCR7XN4XrgZ0bgfZsnqZdFY9PXWso6a%2FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"38a885e8afdb7eb6175aa365433150c0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b1a0f2f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (703)","md5":"ed4df6c23ef7a053df5a001f79b0835e","sha1":"7baeb5598de295469719a2c117b0b9e745776db0","sha256":"2bafc50a57a93d6eb3706c2ff5072408f48e066e76d11aaf43fa1486142a8d1d","sha512":"a49ab310f9ca317273afac7d5088ab4119caedc497fab89d42b9c5dd1dc08a6ceed3a17520b7c4456047fe575725ad942a5fb468d7ad5efde14ff2f7e9cb9921","ssdeep":"","tlshash":"7e0110acb45312f88522495450152552618d1e9e273c09c2a269052adbe58bcbb3fb8c","first_seen":"2026-02-23T08:51:53.613767Z","last_seen":"2026-02-23T08:51:53.613767Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/upload/img/691199e2cf21.webp","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"GET /upload/img/691199e2cf21.webp HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21858\r\nlast-modified: Mon, 10 Nov 2025 07:53:06 GMT\r\netag: \"691199e2-5562\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UOhUttPf4lG%2FmPrLC5oXwOFLPBsZgm40wnJAEY%2FrBG7UXCdjrlbkcLJeQEQdexVqcj8RuJZhtOvKSYI6TYggngItEc%2FxEdRK0bzl6mKW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b1ace6b4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0066791fdeda53562e0564859b510f6d","sha1":"d5edb0795dcd5cb7e403d0f68c7a2ee7b4be7cf6","sha256":"3c21f3256091c585e2c7eb0d98269acec3e750020bfae6a036883bf5fec57392","sha512":"5720bf882d50da0a6511ef94272c324f217d33a00a778a5b0518c70d9111ef5e49d783bf373b44b2f172ac82f746a8ca42f33dd239ad00c55f321ac654ff5b4b","ssdeep":"384:0lBKzIm6VlSHx5N/HcAaR3Ov4ihQc0AW0GndspWTEInx+S+N1RJRDoXQ:9R6f+xgn+v4wQxPnKlwg5DZ","tlshash":"a7a2d0dec758c2d5a07b63c41355ed18bdeb04c0ca0a1de71b05cdf0f995aba6a4d278","first_seen":"2026-02-23T08:51:53.615994Z","last_seen":"2026-05-24T05:24:57.72612Z","times_seen":5,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":381,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/assets/AmmVF6iufOY-6ciyr6.css","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /assets/AmmVF6iufOY-6ciyr6.css HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wnS8c7munq8GHR76ndHvEUMX5g7YGNUonDjwhh84m%2FakLrWRczWBTk7wjtOW85eongJewljugDgEgRB5QKuRDLAegwklnO%2FUeD4%3D\"}]}\r\netag: W/\"07017b105e248ed2237583eefc28cb93\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9d257b18bc709cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50450,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (50449)","md5":"18aa18aca7039f9136e15ab2abfdcdf7","sha1":"8ab2443525ed20739c0504a899a45e8887a13a10","sha256":"4447b91257f74ecd271f4fac275229fde07cb7e8ef28dddcb3dc7df0811ae84f","sha512":"1a5277688a6f9e379e6c5933311d8109559e4e65e3fcf73d6ce463b9edc245d453fb485008cef17ae412da8fe2cb7727baf2ba3ec981aa8564116fe5e3d437c2","ssdeep":"768:uAxh0Bg78u5Y0Jwh0DNu95sRlDYxgRvvTo0NBW1sBe:EBR5EYgo0Nm","tlshash":"b6337654256c633eda6bf16358ff46d91910f713c1377a4aba02733199dfb822231aca","first_seen":"2026-02-23T08:51:53.622117Z","last_seen":"2026-02-25T20:02:51.588112Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/assets/Pv1pvCAw2zBS17_dpn.css","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /assets/Pv1pvCAw2zBS17_dpn.css HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1XBH%2Bq82h8Zr7Ly3uiuPOWXFyvDJs65AaWLT8IeJbwflUfsHNV5NPjBjYjtGAszEIE8jSP0Q%2BOkosn9%2B99Q4A2GfJl%2F1XS%2Bg3s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e4e18fbcd3b59da8ccbcea6863b556db\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9d257b18cc819cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2285,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2284)","md5":"1d05703cce897c29046715d007d74f1e","sha1":"53d486c3551997abe790771033ef1eb46057fa39","sha256":"e65540440b381d92458aff168ed8c0983537fca5b685f13755aa4aeb5f2b3902","sha512":"7548561c6089f474e0451bd1227ec62095e17b54287c4b544df0bc1e460744eab1615d25abfd76b778dd202e627f4bcc722e5467e858d4ee0dbcc305cd1dda54","ssdeep":"","tlshash":"7a41d467daa045faae33a5950f5585cab13ce9208e00df72b580d11c8dcf6f626136ec","first_seen":"2025-04-22T04:55:21.194396Z","last_seen":"2026-06-05T14:27:09.948764Z","times_seen":56,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/BaiR1QeXA1Dwj3qkfZ.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/BaiR1QeXA1Dwj3qkfZ.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/sfNMsx22hoD-EG5Wcw.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZDAJcz7%2BsNcAyMFPny881vnY8%2FqH07RqtgKSZxBZPW%2Bv7WYGHLQvR9%2FM0kc6ucLwhXFmMf3FVLfOdX80ZpZ9hRfmUR6jAIuRWA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"23b16c85c26461e6be4eb5185684e45e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b199e4d9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (542)","md5":"020e0123817d488c2e190866d5d0f5d9","sha1":"61a703f96e54730fa4e93b780727e94c78222979","sha256":"9390135ed6d644e4a7ab47db70c7a43929ccb5899b13fc91b32e1d73a6e45c54","sha512":"00c6722dbad2f4707f73666bf9feca8d34eb008f353143b9efde8d484c9edda291fcfdc5d6f342b2c0a7764478998da80d003889a62eb269737693a6fbfed8d7","ssdeep":"","tlshash":"98f08b0b982186be95a75d542942306110483eacc72498c4e2f92575a792966a4aef58","first_seen":"2026-02-23T08:51:53.626237Z","last_seen":"2026-02-25T20:02:51.484624Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/#/register?ref=357577","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-23T08:51:17.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dk2hv3XRW8mIkIgRHJjBkus4kcC%2FO1c1cT2N0f%2FMP4oR8ipC1Nz93l4CblFo0l5qgyV5FDQLOVgd2QmlTFsSRad09rrUS9AsZTs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d257b0408497dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217293,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (58107)","md5":"af043800bc6f5075004e96b051cc1192","sha1":"2a0f37b67670ee8648171249b90e6dbd6474023d","sha256":"991d7d078e578e94f45a6f9776988c9747e1873f14099e680f632c59e7f70085","sha512":"cce7d7fde04f05de88d1e8a988f7bf260c0687f17351794fbb9ff7163b0644d13eccb2f45e4d5f2ea55c69bca612293a2acc9c140b46bc2de55baf7d15eddf62","ssdeep":"1536:fSfHQ34OOb+gsPO4MD7czwKCfymtGKnXWpV9zWblHoyGrmVcxq605HJjPxRfoowx:v7","tlshash":"7a2428a153e0e2d8f755832dd5316c3621bf34ea7be0c28cc8cd6677aa1a8c9451cd6b","first_seen":"2026-02-23T08:51:53.628397Z","last_seen":"2026-02-25T20:02:51.416168Z","times_seen":3,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":44,"dns":20,"connect":8,"send":0,"wait":67,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/59KSjoPY1YBgeywT45.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:18.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/59KSjoPY1YBgeywT45.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZrx1KASLxRgPxQKGdq60FEvya692ODYoIk1%2BYlaK7cka8pI9Vf52Ais9gaBnHsepVybnHvLCjxDkwLiXiTeR34iFQm2SDAy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"96b812694ebcc7d9c5bd4033fbe69918\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b0589aa9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1579058,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6914)","md5":"fbff5567fcf10909db8c2497d09f49c0","sha1":"99638b33cdf2192fdf938028ce11e3dfc7282219","sha256":"f1c083c6f6b11fa135d85d71fa4f5114e6bcc4ccde9c2ce97184ec5d2befd000","sha512":"af59ac772ec01c6eb8dffb7ec2775d0304656779d06ce9b95917cd98ab9a96ddc73820412004d9483059172897d02609cacd0ac910d6b0b234d8004d405110e8","ssdeep":"6144:PKKv3fO48SMcZN5COAT2CReeh42pHyykYkThuCpyMo22:Ptv3fO48SMcZN50T4eh4QktpVo22","tlshash":"1e25f9281a6bf744e419c0dbfa373d84c59dd18aa44724d24f755bb30ba2793eaacd03","first_seen":"2026-02-23T08:51:53.631098Z","last_seen":"2026-02-25T20:02:51.58364Z","times_seen":3,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/favicon.ico","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:18.