{"report_id":"e5b8d9aa-1bda-4b1b-b99d-abe73987ee7a","version":6,"status":"done","tags":[],"date":"2025-08-11T22:58:17Z","url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":0,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"title":"CLAIM AND HOLD $5730 NFT INTO YOUR WALLET INSTANTLY"},"submit":{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":0,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-15T22:58:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"qfs-nesara-gesara-system-backup.qpon","ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":23,"request_count":23,"received_data":676335,"sent_data":11485,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-06T15:14:12.503348Z","alert_count":0,"request_count":2,"received_data":21127,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-06T15:10:32.619142Z","alert_count":0,"request_count":4,"received_data":112107,"sent_data":2203,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.78.79.83","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2025-08-11T05:23:20.545314Z","alert_count":0,"request_count":1,"received_data":379,"sent_data":565,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2025-08-06T05:43:52.749287Z","alert_count":0,"request_count":1,"received_data":18645,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","size":18141,"data":"","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-06-25T21:19:38.907057Z","times_seen":9278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/vendors/%40popperjs/popper.min.js","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e6ef063fa41ff8d8c00956a7cd3fd9","sha1":"8eeb7bf71e8a978b82a1a198015f14d73d2ea592","sha256":"5a07c69f9061eb12e39a031358a4f567f30a002ad6182639ac84fd1bda2f6e65","sha512":"dab363d8a27e0fcb3571e35ab1321ec7acf81d6c8e9c460b542dc58a018e9b240265cd9e0572a03b1426a37a0a2c7c9f723e77bb3e1032c44258d6cb777d90d6","ssdeep":"384:PDzk5KmEpLFd7tRwQZMVwAVfbsnmlHiBnjLU4MSV1Nn1awap1P9Vy8UuZHFh+L4O:NmERLwQZcFVLCBjg4MC1Nn1ip1P9Vy84","tlshash":"5d82c6cd3994f0a1167b52b6c07f550f73339561228ea410b255d6dd2c74ebba22bc3e","size":18594,"data":"","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-07-24T16:00:26.997375Z","times_seen":5647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/vendors/bootstrap/bootstrap.min.js","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"86c66103329d2d376c5ec84117058497","sha1":"d65c1eda71a436de34a324b73708421225785f59","sha256":"83ce8dec787fb3ceacaf7a5b61f36475a8a8ec525717aabd73dd6e25522d28b8","sha512":"ecf10c6a81c9350a04aa9c6090ab24a17a448258a81272a57c231c6159a697cc898e6046eedc1a0669c8f8f2d4d1c353c36556862cc96141b59264b3443a35b7","ssdeep":"768:w/gB79Mr3uDTVayu8Of8rm7MT5ZFcHUbw8gpQCYewiTlAx17j0FhlG8KktWyh6c:wWYY28meG+zgA8Oc","tlshash":"2953924ab254787206cf7475817f060fb33a6899a446813cb96ad8de1b7cc897173fb8","size":61768,"data":"","first_seen":"2023-03-07T12:05:17Z","last_seen":"2026-07-20T11:29:29.605491Z","times_seen":1073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/vendors/swiper/swiper-bundle.min.js","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"560c65473e0603930135a1c0772fe599","sha1":"4366ca58175d624044ca3ff64ab9ab05b8fbf062","sha256":"6d73baf9c6e59776046d591aa20106ed6a9d534cdb197691cb6f813c75a384e5","sha512":"9fa1a9a0f2b3762af9dae45add9f8cf81c4114d1b030c55321264cf4b320f65317c9156bb427106af90ff3534e234e8dc9552c90df462f364842d3ee1771962e","ssdeep":"1536:6Gu3sSOSdeGKfHTiuqoP9ROZBSlezQpDN+5ohRnvaa/phjiyvH7WcVOMFjqqKsW+:50kdFROZB5of7/pAkH7WcVO4jqqBBUS1","tlshash":"d5d3178db360b2a151e73256539ed10263b65845b80ac5a470768cd7acbde8c03bfefd","size":141834,"data":"","first_seen":"2023-03-08T13:10:21Z","last_seen":"2026-07-20T13:55:30.669018Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/vendors/is/is.min.js","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c9dca2a19f05dc6d7b1afa3244a8