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KHRS9ZNal4iSbpgHS6n4ABTE76I6lkavylQtAa7VPjtj68RNs5kY3yJ4tuZDI%2BtFK9r%2FTh7AGV9PxOMne%2FVD04vd7rDojTdkrSg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: 9d257b0b7e879cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217293,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (58107)","md5":"af043800bc6f5075004e96b051cc1192","sha1":"2a0f37b67670ee8648171249b90e6dbd6474023d","sha256":"991d7d078e578e94f45a6f9776988c9747e1873f14099e680f632c59e7f70085","sha512":"cce7d7fde04f05de88d1e8a988f7bf260c0687f17351794fbb9ff7163b0644d13eccb2f45e4d5f2ea55c69bca612293a2acc9c140b46bc2de55baf7d15eddf62","ssdeep":"1536:fSfHQ34OOb+gsPO4MD7czwKCfymtGKnXWpV9zWblHoyGrmVcxq605HJjPxRfoowx:v7","tlshash":"7a2428a153e0e2d8f755832dd5316c3621bf34ea7be0c28cc8cd6677aa1a8c9451cd6b","first_seen":"2026-02-23T08:51:53.628397Z","last_seen":"2026-02-25T20:02:51.416168Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/init?rts=1771836679765","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:20.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"GET /api/init?rts=1771836679765 HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nst-ctime: 1771836679748\r\nst-ttgn: e67a816b2abfcdcc86be974c77b4aa8b\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:20 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPRIQlpUMEeFwgbZ%2BAclc4crbNE0g2dLkT5UhKKsGBTBq%2Bs9SYwarL9ZTFuFnTzrisqte1QUaMOJ443rvNAmG9jMFDUfJr6am519UlAq\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d257b135eb7c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5644,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (5644), with no line terminators","md5":"ec1756bba5976cb18d61d73efb6d85cb","sha1":"03c57831a041ab56545a9a265c28878d9fbac94a","sha256":"d1bc4ae6f10647ae53254f68f2d029c9567da81071beb7450694f4ed319e4709","sha512":"2e8211c0b10c226301ce9344af898ee729cace4b99c81dedf1482d9974a996989fcc5db9363cd0cefa2b82be58d3fb64b164d9b9f99364c86f26f0ff442c8e9c","ssdeep":"96:Y1H0NRmHep/z88+7hx6XVi318VhCdqXBxQAT+kVCmQABPja2B13:YB6mBlx6XVGYX/bT+qhBPjnP","tlshash":"ecc18cb08e4547acf728de8eddad761b3a65fb381af6b0c8688f42407c8423a55004d2","first_seen":"2026-02-23T08:51:53.632999Z","last_seen":"2026-02-23T08:51:53.632999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":14,"connect":10,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/lang_j?rts=1771836680370\u0026l=en","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:20.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"OPTIONS /api/lang_j?rts=1771836680370\u0026l=en HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://qms-ai.net/\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:20 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzd3Wg9JUypE6UWuXfXPBVTG1e3gCbSwfIYLSXfxZHZGNx0NH9zTn09jGbM1Qb6kME1bUhfLK%2BJDs5L%2FogjOTnxLrv8Xkd0FkUx0IKWi\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d257b146e3ee9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T09:09:45.894417Z","times_seen":16172309,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/assets/Ct3bo4imxUCnIpyPjK.css","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /assets/Ct3bo4imxUCnIpyPjK.css HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYS1EThd9RJRde0H9tQTbyzlwSCIesDdNNFmAWGSr4nlg%2BMW7GktF%2BdHkTUTfMX%2BEBDnv9tXqicsaUH2r5r2ZHcFQSPM8gbLJ8Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"63e8e0f06099db1b3aca59448f9e9bd8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9d257b18dca19cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1467)","md5":"305d70c345bd55dfec63c84d19a456b4","sha1":"6c43f5f77e24d497b7120643afd44e8efb9ce793","sha256":"7f8faf3ddad50ecee476cdb37f00b3c8f62ee25c47bb753c87ad7924445441f8","sha512":"16afc8da106a3376edbc4bc16a710a830bd1bae240502200ed376618780b4b8748bd697872435100b7998acadb3ead263708f863eb82d69471873e3d10f96829","ssdeep":"","tlshash":"b8314c080d60ef1a2caaaff3e5c4da8b2c1855b35fb39d45d140612687958b53f3fe68","first_seen":"2025-04-22T04:55:21.189655Z","last_seen":"2026-05-02T20:23:32.669352Z","times_seen":29,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/NvEnybrgvmdeuOe6WR.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/NvEnybrgvmdeuOe6WR.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXj0cYuWU%2FnLr%2B1xJspdBRp7JoaCXuVDi5ezl5hL4Pr1g4vNlnCHQmnAfRA0I1hn9vi0n7S4znzttgGM6%2FYyiOk7oovSE9aZNV0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fd1cfc365f171110c4a96062a1a7d7dd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18ecb69cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1682)","md5":"5b54ab20c12086417897281396199e35","sha1":"0b7182c95852b7485ec22c2a3bc08d8375f54f55","sha256":"8e80268fd22264585a87b217236a96923d390685f5cf77258b9d1561f20a9795","sha512":"89a33e93e8760f76af57188c5e47f53b42646513ef7d2c5c23eba3694890f32447a4895b36238d4c7ec061edb5cf35aa41f68b271917ed1042b288b672f70b43","ssdeep":"","tlshash":"d5317099b81a8fbdb0b74c395907c01590184bdef335eb45b0e84a2617e6c78626ab78","first_seen":"2026-02-23T08:51:53.638055Z","last_seen":"2026-02-25T20:02:51.315144Z","times_seen":3,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/P0VZgX6hbpDYlgohlj.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/P0VZgX6hbpDYlgohlj.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/iloA06nxPYDDB1mooT.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4d2nlBA8On5tqx2ei%2B1zzEZDAl7UvqmtbsOAhuEYA301kAAJh5doEFAO20R2hZq0QQQ4hSa5Oy2szRLh85lZpjgkC4U2B1Ejuk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f600a0e3685b83c91aec6e57dce38380\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b1a0f369cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2930,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2929)","md5":"7ee56ba5bf731e91cc886ce5208c3a78","sha1":"9f44a37cb2167831331009896315235047133e90","sha256":"9a7fb6f8c922a5bd73f98f3a84745d42f21f92a94c8499654f5721f23f4c0d15","sha512":"8aa10f79df8d2daa14f4e8738ceda908977aec9c27c8be3d5379e76b13c3f149982e4de26b1ecd9a19ea22d95bb7225d8284c2de636d6062a9dcf20a4dc3e707","ssdeep":"","tlshash":"cb51706d7cd89435c6bb5dc4d4270812a62b0b1d922899f1e4ae6d8d2a3e444a17ff3c","first_seen":"2026-02-23T08:51:53.640751Z","last_seen":"2026-02-23T08:51:53.640751Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/init?rts=1771836679765","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:19.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"OPTIONS /api/init?rts=1771836679765 HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://qms-ai.net/\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:20 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aU1Pundx6EB4joYdsarFnqC18Y3jq64%2B5oMzDGu5VMzM4LBMfGc1IBM8zPna%2FiUDW%2BvBvMnnaqaRrvKmu560mG1LHIjB55FGdxipeUII\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d257b10ee7ee9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T09:09:45.894417Z","times_seen":16172309,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":47,"dns":13,"connect":8,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/Z3GeUgWLIEDyEd2bNu.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/Z3GeUgWLIEDyEd2bNu.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dM%2FNKF7OmV8smiOD%2B0b5PCBFNWoFDrV35K1pghMcahD%2BAhCQO1fRpNQGHYJLHBA%2F%2B37iy9hNAq3kPwTXRWHj8SIMfTznAvTw3r0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4774788b3cb5d4f36dfbe9620ceeb36b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18dca69cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21902,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (21901)","md5":"4259dae3f27b88beeb0485fe11662d4f","sha1":"338190d823ac086343916cdf43aa85e2d3581012","sha256":"695e520c77961f4c23208d2aacd060609c37e3db7b40842972e45e1ee50f4a8c","sha512":"fc180550c7f7e60482fee10d23bc2b38ba2043321e130da54d587b469f6a8206b080bea706e912a4993d39e13b911239ff9a547c64396f7aa00777a6fa79720f","ssdeep":"384:g3ioLXabmFpBl3Cuaru1iacFmxMYanqGz9biifYl:g3ZLXemFp351iBFmxq5rQl","tlshash":"93a2d7606030c23afd55b1e05dd05c4a288d1bdaca9991daf1fdccc377c25b4ace929d","first_seen":"2026-02-23T08:51:53.642766Z","last_seen":"2026-02-25T20:02:51.302906Z","times_seen":3,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/cOFHfbkdHNCL8THbBV.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/cOFHfbkdHNCL8THbBV.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3kKr8jvh7nMB2mn59l02Q74T7PQ3unKa5KsCkzHve0nA9rWiQO6MErpEzD%2BXGGcezNF%2FjQwMy3PhZ3cqZDskl%2BfL3ioBv8PePU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d5fc9576a76c8ea8fa711fa5bf38d1df\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18ecc89cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"2ff9fd5d77c2ba330c316843e2832db3","sha1":"e8605a85eaf8e5907d2eae0898890fc94514b85d","sha256":"3fd3d2ed643d2828250614b146740fe8740f055e2d41beb9c8be0d5364f08c77","sha512":"447005498bbb08478004d9da7fe6c95ffc1488fb061b93dc25b713e38438fd0e561ddd5694c19f134624f053c36c1048b79c09ce563ba7a9bd6cd8ad5ce46ddf","ssdeep":"","tlshash":"e3d0970c8860a2b2a0320ddcf33130238a303e1633b88c86e04e053aab654fb209ff4c","first_seen":"2026-02-23T08:51:53.646338Z","last_seen":"2026-02-23T08:51:53.646338Z","times_seen":1,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/5NxI6caF2BZjnBkq7N.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/5NxI6caF2BZjnBkq7N.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/sfNMsx22hoD-EG5Wcw.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YCwCLKAgIDjx9uMQ0jrGag%2F%2BsYXbQmyFmbghEVAEzcr0F4wJcGcj0MnzHJEVSxqRDUJUCdOLGFFt0KszEnUefonut2qXOmR2GsQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"916cbb6fd1d302ffb17d99e757e8da28\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b199e519cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2251)","md5":"11f5d92d903062c88e57fd7599d2dd48","sha1":"d45d7825e5a737fd96886842dbdf1795e87e9fdc","sha256":"2b065ab88267e51706790512a417a6a5bf808a71617ac332cbbf2475840f704b","sha512":"acbc47b3b2c48b5a66b4ca1683c83478065f72fe3c2146b3be252489e8c3105e73fbf699c73dbd9071a993020665aced1f26a7adabd7e614d3036a75ff7e1db8","ssdeep":"","tlshash":"824186acf911cabca6774a3884424050720c0fdfd120dee4e17e1e225bd6cb4756ab78","first_seen":"2026-02-23T08:51:53.650036Z","last_seen":"2026-02-25T20:02:51.261103Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/jccg7UjpKICTj41bwz.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/jccg7UjpKICTj41bwz.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/sfNMsx22hoD-EG5Wcw.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DVaL3Go4ww9Q3O7y0Jzg584%2F6UcY2BL2TSF7823nyIkBvKqOO9OVsjwC3l1xVqAdsEi%2FZBuZhs2ILquv59tpKqhGMV1kuyCl38%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f23d3eb29195a77e86281f1e7267c5cd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b19ae5f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5319,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5318)","md5":"f20eca31d26444f86d341e8248d5e393","sha1":"eea45ad610a82735797481e12614973af252396d","sha256":"91e095ef2a074c9086fdd7605e08e311cd5a868bfbf6bc03e663fe47faa067d2","sha512":"51fe3975642562f95b8c8c4817078032301ff0ee5a9fbdadccf14ae5d6121df9518ca8d37ae6f12522aab16089c4d1d2391577b8ef843a586aa49c1fb9fc7207","ssdeep":"96:0fXLjjA3qXkDai6xPtZ2ulKgRb2vbEj+U+Nka1Y34XJSq6F077W772E:0THvXKahVPlKXT4NjKYoXJQ0vW7T","tlshash":"b2b1283278a239036cc075f7794ccbce0e50053ae94398c3d2ea9e86d294f1cba69194","first_seen":"2025-05-15T07:17:42.12509Z","last_seen":"2026-03-27T02:24:47.36544Z","times_seen":88,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/fJ0tY9yDZFBF8dHLp7.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/fJ0tY9yDZFBF8dHLp7.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/iloA06nxPYDDB1mooT.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fsIbDVK7sqw8z2ohg03XD8yKdUZjCffbYZZ8yIxk9vWyhSNJro1pyXvPUIkDTfYzEj0eX3nWuxYodVrfU1xFI2wN4caVPvCCDHM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c1c63037bf6de20a6a052c4cdeecb372\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b1a1f449cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21046,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (19682)","md5":"611e42bfa14d702f3b356dcd70bbd44a","sha1":"3731d31000afb2bc0f54ec4921fa437e5c3b7830","sha256":"51c44e428cbdd5ef14c5ac864d2ef5754dceefd7989c32fae426d1cb75d55289","sha512":"12f28dfde8fc1b41efa27372994a76eea92fa67e6666f2988cef0cfdefe5f2b1152f0c47971bd7019d5cb654d86548c72236b76258b2e22eaddc8e259330c1ef","ssdeep":"384:cOP5a28wa8HVRtzM9GMKZ6rOyrvUqKxnfDN:cSajwa81RdyGM1OCUD","tlshash":"3392837b00b007aafbf19320f101f9a627c91e866856b5f38dbf536259900e7b5cb65c","first_seen":"2026-02-23T08:51:53.653088Z","last_seen":"2026-02-23T08:51:53.653088Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:18.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://qms-ai.net/\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 21 Feb 2026 10:22:35 GMT\r\nexpires: Sun, 21 Feb 2027 10:22:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 167323\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-06-06T08:22:17.37993Z","times_seen":18247,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":183,"dns":1,"connect":15,"send":0,"wait":16,"receive":18,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/adi?rts=1771836681052","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"OPTIONS /api/adi?rts=1771836681052 HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://qms-ai.net/\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29chj8Vim4kjexbqYP4RpMFGBXYcphzj%2Fko9he69%2FwDyiNK%2BFJIwFfSpCWwy9KJej24vR1WmnmPwxTLRTnGWimTFN2nwGU%2F1tnDcDMAk\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18a91b767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T09:09:45.894417Z","times_seen":16172309,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/assets/sErwZ5PJiHD4CmPb0n.png","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /assets/sErwZ5PJiHD4CmPb0n.png HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/assets/f5gIYY5qWdL1zrufpT.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 42102\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4500112510b32c5ea87fa552a9498cf0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLU1emjZE8bnjIqywqP9bDiZwyQlWFOrVBaxWlexbBRIcmmZBXKuLroYtS5OWS%2Bil9qhRU1ANHhrpt5H8gOU7ZVr0LpYYzcZMXA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9d257b1aa8919cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1153 x 1082, 8-bit colormap, non-interlaced","md5":"21f7a5c98910109ae47dce0cdd4a5a4e","sha1":"30472bc8830caaac7f949a62dbf83fdfb939ce74","sha256":"2a338aff9b314364fc2b0c5718c7798bf2235fc3b80ba917ae3344d8c003d2cd","sha512":"10c04d263e07e026d6c3885e44cb8f3157b39ac0b185f6ceef7a2a838fa2c1dd7e61231c9a2cbeec944719243d669dfa2cc23aecffee7d3a0a05beff6adf3bd1","ssdeep":"768:VRx5B6pzh4G32j7UJlG8clhIwbs7OOlM5qFBbamxclnwryk1KvrP69w9uwvl:VRx5BkSG3iD7hJbuOeM5kphqweeKowN","tlshash":"2313f12583d62fc5c5a212b06a6b7781cb01983a0ece7a8d9139b5f87ccb4c1dcf9212","first_seen":"2026-02-23T08:51:53.655665Z","last_seen":"2026-02-23T08:51:53.655665Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/assets/N1eCh26u9iDN-in7Ac.css","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /assets/N1eCh26u9iDN-in7Ac.css HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWf2js9Evo9%2B95hgqNU3SPIm37KP%2BGVcFI3bf6iaWqWBh5p7dNGxuhX8%2FTwLD%2BMgx2l8wCizRDySHt36HyYhcTx%2FUxV6AX4soP8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5c10b0731e8e5015a20a47d52eaa4700\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9d257b18dca39cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9cd0259b2ea1270774b0bd885f3d6a59","sha1":"2bd73d35751da067cec030ba8558d8e1e0e08bce","sha256":"123bec169a48a47aaeb0595c6cca642ddbcbf14d78104b15cb8e836a746ab3f0","sha512":"77b2837f18040e9f7b1e3b229243a4863dab9406b64795e9227631334fe7088a19830d6dbbc9867efe8cad2251a8fc9ed6616a9f459ecbf02e5ce66a5516a26f","ssdeep":"","tlshash":"00d0224c2c40f07e29c431a80f0842dc08992204ff035fa43124bc3100ca6f62037c2f","first_seen":"2025-04-17T13:49:08.709612Z","last_seen":"2026-06-06T01:45:51.950469Z","times_seen":118,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/upload/img/69959d869451.webp","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"GET /upload/img/69959d869451.webp HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7806\r\nlast-modified: Wed, 18 Feb 2026 11:07:50 GMT\r\netag: \"69959d86-1e7e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJh936XVgxdzvyjGIs%2FUNs4f5dO0gUFlWAvk7A14eD7wBV1u9%2B2J%2FGLIJW3%2BxNaXzavXWOVgc3pPuv45r9kCmlXSo2vl9MMvsQ8gIAWC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b1a4e574b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 