f6b","sha1":"4a8519b04be003f12a833e634ba5736a6634fa19","sha256":"96725eba539addee483b61331ebf23289dc26d3f34301c244b96be9f6a2822be","sha512":"0ef85551d416608f54a05e47187865d349db50572bfa3e9d1a583f152ae896a47712b89d13c085f369c234066c1388803e4c3fc2cd0eec8ad9d63394b89417c6","ssdeep":"192:/Q9B/+ZnHDVD5XlBQiAhkWZc682vLHIFO7APTKpXYx3b7zi5/8:/smnjD/QiCq682sFO8KpXYx3u8","tlshash":"b942748df5d2f01d8357baa80a3f4106f23bdee5d88e5128d664d8913cb480ed57af98","size":13181,"data":"","first_seen":"2023-03-07T01:35:45Z","last_seen":"2026-07-22T21:59:48.540386Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/js/theme.js","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"18e1fc5b6bf32a9fec752d489d3bb5c9","sha1":"25065386cea3f665dd615b17dc0968e07c1b5bf3","sha256":"7219c59e98997653cd87502b478dd1dae5de96c4caa26772e490e1a6449e4824","sha512":"56af1c62db29ab2cd0da4820706df8177f9a1e34b5696b697c81e9fe68dc301694d7247daa62c67d335583ac2f2c1b1ad6b77fa8e3cc58e719e1278ed20881fa","ssdeep":"384:zWg0l48YOjbZlCG6xHxtmLoHRdJXsywZuK6p2bmgbBMgT8H2BD52CG3Fzy6ru:zWNl4DUbHCxxHxtmLoHRdJXsywZudp2t","tlshash":"0272971a9da3209328a7d02a13effb04f8591043850cea537dbfe7946f10667917edda","size":16386,"data":"","first_seen":"2023-03-08T05:53:05Z","last_seen":"2026-04-23T08:04:41.609799Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"38f8ec1c6fba2cea1319c6568466cf3e","sha1":"967568dde3ee72e0468e5fa4a84a8673060d9187","sha256":"fff96bee24dec84b79f28f7ae92b055d6ffdb2e7942ab86bbbaf3f85704a0baa","sha512":"2cce4b86bdb82998201549e10cd1d892d483c66d967b13f5b95dd954d44d8cde3a59df54d69f569297751fe07648d33fb8d4cc6e9945d0c5cffdfda5a5a7d552","ssdeep":"","tlshash":"96e0a23c2c3480910ba200b894abe2383e1a30244084ca43989acc68acb0bdebd029d4","size":418,"data":"","first_seen":"2025-08-11T22:58:22.026275Z","last_seen":"2025-08-11T22:58:22.026275Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/facebook-line1.svg","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/facebook-line1.svg HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 321\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":575,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c959a773b24a2bbf0d3aac7a1db0cb82","sha1":"461de7c6331a932acd40d9a75ea7202d9ab8ba8f","sha256":"d3e79e6f164da1b9a5d8a86609778f20ff83245a219cad36977d6854c8a5060e","sha512":"b923f52d63d3c8b05d4afe359bb031b06abe9cc7046ad672b9ee59361ee574432c16bb545ae115921ecda627a6d23558f197a3acc679fe052ce83135649c39bf","ssdeep":"","tlshash":"87f081e6e3a405c7812f9f14b95f7e50745fd8f972a88cd8e1845b4264f4196cf54190","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-04-23T08:04:41.603004Z","times_seen":19,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/instagram-line1.svg","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/instagram-line1.svg HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1298\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3501,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f7b9daef1e0309acd52c8e22c150523","sha1":"d66624f8843846430825cbdb6db85c070d34cc9d","sha256":"f75c209113747a925a0a754b7c7bd14e84a35d2f26b7122c04f7cfe3474c9996","sha512":"6e7828a81e313cbaeb3fe46c6e3a6f48cea08ad742ac7e55b7633f96a529c473a87cbbb938906438ee7bccee87e60f7cd6d4c84c748828938d54055de96df1ad","ssdeep":"","tlshash":"f77111f2d3a061f5e10beb4afc376c68b49f14fe7789dfc9c1940aa575681a5c4c8842","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-04-23T08:04:41.589701Z","times_seen":20,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/vendors/bootstrap/bootstrap.min.js","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /vendors/bootstrap/bootstrap.min.js HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 06 Nov 2023 