335x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"461dbcea93a47047debbb6fea90dadaf","sha1":"9737f2a4597b1fa1b9908adc58c7aa4d32a8a52a","sha256":"d5bd1ac8093a0ea6cf22ddfa7ab2b84b71d96efcfa367b887fd21a12907dd1b4","sha512":"81bc9ca1c6b2f2a9c102c4894339bce14591e9801d6ac6f085cc84eaece39a2fb73194abd9c1cbdce7a9cd3ee24538aea4e3afba0ccbbeda6ac2bfc073d1949b","ssdeep":"192:2hLUk32qJ9cVj2zYYNxJ83p9woiDYqJJQVdylu:2hLldKj2UYNxi5irOVdmu","tlshash":"8df19cb9fa18ff1541fa1434fce7c17445543af209f183a2b1765cb08f44842760aab7","first_seen":"2026-02-23T08:51:53.658277Z","last_seen":"2026-02-23T08:52:53.986507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":381,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/login_v?rts=1771836681366\u0026hideloading=true","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"OPTIONS /api/login_v?rts=1771836681366\u0026hideloading=true HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://qms-ai.net/\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6I6AcF5Rx83eseMEgNkUDEv3pT6%2BgQJY6l%2F8H0qfD4B2XIGzc%2BQIF%2FC2s3X0sg6YBt9CE3Ts1kAAaH7itxqisH15AP%2BOhEPQ7sFM0m4P\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b1ab972767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T09:09:45.894417Z","times_seen":16172309,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/upload/img/69959d869451.webp","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"GET /upload/img/69959d869451.webp HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7806\r\nlast-modified: Wed, 18 Feb 2026 11:07:50 GMT\r\netag: \"69959d86-1e7e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hk9DmUiOEU9lph4O9RqH74l1gOSQUVV%2BY26S2dh6Ov6vUMKQ225Nvh2qpXLLgaaJA8GlTzAsOCTOHj2zCY4DvcE1g5Nu1IOywcEOFdU0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d257b1ddeb94b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 335x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"461dbcea93a47047debbb6fea90dadaf","sha1":"9737f2a4597b1fa1b9908adc58c7aa4d32a8a52a","sha256":"d5bd1ac8093a0ea6cf22ddfa7ab2b84b71d96efcfa367b887fd21a12907dd1b4","sha512":"81bc9ca1c6b2f2a9c102c4894339bce14591e9801d6ac6f085cc84eaece39a2fb73194abd9c1cbdce7a9cd3ee24538aea4e3afba0ccbbeda6ac2bfc073d1949b","ssdeep":"192:2hLUk32qJ9cVj2zYYNxJ83p9woiDYqJJQVdylu:2hLldKj2UYNxi5irOVdmu","tlshash":"8df19cb9fa18ff1541fa1434fce7c17445543af209f183a2b1765cb08f44842760aab7","first_seen":"2026-02-23T08:51:53.658277Z","last_seen":"2026-02-23T08:52:53.986507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/swiper.DXPMWcF4.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:18.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/swiper.DXPMWcF4.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/59KSjoPY1YBgeywT45.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6fwaVQwibMP4oprqjSpPdeqjTy36ptXci61D%2FeywsA378zSVFVBA2Gju8DHuKq%2BKvPbWvzLt8kXoE2PXbbad0SKIWooZl8J2zs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"208cd3a37e681c4bcc8881d886c6cefe\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b07ae659cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167472,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"34b41686c14550e29a12b8098d3def50","sha1":"a7d0f950913be35d7025c02d558482395f41f13f","sha256":"ed6b53d498161658edd77d9bbc31f359e5de1bf97c80d166bf1c7fd71d210f65","sha512":"9f836a72e9e0bc669e1e3a827684d831b436a10adb1e46584a00928102eed143954503dade15797cdd0740cbccb555b4d37d9bb9fcb7f12d0aad62c15512cbc6","ssdeep":"3072:sGvDusNtFqrZirVK0v0EumyP7EhOh0DvP/r02M0bdH:sA6ItFqrZiU0imyPYhOh0DvP/r02TdH","tlshash":"6bf34a997250b13252fb19e742768111b37909497809d4e8b1ad9ceb2d3b84812ffffe","first_seen":"2025-10-26T19:18:50.691449Z","last_seen":"2026-02-25T20:02:51.301496Z","times_seen":40,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/swiper.DXPMWcF4.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:18.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/swiper.DXPMWcF4.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6fwaVQwibMP4oprqjSpPdeqjTy36ptXci61D%2FeywsA378zSVFVBA2Gju8DHuKq%2BKvPbWvzLt8kXoE2PXbbad0SKIWooZl8J2zs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"208cd3a37e681c4bcc8881d886c6cefe\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b0898419cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167472,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"34b41686c14550e29a12b8098d3def50","sha1":"a7d0f950913be35d7025c02d558482395f41f13f","sha256":"ed6b53d498161658edd77d9bbc31f359e5de1bf97c80d166bf1c7fd71d210f65","sha512":"9f836a72e9e0bc669e1e3a827684d831b436a10adb1e46584a00928102eed143954503dade15797cdd0740cbccb555b4d37d9bb9fcb7f12d0aad62c15512cbc6","ssdeep":"3072:sGvDusNtFqrZirVK0v0EumyP7EhOh0DvP/r02M0bdH:sA6ItFqrZiU0imyPYhOh0DvP/r02TdH","tlshash":"6bf34a997250b13252fb19e742768111b37909497809d4e8b1ad9ceb2d3b84812ffffe","first_seen":"2025-10-26T19:18:50.691449Z","last_seen":"2026-02-25T20:02:51.301496Z","times_seen":40,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/BaiR1QeXA1Dwj3qkfZ.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/BaiR1QeXA1Dwj3qkfZ.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZDAJcz7%2BsNcAyMFPny881vnY8%2FqH07RqtgKSZxBZPW%2Bv7WYGHLQvR9%2FM0kc6ucLwhXFmMf3FVLfOdX80ZpZ9hRfmUR6jAIuRWA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"23b16c85c26461e6be4eb5185684e45e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18dcab9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (542)","md5":"020e0123817d488c2e190866d5d0f5d9","sha1":"61a703f96e54730fa4e93b780727e94c78222979","sha256":"9390135ed6d644e4a7ab47db70c7a43929ccb5899b13fc91b32e1d73a6e45c54","sha512":"00c6722dbad2f4707f73666bf9feca8d34eb008f353143b9efde8d484c9edda291fcfdc5d6f342b2c0a7764478998da80d003889a62eb269737693a6fbfed8d7","ssdeep":"","tlshash":"98f08b0b982186be95a75d542942306110483eacc72498c4e2f92575a792966a4aef58","first_seen":"2026-02-23T08:51:53.626237Z","last_seen":"2026-02-25T20:02:51.484624Z","times_seen":3,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/fJ0tY9yDZFBF8dHLp7.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/fJ0tY9yDZFBF8dHLp7.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fsIbDVK7sqw8z2ohg03XD8yKdUZjCffbYZZ8yIxk9vWyhSNJro1pyXvPUIkDTfYzEj0eX3nWuxYodVrfU1xFI2wN4caVPvCCDHM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c1c63037bf6de20a6a052c4cdeecb372\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18ecd19cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21046,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (19682)","md5":"611e42bfa14d702f3b356dcd70bbd44a","sha1":"3731d31000afb2bc0f54ec4921fa437e5c3b7830","sha256":"51c44e428cbdd5ef14c5ac864d2ef5754dceefd7989c32fae426d1cb75d55289","sha512":"12f28dfde8fc1b41efa27372994a76eea92fa67e6666f2988cef0cfdefe5f2b1152f0c47971bd7019d5cb654d86548c72236b76258b2e22eaddc8e259330c1ef","ssdeep":"384:cOP5a28wa8HVRtzM9GMKZ6rOyrvUqKxnfDN:cSajwa81RdyGM1OCUD","tlshash":"3392837b00b007aafbf19320f101f9a627c91e866856b5f38dbf536259900e7b5cb65c","first_seen":"2026-02-23T08:51:53.653088Z","last_seen":"2026-02-23T08:51:53.653088Z","times_seen":1,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/lang_j?rts=1771836680370\u0026l=en","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:20.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"GET /api/lang_j?rts=1771836680370\u0026l=en HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nst-ctime: 1771836679748\r\nst-ttgn: e67a816b2abfcdcc86be974c77b4aa8b\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6RryrSxRwHKdx4etYHEnsUbp8dAUrNPRiIPR0zu%2FEalVlKLt3BuqvNQmHQr%2BqamfPymUadrB8KjGaGq47nlaUEkH6Gn3MjYJhU5%2BeIj\"}]}\r\ncf-ray: 9d257b16ce0f4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30680,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (30680), with no line terminators","md5":"fdcc2b8b15a4200e377cc1d171254cda","sha1":"e0218e1dd7977a57112f7594e329bc6db720f9a4","sha256":"ce6017d6e36eef8704d548298981909135dfe8c1b143eeda9a0721def994c05c","sha512":"2db8ebf6cc78f026ce7e3ea1d3cef5e8fe95b2b4249f81ef7212a629761bbe8de64e0bfa82711c87f1ad2ac5c027d88aaec3d28db6789ba825621508bc4398f1","ssdeep":"768:IcFb61DTyrOamJECy3rCEzwHINNY+fHUWim1m:JZ3rdVNV1iKm","tlshash":"6dd2e14d1eebd5a8c2e0f7321c020dd26bd4360b6e7a9266a123035fe74d47f94fa482","first_seen":"2026-02-23T08:51:53.660631Z","last_seen":"2026-02-23T08:51:53.660631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/9mnvA8EnEWDqLbue3b.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/9mnvA8EnEWDqLbue3b.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrJofLchU75toiASi6eG3T%2F6PEDAjvBsRddWpgiTPaahOL03X%2FjUAgpBaVq3%2BJ250WHCR7XN4XrgZ0bgfZsnqZdFY9PXWso6a%2FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"38a885e8afdb7eb6175aa365433150c0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18ecc29cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (703)","md5":"ed4df6c23ef7a053df5a001f79b0835e","sha1":"7baeb5598de295469719a2c117b0b9e745776db0","sha256":"2bafc50a57a93d6eb3706c2ff5072408f48e066e76d11aaf43fa1486142a8d1d","sha512":"a49ab310f9ca317273afac7d5088ab4119caedc497fab89d42b9c5dd1dc08a6ceed3a17520b7c4456047fe575725ad942a5fb468d7ad5efde14ff2f7e9cb9921","ssdeep":"","tlshash":"7e0110acb45312f88522495450152552618d1e9e273c09c2a269052adbe58bcbb3fb8c","first_seen":"2026-02-23T08:51:53.613767Z","last_seen":"2026-02-23T08:51:53.613767Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/sfNMsx22hoD-EG5Wcw.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/sfNMsx22hoD-EG5Wcw.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/59KSjoPY1YBgeywT45.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYdtbI5ty7Smal%2FG3JnXUqU%2BaF3dXPVbflIoADStpkM6shyCa5dlqJR3VkaggmGmcFJB6m%2FQT4Ir87dxGHn1vSGgxKBqr9YiSWc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ec5aa4e52891023c0fbc95e6c1da7d20\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b191d2f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242364,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"57be22236e353588655d5a4aa87a3807","sha1":"452a0e4039b309135ed49751a5cb68542cd68def","sha256":"114d3ddd963d7f1954c071f9bac918b7566c049083e2a40c9e9ff40b222afb85","sha512":"121da548cc0ff2b805ae9210ce4d72ae5a14e07d7fc22051147259b6d6704f7929a5f87a6bf2aa4e84559af0f25a87f3ffec2080e6992354a401e15ba4093832","ssdeep":"3072:Ez7tnZY5kWoH6J+2JfnHYr0XyBxxSIl4CWpO+1+Q/4lPc:m7tnm5AH6J+2Jfn9Q0","tlshash":"91345c51740beb3ef4a3584968490800384d4fe6d51d99a6f2fc7b37abc2db0573a7a8","first_seen":"2026-02-23T08:51:53.662544Z","last_seen":"2026-02-25T20:02:51.422532Z","times_seen":3,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/NvEnybrgvmdeuOe6WR.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/NvEnybrgvmdeuOe6WR.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/sfNMsx22hoD-EG5Wcw.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXj0cYuWU%2FnLr%2B1xJspdBRp7JoaCXuVDi5ezl5hL4Pr1g4vNlnCHQmnAfRA0I1hn9vi0n7S4znzttgGM6%2FYyiOk7oovSE9aZNV0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fd1cfc365f171110c4a96062a1a7d7dd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b199e559cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1682)","md5":"5b54ab20c12086417897281396199e35","sha1":"0b7182c95852b7485ec22c2a3bc08d8375f54f55","sha256":"8e80268fd22264585a87b217236a96923d390685f5cf77258b9d1561f20a9795","sha512":"89a33e93e8760f76af57188c5e47f53b42646513ef7d2c5c23eba3694890f32447a4895b36238d4c7ec061edb5cf35aa41f68b271917ed1042b288b672f70b43","ssdeep":"","tlshash":"d5317099b81a8fbdb0b74c395907c01590184bdef335eb45b0e84a2617e6c78626ab78","first_seen":"2026-02-23T08:51:53.638055Z","last_seen":"2026-02-25T20:02:51.315144Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/upload/img/69958691d97e.webp","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"GET /upload/img/69958691d97e.webp HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6830\r\nlast-modified: Wed, 18 Feb 2026 09:29:53 GMT\r\netag: \"69958691-1aae\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNJWhE9e06Q%2BheBlyiKPsyNDfITq5j5ARjIx6lR4WOvS2IPidio51ikIUyUTe4XWPppCWsxkx1v8kdJfC0nRqTruyblBABcb%2FsbAa1Hr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d257b1ddeb84b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6830,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"be465bd1304fbe706690e93fadbb886f","sha1":"8ace21f5f473aadd711dcef40c559dbd7da357f8","sha256":"bdda51080c0de239fee98c01002956ca2f75ce3694d13485ee23438b0a8a9e1e","sha512":"23372bf4be08e424e8c2d4859a9b5c3254e6fb0ce6a80852186c39a96b712c51274cebddfc1a0c661293ef50e7852939a872e5c30f16a443044f51306210c383","ssdeep":"96:WYJjRAuCb6YnJ1JzMUhkubtvqHP2Asvmq2m5q8q6u6b/5fKGl+kih854AOdtr0A2:5+uI6YGuZqvUvm3JdY9fplB54AwtrYj","tlshash":"c4e19e12f865d9965ec7ea561ac362459524fc2734628d0d80f12c8f3263e0d76eab0e","first_seen":"2026-02-23T08:51:53.664329Z","last_seen":"2026-02-23T08:52:53.98463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/assets/K3Z50OkiyqBe9b3THL.css","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:18.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /assets/K3Z50OkiyqBe9b3THL.css HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R16XT%2BJzSFLSIf8c2F%2FAvVtPSDl61Dg5OBovCEzCU03plOQVYw%2Fd8zoFZsfPCXNSMlIxFk4d3GEXDU348en899D0GcBPbxoyiPg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"580faf26a48f843609e0e215f85d093f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9d257b0589ac9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6391,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6390)","md5":"b9bc69dfebbe70d73fb49c7d1c117e62","sha1":"ac989820671a1c955dc822ca46a51100542f421d","sha256":"4b9984ff63ee09b3985851625a57806a2cbef2cd08aaab0b0afbb6a2c1777076","sha512":"2ef879789fa48068bb0541d4011add0144646b00f38ab43dc10f4116356232dbbcab71588516e1d03876a1c4cc62ff5e441ac16c29aa416103c436e17f4392c5","ssdeep":"96:3B5mSJ+MbpDAKneQYX+4JToiL5dKSme+jeHPdw297fzrEIuf/:fmUJbiKnehJTtdKSme+jeH1Zpbw/","tlshash":"d0d1b730a3142c63a2224f194b44e6f86ea450638ff38919f6856e2cd7fd8f4125eb82","first_seen":"2024-03-11T20:01:52Z","last_seen":"2026-06-06T05:50:06.060122Z","times_seen":468,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ip.ddnspod.com/timestamp","fqdn":"ip.ddnspod.com","domain":"ddnspod.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:19.512Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /timestamp HTTP/1.1\r\nHost: ip.ddnspod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T09:09:45.894417Z","times_seen":16172309,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":227,"dns":0,"connect":1,"send":0,"wait":0,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/assets/DIcSv7eO7MDyZs0X57.css","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /assets/DIcSv7eO7MDyZs0X57.css HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFhmMRpApDlzaWaqhUI%2Fvfmxl2aiKLcxrPd15rLoyNLRL4j6vRHf63Nx63PCOJA9VmJ4HbBZjxFksmJ1fM1jE5H2ZXwvca0k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"35aefe901c0929731686d08595df351a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9d257b18dc979cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"78d460a3fd900d74f885c3c4cb00d279","sha1":"47ed7d27e30c395ffb86d879885561d0b134709a","sha256":"ba5fb0ce2a2b93296abde69bb1ec58ca910748493e94e52960cdac120dac4dae","sha512":"2b8a4487bce91a64319865a75c15d53affc911e30ffed5a74ea8a85ca4f99aff654546a23d8400a85c92ff2575bf697dc7b9d394f1181ce1d5d67e907abd4ca5","ssdeep":"","tlshash":"d5a0129450c0b0393d17a23047994b4d041d70558940cf9870a924f000c3af65127810","first_seen":"2025-04-22T04:55:21.175179Z","last_seen":"2026-05-02T20:23:32.688751Z","times_seen":25,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/5NxI6caF2BZjnBkq7N.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/5NxI6caF2BZjnBkq7N.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YCwCLKAgIDjx9uMQ0jrGag%2F%2BsYXbQmyFmbghEVAEzcr0F4wJcGcj0MnzHJEVSxqRDUJUCdOLGFFt0KszEnUefonut2qXOmR2GsQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"916cbb6fd1d302ffb17d99e757e8da28\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18dcb09cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2251)","md5":"11f5d92d903062c88e57fd7599d2dd48","sha1":"d45d7825e5a737fd96886842dbdf1795e87e9fdc","sha256":"2b065ab88267e51706790512a417a6a5bf808a71617ac332cbbf2475840f704b","sha512":"acbc47b3b2c48b5a66b4ca1683c83478065f72fe3c2146b3be252489e8c3105e73fbf699c73dbd9071a993020665aced1f26a7adabd7e614d3036a75ff7e1db8","ssdeep":"","tlshash":"824186acf911cabca6774a3884424050720c0fdfd120dee4e17e1e225bd6cb4756ab78","first_seen":"2026-02-23T08:51:53.650036Z","last_seen":"2026-02-25T20:02:51.261103Z","times_seen":3,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/cus?rts=1771836681053","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"GET /api/cus?rts=1771836681053 HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nst-lang: en\r\nst-ctime: 1771836680748\r\nst-ttgn: bf1e1014e89dfc9f6404c3c834f6945d\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9SiBUzaIBl5890JMJginp%2FRNaPug9d9mpGSuchO%2BD0fR9cZmfzmkoWmCqhFR%2FL8CYys4AqEUDwKEy728m1BG%2FHM%2FjAnRhwxsd7aWM7EZ\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b198e414b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":455,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (455), with no line terminators","md5":"6551c6e8bc7974d90e699670d4e86881","sha1":"d37a65c877810757cee678bcb1eaeb074e782d07","sha256":"db23e8b523f2230e86962bec612964181202cad298fe747f5204272d57f9d8e3","sha512":"d80f4075b107464ed4abcd1a48e09c9a17d94e2d6d30a67fe82cda85a6e6573dbb09e370266afb3718dc59a696eda37c69d506fca60a19c00dd8bebc26982b52","ssdeep":"","tlshash":"8bf02b7655524052715dfa2a4ce475d05073cc03e43dcd6303dc7014c1fd074658616d","first_seen":"2026-02-23T08:51:53.669441Z","last_seen":"2026-02-23T08:51:53.669441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/uf6nMkjTZMBZyTxjD3.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/uf6nMkjTZMBZyTxjD3.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/iloA06nxPYDDB1mooT.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0qC3bLyuo%2Bw8KfhbttRVzvgdj%2B%2BTctVfeyIxK58CJtRr8QDhLz1vXNrOY%2BvlqHhvYFFw4vZihisdA1LKYANuGEC250bZx7nVn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cbae03e640a5bdc13b8dad43fd3f320a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b1a1f4b9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2531)","md5":"f59e042ec1bc3649aac1a5a608675e0e","sha1":"80aec7f4d669cf90df0c41b59d7f48edcc1d3bba","sha256":"8f66d9756452e2ae821a6696b7dd17c17564dca4a059352cfb963d70460618ad","sha512":"65663105fdf103b35894d37036c3b510d94fe44779ae222edb4cb6c51fb9a04eb2aa6d99237730fed540ce243234a1e1b26ed9207252ce6cb4c72bebe5ce0d14","ssdeep":"","tlshash":"48517709d462afb3caa39aadb2db2820e01827ebc618041150f956193f4ddf4573ff59","first_seen":"2026-02-23T08:51:53.67246Z","last_seen":"2026-02-23T08:51:53.67246Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/reset?rts=1771836681721","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"OPTIONS /api/reset?rts=1771836681721 HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://qms-ai.net/\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1r4D1nLxQC6PXMoQxrFOBpDE%2BVjLi%2BnL2JTKOIozVZWcKfsUkKnNL3mv3OPT9ygFFEO6vgbgD%2B6iXd1XbITdZXIQ8hGylCp24zqVHZfA\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b1cd9a2767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T09:09:45.894417Z","times_seen":16172309,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/assets/XmeF0b6hbU9KkiXSOC.css","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /assets/XmeF0b6hbU9KkiXSOC.css HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M180wgzyFPlBqzmCdXZWJEisl5SFilnUgpnJhVKi7%2BqxSo6fZ3lVGnfEWVR8xJi7W8Wxbe40xmZxRdvFJcb1LpxBb0V0I%2Bcy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2033152aceb714676859a4e1bcff2a1f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9d257b18cc7a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"210bc0aef74b653b3356a9a9b785006d","sha1":"b77ab851a4963c96af01c55e7dafb33240202fdc","sha256":"4e418d51c9ed84b3998be57770f4d38289e5e8d86351b032b91fd304eedd2a49","sha512":"dc96806e9bdb062655a1d74a5b387b0d13121d6d4a427c31a5af4c23daf6378dd5073e051dca208189f335e6a31088d3149d6cb9d0503f6e27dde66172eb67ea","ssdeep":"","tlshash":"429002441980647ab501919d255402150604a84b84404e65a014595051d15f60051a58","first_seen":"2023-11-09T00:35:11Z","last_seen":"2026-06-06T02:56:53.414492Z","times_seen":172,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/iloA06nxPYDDB1mooT.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/iloA06nxPYDDB1mooT.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzLXQGVMHJsS4VlqOSBGI15Pv2abUTLEYjsRLmUhN13gvp6IJ%2BALfCQT0MIb0dlRmz0oqWzWtiJcKSiJWjls1F68%2BXR9lcBnTEY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6da3378da9fc86b1e23b1ccf1b1e7756\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18ecbd9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":513378,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9134)","md5":"da9acc1b15028296e79c72db495d6704","sha1":"065e552c026263f0ba90e9dfced3798290bacbd8","sha256":"c97dab6c2fa0c2ad969779d4ae01dc7b868adfeb5a9ef7e19831c7269bc156d3","sha512":"fd3b30d6910e62980a9a51d8d07889ef8f7c9d0599fc71aa0e0200f73cfc856df21db574c3265b34aaafe3cc46ae9431c1040bcbe18d6ce3a3cc1f9c421fbb7f","ssdeep":"6144:ryX3zGvUZzCQpKcj+TtsUWHmrWUNiYFLqxafdnhjXIwR/RVx3dw5EseeyCvDaoXV:IL","tlshash":"cab48488d1b9cbf8e57f674e744a5820e19d9fdfc1111129b6fd0e322e95ce09a38368","first_seen":"2026-02-23T08:51:53.675628Z","last_seen":"2026-02-23T08:51:53.675628Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/uf6nMkjTZMBZyTxjD3.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/uf6nMkjTZMBZyTxjD3.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0qC3bLyuo%2Bw8KfhbttRVzvgdj%2B%2BTctVfeyIxK58CJtRr8QDhLz1vXNrOY%2BvlqHhvYFFw4vZihisdA1LKYANuGEC250bZx7nVn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cbae03e640a5bdc13b8dad43fd3f320a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18ecd39cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2531)","md5":"f59e042ec1bc3649aac1a5a608675e0e","sha1":"80aec7f4d669cf90df0c41b59d7f48edcc1d3bba","sha256":"8f66d9756452e2ae821a6696b7dd17c17564dca4a059352cfb963d70460618ad","sha512":"65663105fdf103b35894d37036c3b510d94fe44779ae222edb4cb6c51fb9a04eb2aa6d99237730fed540ce243234a1e1b26ed9207252ce6cb4c72bebe5ce0d14","ssdeep":"","tlshash":"48517709d462afb3caa39aadb2db2820e01827ebc618041150f956193f4ddf4573ff59","first_seen":"2026-02-23T08:51:53.67246Z","last_seen":"2026-02-23T08:51:53.67246Z","times_seen":1,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/yLAIU26dz1DPZvN9xl.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/yLAIU26dz1DPZvN9xl.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/iloA06nxPYDDB1mooT.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFlb6H3xQNKfEjING7Xv7CqHbPQcF4plpeYITLKYvzbsDoD13lWLXkfKPbJsrHhP5n%2BWWorx5zuOOVJkt2j72s8RH1rioQKrIFg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4d53511b1774281d7c9539c0ac2063c7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b1a1f4c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"7c169b08f49e4b9aa1a2f9c3385de140","sha1":"b00c3b59b036a471549c702176e2cbcecb1b6e6a","sha256":"10f915ace3b7c4ba2a813edc6e36f8405d6369fc230bb1b05ef6a57f817251ff","sha512":"8a4a6f03d1a8a4a94a6c748a3008c931172bd45311c5514306b4d4a63ed64a0fd9957b11d22cd61478de8620b446cd029fb123a633a5a69402da49c16086babe","ssdeep":"","tlshash":"dd01258c48f6cbf9d49702643d8a10a5d050674c9b35d866f06cad32674fcf095de738","first_seen":"2026-02-23T08:51:53.677313Z","last_seen":"2026-02-25T20:02:51.606733Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/assets/f5gIYY5qWdL1zrufpT.css","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:18.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /assets/f5gIYY5qWdL1zrufpT.css HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WShcRmiaaXJQuiQezMRiocNJ0dL8dKEgM7fT7HyTOLcOr6NJ02vRO%2FfyUOFjZnYMbBMnGWoSVCZAt2FrMIS1ddPQm5T6CeGmIFI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4c152d4bb1465b98a0232046281ddc99\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9d257b0589ad9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046503,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"61dfc8b874711a0bf5f7e6864fc4628c","sha1":"288a39e86f119e7ed986649e16a6fcfa17a7de3c","sha256":"197203e5dbcc11ceebad9719f4fce1dd23ea19ee266d7d09f5096ff7f68363cb","sha512":"e925b66d72f78f9c561ab6ee922d4eefb657995c44bc2e14c91857bfae51760fee02d9efdb640a874a7b132c618fb9c88d33bc714bdf3ae9d0818b141bab0ba2","ssdeep":"6144:U5xsapKNSgVv6snEqQ8oQ4hiHxd5UbeG7PFZmLvUP+Aoucc+anxDEz6D5hAunN7+:U51CvHxDNmP7EucIP4","tlshash":"512529782b84113cfc0bdf729ae48adc652de153db534ed8a609763483c72e72673698","first_seen":"2026-02-23T08:51:53.680746Z","last_seen":"2026-02-25T20:02:51.502456Z","times_seen":3,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldtimeapi.org/api/timezone/Etc/UTC","fqdn":"worldtimeapi.org","domain":"worldtimeapi.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:18.586Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/timezone/Etc/UTC HTTP/1.1\r\nHost: worldtimeapi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T09:09:45.894417Z","times_seen":16172309,"resource_available":true,"data":null}},"time_used":813,"timings":{"blocked":72,"dns":741,"connect":748,"send":0,"wait":0,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/jccg7UjpKICTj41bwz.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/jccg7UjpKICTj41bwz.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DVaL3Go4ww9Q3O7y0Jzg584%2F6UcY2BL2TSF7823nyIkBvKqOO9OVsjwC3l1xVqAdsEi%2FZBuZhs2ILquv59tpKqhGMV1kuyCl38%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f23d3eb29195a77e86281f1e7267c5cd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18ecba9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5319,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5318)","md5":"f20eca31d26444f86d341e8248d5e393","sha1":"eea45ad610a82735797481e12614973af252396d","sha256":"91e095ef2a074c9086fdd7605e08e311cd5a868bfbf6bc03e663fe47faa067d2","sha512":"51fe3975642562f95b8c8c4817078032301ff0ee5a9fbdadccf14ae5d6121df9518ca8d37ae6f12522aab16089c4d1d2391577b8ef843a586aa49c1fb9fc7207","ssdeep":"96:0fXLjjA3qXkDai6xPtZ2ulKgRb2vbEj+U+Nka1Y34XJSq6F077W772E:0THvXKahVPlKXT4NjKYoXJQ0vW7T","tlshash":"b2b1283278a239036cc075f7794ccbce0e50053ae94398c3d2ea9e86d294f1cba69194","first_seen":"2025-05-15T07:17:42.12509Z","last_seen":"2026-03-27T02:24:47.36544Z","times_seen":88,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/reset?rts=1771836681721","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"GET /api/reset?rts=1771836681721 HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nst-lang: en\r\nst-ctime: 1771836680748\r\nst-ttgn: bf1e1014e89dfc9f6404c3c834f6945d\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ppw2WAYU%2FdQtQGdTdLLvVB84TbM2WkvUSOZwcN%2BPdCtvMFBWcAaAbs3O7sPnDJkgi9qROu6wqDcNvze%2BiLZivP0cKV3JXqBXL2JabKmF\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b1daeb04b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"bdf9cc2de4ca76b4dbd604df177f5495","sha1":"1ad8ec6b2202fd28a32c55701c310686174fab11","sha256":"a5b54840ab78461721cdb0b282bce4e618172d52fa34cafe951b9908d36d7124","sha512":"a228fb10959ae361a59357b115c55d60b93701b0a9d6f058d7c747555a39c5e19bb85d8b83df0dae3a0d1dc910b503d987f3a68b0412f0e7d2e8f46ae90b4ca6","ssdeep":"","tlshash":"2cb012d4c17161100304290da11bc1e0010e1668801d3e749042d04e5c321629c10f78","first_seen":"2026-02-23T08:51:53.683192Z","last_seen":"2026-02-23T08:51:53.683192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:18.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Feb 2026 08:51:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Jul 2025 14:26:51 GMT\r\netag: W/\"6888da2b-1bd46\"\r\nexpires: Fri, 27 Feb 2026 08:51:18 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113990,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-05-12T02:27:32.127067Z","times_seen":3808,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":150,"dns":2,"connect":23,"send":0,"wait":23,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:18.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:63:7D:63:F2:DF:8F:C5:65:EF:16:8E:06:3E:E4:66:D9:41:67:CD","sha256":"91:A8:D7:CD:20:36:14:EC:9A:D5:10:BC:DD:44:F1:9D:26:20:78:F8:92:93:7B:37:6A:F8:E9:7B:FC:7E:72:66"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 24779\r\nserver: CloudFront\r\ndate: Mon, 23 Feb 2026 08:51:18 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=83f59cad166342b7b070988e687dccd8;max-age=86400;expires=Tue, 24 Feb 2026 08:51:18 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: p8NNa4OdxtZDSoeAjFR0Ri1KokNuw7GhU6H3YzKjNxNBxbZNErGvEw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58763,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58736)","md5":"121189e361b1b6f3e7b0dc47fec6b383","sha1":"d98a2320209759d2f3f6d0991e45917703feb238","sha256":"c9c236ba3c81fd6f5cc61494d64d13153014817bc343fef249d9bf9826a5266c","sha512":"cdb2ea94f746977e8d6ad0d01d7f131f8adf9c32976e736d5f9b0a72151c1ed651d8fb31e27a5624bc5b8f780453be496348873b57a05c3a6743593c661389f2","ssdeep":"1536:kQ870ziaayzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:78chTl49dx0G","tlshash":"6e43d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","first_seen":"2025-12-10T19:39:08.014146Z","last_seen":"2026-03-28T01:15:14.30461Z","times_seen":12539,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":18,"dns":12,"connect":1,"send":0,"wait":47,"receive":7,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/sfNMsx22hoD-EG5Wcw.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/sfNMsx22hoD-EG5Wcw.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYdtbI5ty7Smal%2FG3JnXUqU%2BaF3dXPVbflIoADStpkM6shyCa5dlqJR3VkaggmGmcFJB6m%2FQT4Ir87dxGHn1vSGgxKBqr9YiSWc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ec5aa4e52891023c0fbc95e6c1da7d20\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18dca59cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242364,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"57be22236e353588655d5a4aa87a3807","sha1":"452a0e4039b309135ed49751a5cb68542cd68def","sha256":"114d3ddd963d7f1954c071f9bac918b7566c049083e2a40c9e9ff40b222afb85","sha512":"121da548cc0ff2b805ae9210ce4d72ae5a14e07d7fc22051147259b6d6704f7929a5f87a6bf2aa4e84559af0f25a87f3ffec2080e6992354a401e15ba4093832","ssdeep":"3072:Ez7tnZY5kWoH6J+2JfnHYr0XyBxxSIl4CWpO+1+Q/4lPc:m7tnm5AH6J+2Jfn9Q0","tlshash":"91345c51740beb3ef4a3584968490800384d4fe6d51d99a6f2fc7b37abc2db0573a7a8","first_seen":"2026-02-23T08:51:53.662544Z","last_seen":"2026-02-25T20:02:51.422532Z","times_seen":3,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/P0VZgX6hbpDYlgohlj.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/P0VZgX6hbpDYlgohlj.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4d2nlBA8On5tqx2ei%2B1zzEZDAl7UvqmtbsOAhuEYA301kAAJh5doEFAO20R2hZq0QQQ4hSa5Oy2szRLh85lZpjgkC4U2B1Ejuk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f600a0e3685b83c91aec6e57dce38380\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18ecca9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2930,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2929)","md5":"7ee56ba5bf731e91cc886ce5208c3a78","sha1":"9f44a37cb2167831331009896315235047133e90","sha256":"9a7fb6f8c922a5bd73f98f3a84745d42f21f92a94c8499654f5721f23f4c0d15","sha512":"8aa10f79df8d2daa14f4e8738ceda908977aec9c27c8be3d5379e76b13c3f149982e4de26b1ecd9a19ea22d95bb7225d8284c2de636d6062a9dcf20a4dc3e707","ssdeep":"","tlshash":"cb51706d7cd89435c6bb5dc4d4270812a62b0b1d922899f1e4ae6d8d2a3e444a17ff3c","first_seen":"2026-02-23T08:51:53.640751Z","last_seen":"2026-02-23T08:51:53.640751Z","times_seen":1,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/yLAIU26dz1DPZvN9xl.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/yLAIU26dz1DPZvN9xl.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFlb6H3xQNKfEjING7Xv7CqHbPQcF4plpeYITLKYvzbsDoD13lWLXkfKPbJsrHhP5n%2BWWorx5zuOOVJkt2j72s8RH1rioQKrIFg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4d53511b1774281d7c9539c0ac2063c7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18ecd59cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"7c169b08f49e4b9aa1a2f9c3385de140","sha1":"b00c3b59b036a471549c702176e2cbcecb1b6e6a","sha256":"10f915ace3b7c4ba2a813edc6e36f8405d6369fc230bb1b05ef6a57f817251ff","sha512":"8a4a6f03d1a8a4a94a6c748a3008c931172bd45311c5514306b4d4a63ed64a0fd9957b11d22cd61478de8620b446cd029fb123a633a5a69402da49c16086babe","ssdeep":"","tlshash":"dd01258c48f6cbf9d49702643d8a10a5d050674c9b35d866f06cad32674fcf095de738","first_seen":"2026-02-23T08:51:53.677313Z","last_seen":"2026-02-25T20:02:51.606733Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/cOFHfbkdHNCL8THbBV.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/cOFHfbkdHNCL8THbBV.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/iloA06nxPYDDB1mooT.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3kKr8jvh7nMB2mn59l02Q74T7PQ3unKa5KsCkzHve0nA9rWiQO6MErpEzD%2BXGGcezNF%2FjQwMy3PhZ3cqZDskl%2BfL3ioBv8PePU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d5fc9576a76c8ea8fa711fa5bf38d1df\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b1a0f329cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"2ff9fd5d77c2ba330c316843e2832db3","sha1":"e8605a85eaf8e5907d2eae0898890fc94514b85d","sha256":"3fd3d2ed643d2828250614b146740fe8740f055e2d41beb9c8be0d5364f08c77","sha512":"447005498bbb08478004d9da7fe6c95ffc1488fb061b93dc25b713e38438fd0e561ddd5694c19f134624f053c36c1048b79c09ce563ba7a9bd6cd8ad5ce46ddf","ssdeep":"","tlshash":"e3d0970c8860a2b2a0320ddcf33130238a303e1633b88c86e04e053aab654fb209ff4c","first_seen":"2026-02-23T08:51:53.646338Z","last_seen":"2026-02-23T08:51:53.646338Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/login_v?rts=1771836681366\u0026hideloading=true","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"GET /api/login_v?rts=1771836681366\u0026hideloading=true HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nst-lang: en\r\nst-ctime: 1771836680748\r\nst-ttgn: bf1e1014e89dfc9f6404c3c834f6945d\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2729\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4DXL2FQocGzgZQCYq1LorVHAiUDKCgbe4KyJUO%2BSxpRl7c0O6hW7jLWDxT8IiMxX%2B6yg4NNn6AQ3Jyfx%2FJHrNXaS02a9rQzuGWb%2BZwyl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b1b8e824b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2729,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 150x40, components 3","md5":"3cffec938e605d3af9249a891ebbcd41","sha1":"7c06b1f5d599c8950a414c861a227913974395dd","sha256":"487931549adb4e0a3dd5bb57b822d8742b9502becbdcfd635013600e7b01dc96","sha512":"56ebc09fbdf08116a6ffc90dbf4252461658521027f88da8f0d403e9e298cf4b2d6fa3c27b2bd721b7c806b92991328e38a8fa03a9e77dcab9dfdb79f498b5d5","ssdeep":"","tlshash":"19512c2f23d947c078d917f54802adc1f2c5a2c63c2522c97ae69579dd53ac0dd2428c","first_seen":"2026-02-23T08:51:53.686234Z","last_seen":"2026-02-23T08:51:53.686234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/cus?rts=1771836681053","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"OPTIONS /api/cus?rts=1771836681053 HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://qms-ai.net/\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xXi3dFBDWgIqwCAzVztldjaPrl%2F7MfnmntBpY9hckxpU16G2MBWubgPQWA7Ppt4CufXlG0ecdYmgi1V1CC7ShA9NCRBNDwKB1V1W1J1\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d257b18a91d767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T09:09:45.894417Z","times_seen":16172309,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.qms-ai.net/api/adi?rts=1771836681052","fqdn":"api.qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"172.67.208.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:34:18 GMT","end":"Tue, 19 May 2026 08:34:17 GMT"},"fingerprint":{"sha1":"2D:9F:A7:D4:82:AA:92:DF:89:7A:5D:59:DF:3C:F3:1F:45:59:FD:57","sha256":"25:78:28:9B:44:11:C5:61:E1:A3:E2:FB:5C:CF:1F:5F:CD:5F:AA:F0:50:BC:DD:A9:3F:AB:8D:A4:A1:E0:C2:D7"}}},"request":{"raw":"GET /api/adi?rts=1771836681052 HTTP/1.1\r\nHost: api.qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nst-lang: en\r\nst-ctime: 1771836680748\r\nst-ttgn: bf1e1014e89dfc9f6404c3c834f6945d\r\nOrigin: https://qms-ai.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2%2BMZm5ap2MCrH9p6fj8Q4MxYOwYBKy2%2Fpp7RwCQfVPY18AqGfm3ion6UWlwQunOjmjO5Pboh3jhMIe9F7qOb6p7sB661XzpwwUob6qB\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qms-ai.net\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b19ae434b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"d9e4d4b0f9075ff833e8251a86e54b6f","sha1":"ec24108921140a71bb5fa7523faba917946ea605","sha256":"21bc20aa746513e5d4b383223ea07c9113c8ef579296d7f462c6e334bc81fb6d","sha512":"b4794305df7930ec53c0cf0a09c213b12c32d82371d1e015a3fd7f30c626a3fa4685917d6ae35a4f3725a764806167a1ede0392f8bc06d712d15039d9f532481","ssdeep":"","tlshash":"32d09748ef84e52c0072132202c0b0a87a86a0501230acd7131330f2a810d3e804019e","first_seen":"2026-02-23T08:51:53.687568Z","last_seen":"2026-02-23T08:51:53.687568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"api.qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/assets/ypSChla2aGBBGxtG58.css","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /assets/ypSChla2aGBBGxtG58.css HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZm9Wk8gSjGkTlRyG0bAOBjnKOpf1oQpQGBvC0gwin8DBZSFfvh23J86giivql77KxAEcEDk84kpiumDtrCen87kgdCa0nmwD88%3D\"}]}\r\netag: W/\"4aa9240271c8fea5a20e95cfc78ba467\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9d257b18bc5b9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a9fadc4adb941b49dba4057ed5892a8a","sha1":"97ef5525981dbd1ea4d8b3717a4ed1ec47f487ad","sha256":"3b1bb70e6f7bfe6da705495af851998d936ecccd16a2f898321f83febb45a2e6","sha512":"ef44b98d8614ff9ceb690a44fd6e7db3f869f33fe6ca2658de616b6d074922c8ae0aaa9fb8ddeeaa267ec5b5ddedd13801271df5cd6f0e579f87a38a44cdbd1e","ssdeep":"","tlshash":"c0b09b1516013b1c705d7441de5416d75141d437946175558a81572f448e4b72d747a4","first_seen":"2025-04-17T13:49:08.687019Z","last_seen":"2026-06-06T01:45:51.943549Z","times_seen":118,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/iloA06nxPYDDB1mooT.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/iloA06nxPYDDB1mooT.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/59KSjoPY1YBgeywT45.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzLXQGVMHJsS4VlqOSBGI15Pv2abUTLEYjsRLmUhN13gvp6IJ%2BALfCQT0MIb0dlRmz0oqWzWtiJcKSiJWjls1F68%2BXR9lcBnTEY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6da3378da9fc86b1e23b1ccf1b1e7756\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b195dc19cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":513378,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9134)","md5":"da9acc1b15028296e79c72db495d6704","sha1":"065e552c026263f0ba90e9dfced3798290bacbd8","sha256":"c97dab6c2fa0c2ad969779d4ae01dc7b868adfeb5a9ef7e19831c7269bc156d3","sha512":"fd3b30d6910e62980a9a51d8d07889ef8f7c9d0599fc71aa0e0200f73cfc856df21db574c3265b34aaafe3cc46ae9431c1040bcbe18d6ce3a3cc1f9c421fbb7f","ssdeep":"6144:ryX3zGvUZzCQpKcj+TtsUWHmrWUNiYFLqxafdnhjXIwR/RVx3dw5EseeyCvDaoXV:IL","tlshash":"cab48488d1b9cbf8e57f674e744a5820e19d9fdfc1111129b6fd0e322e95ce09a38368","first_seen":"2026-02-23T08:51:53.675628Z","last_seen":"2026-02-23T08:51:53.675628Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qms-ai.net/js/Z3GeUgWLIEDyEd2bNu.js","fqdn":"qms-ai.net","domain":"qms-ai.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qms-ai.net/#/register?ref=357577","date":"2026-02-23T08:51:21.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qms-ai.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 08:36:08 GMT","end":"Tue, 19 May 2026 08:36:07 GMT"},"fingerprint":{"sha1":"A5:9B:F7:C8:99:4A:08:E0:57:0C:F0:BF:92:19:B8:C4:A6:FF:A7:07","sha256":"F6:6A:E3:6A:9D:B5:09:EF:4C:0D:85:CE:AC:45:D5:A9:09:40:AA:4A:23:E1:D5:90:F9:40:FB:50:E5:A9:FD:9D"}}},"request":{"raw":"GET /js/Z3GeUgWLIEDyEd2bNu.js HTTP/1.1\r\nHost: qms-ai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qms-ai.net/js/sfNMsx22hoD-EG5Wcw.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=30bRuneIAByRmviOPSuRmN9bnT4NeHSM; _scid_r=30bRuneIAByRmviOPSuRmN9bnT4NeHSM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Feb 2026 08:51:21 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dM%2FNKF7OmV8smiOD%2B0b5PCBFNWoFDrV35K1pghMcahD%2BAhCQO1fRpNQGHYJLHBA%2F%2B37iy9hNAq3kPwTXRWHj8SIMfTznAvTw3r0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4774788b3cb5d4f36dfbe9620ceeb36b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9d257b199e479cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21902,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (21901)","md5":"4259dae3f27b88beeb0485fe11662d4f","sha1":"338190d823ac086343916cdf43aa85e2d3581012","sha256":"695e520c77961f4c23208d2aacd060609c37e3db7b40842972e45e1ee50f4a8c","sha512":"fc180550c7f7e60482fee10d23bc2b38ba2043321e130da54d587b469f6a8206b080bea706e912a4993d39e13b911239ff9a547c64396f7aa00777a6fa79720f","ssdeep":"384:g3ioLXabmFpBl3Cuaru1iacFmxMYanqGz9biifYl:g3ZLXemFp351iBFmxq5rQl","tlshash":"93a2d7606030c23afd55b1e05dd05c4a288d1bdaca9991daf1fdccc377c25b4ace929d","first_seen":"2026-02-23T08:51:53.642766Z","last_seen":"2026-02-25T20:02:51.302906Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"qms-ai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}