11:15:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15413\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61768,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61483)","md5":"86c66103329d2d376c5ec84117058497","sha1":"d65c1eda71a436de34a324b73708421225785f59","sha256":"83ce8dec787fb3ceacaf7a5b61f36475a8a8ec525717aabd73dd6e25522d28b8","sha512":"ecf10c6a81c9350a04aa9c6090ab24a17a448258a81272a57c231c6159a697cc898e6046eedc1a0669c8f8f2d4d1c353c36556862cc96141b59264b3443a35b7","ssdeep":"768:w/gB79Mr3uDTVayu8Of8rm7MT5ZFcHUbw8gpQCYewiTlAx17j0FhlG8KktWyh6c:wWYY28meG+zgA8Oc","tlshash":"2953924ab254787206cf7475817f060fb33a6899a446813cb96ad8de1b7cc897173fb8","first_seen":"2023-03-07T12:05:17Z","last_seen":"2026-07-20T11:29:29.605491Z","times_seen":1073,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Sora:wght@100;200;300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Sora:wght@100;200;300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 11 Aug 2025 22:57:56 GMT\r\ndate: Mon, 11 Aug 2025 22:57:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6544,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7ba6751d9ded6838bfe0bf7c4113d384","sha1":"b67c4426090b9ce45e4b8a271d8ba1e9473766c3","sha256":"80a459dd9f12bdc8c6b70db33b58951ac056cacea4d619f655426347fce00447","sha512":"b1b9078c9c62b6898ca9c9820e70d1a68cbada64da15c1d84c78f28bf18d1ddefe4727e8032b79913380122f99ee93e16d615b7b6283d518fed6d5128326d39d","ssdeep":"96:EOS0aEJc+uoOS0adNlO6aEJc+uoO6adNlO1aEJc+uoO1adNlOEaEJc+uoOEadNlK:gpALpsAszAzSASBABoAovAveAec","tlshash":"12d1b3810467a504fba31dc172ce7d37fe5e6190a845d938aefd1888fc9ec295361b4e","first_seen":"2025-05-30T23:13:26.367729Z","last_seen":"2025-09-05T07:07:41.721847Z","times_seen":115,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":164,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.2/css/all.min.html","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.2/css/all.min.html HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 06 Nov 2023 11:14:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 189\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-07-24T16:54:10.727568Z","times_seen":146389,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/css/theme.css","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/css/theme.css HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Nov 2023 11:14:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35745\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":369164,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with CRLF, LF line terminators","md5":"e3ddbe62a0165407628fb2f25ac8d49a","sha1":"f8919c33dec9e217f04e76b7ca25d58f751f88ca","sha256":"74573edf5b0550b9e3902cd81f817a1b89d012b136ca0de0c28ec2334314f2cd","sha512":"4fedfd631a7ac23c38996787dbd267ebfbce5e65189eea2eaa3648281c52a2a8ece3706f079d21bf821c551c4d6a0110f0b82e243d2b0c986cf7422384d7e405","ssdeep":"1536:Z0Wl0fLoXcipvn/WbRNA3UggQ8EsvFjJvwoMkyomp78N1l/H5XX:mGc1udkyomp78N1l/N","tlshash":"8b74fb9afde11408756ad66891dbbbf9bf7c8047c209ddba79d23230cf067c248d6948","first_seen":"2025-08-11T22:58:22.009652Z","last_seen":"2025-08-11T22:58:22.009652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/dashboardicon.png","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/dashboardicon.png HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 255\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 36, 8-bit/color RGBA, non-interlaced","md5":"a6f0428de686bb5dea8311495a5f0682","sha1":"c3c8d2675e0bba2e3ace63bf7e49161a420fd7ff","sha256":"3352c5636a933325913c63e52e85be6a3901c8da39cc9f960c404b924162818b","sha512":"54646dc95f8bec82678a6997b3294dcf4bcbf3b598edf924d3baa151b2fa39467076ac6f748f1a63d4a3b7fdb34bd0715e4adcaa71f5661c574d362604722ce4","ssdeep":"","tlshash":"19d095ed77155c27d318567bd917432014b71dcd3f15f04d79580971241582c071dbd3","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-06-21T02:28:01.958802Z","times_seen":57,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/icons8-lock-80.png","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/icons8-lock-80.png HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1026\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"a8ff505c14b8c92d415826ae728d2ab4","sha1":"d11fba49b6f08a53ca9151663b58cfb70696e69d","sha256":"f7d7451f3106fff0991baaae038a8f7a4a65c26e86c8aeffdf0616b4b084ccb2","sha512":"6dec4bcffcf7a7601115499acf48bea3d63eaef0cb762546e926fe78560ffb5b4198b353c077f5349d73bb70634f8b6cd8d92d7404ba1954c3502e0146482684","ssdeep":"","tlshash":"0311a59aab18a66adea8833a471de37ce818147ce74051fef606ec97b20614cd097112","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-04-23T08:04:41.60882Z","times_seen":23,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v16/xMQbuFFYT72XzQUpDg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:56.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/sora/v16/xMQbuFFYT72XzQUpDg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qfs-nesara-gesara-system-backup.qpon\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33628\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 18:02:55 GMT\r\nexpires: Fri, 07 Aug 2026 18:02:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363301\r\nlast-modified: Wed, 28 May 2025 17:20:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33628,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33628, version 1.0","md5":"5339ed5f39a648903570b500bc6149b7","sha1":"577e43928cecb4051682fe48c52c560beeaa1359","sha256":"cb6e31ac0b1cb0d954fef37a1e16ce9ea4c26e354b26f6893b5b1ba30d34ca8c","sha512":"bda46345931077bc66f944d917f2ded4e350fb45e7990bb674ad6e1c58687766b8193399a2aefac45582cb3afe66ce5feb3dfb0417412b05d9d5b702709093ee","ssdeep":"768:C9zK7L8tpZaHgEPlElLelhj6IC1hd/KRHsUztjT6BOJTu4pAE:C9zK7QpQlElKnjlC1hBJUpjT6BOJK4z","tlshash":"f5e2f10b8dd96cc2e37b8532b50f097dc358f52eba647bea7062b432d9db0412996e44","first_seen":"2025-06-01T00:28:06.809861Z","last_seen":"2026-07-22T10:06:59.533548Z","times_seen":603,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":106,"dns":0,"connect":17,"send":0,"wait":27,"receive":8,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v16/xMQbuFFYT72XzQUpDg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:56.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/sora/v16/xMQbuFFYT72XzQUpDg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qfs-nesara-gesara-system-backup.qpon\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33628\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 18:02:55 GMT\r\nexpires: Fri, 07 Aug 2026 18:02:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363301\r\nlast-modified: Wed, 28 May 2025 17:20:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33628,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33628, version 1.0","md5":"5339ed5f39a648903570b500bc6149b7","sha1":"577e43928cecb4051682fe48c52c560beeaa1359","sha256":"cb6e31ac0b1cb0d954fef37a1e16ce9ea4c26e354b26f6893b5b1ba30d34ca8c","sha512":"bda46345931077bc66f944d917f2ded4e350fb45e7990bb674ad6e1c58687766b8193399a2aefac45582cb3afe66ce5feb3dfb0417412b05d9d5b702709093ee","ssdeep":"768:C9zK7L8tpZaHgEPlElLelhj6IC1hd/KRHsUztjT6BOJTu4pAE:C9zK7QpQlElKnjlC1hBJUpjT6BOJK4z","tlshash":"f5e2f10b8dd96cc2e37b8532b50f097dc358f52eba647bea7062b432d9db0412996e44","first_seen":"2025-06-01T00:28:06.809861Z","last_seen":"2026-07-22T10:06:59.533548Z","times_seen":603,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":101,"dns":0,"connect":14,"send":0,"wait":14,"receive":15,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/icons8-failed-64.png","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/icons8-failed-64.png HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1891\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3dd60ba869606eb57a62506e25d5b153","sha1":"e0c6a11e02818a53813116b8d98fd0b422e0508d","sha256":"7242553b482e8a7495f0fa8a7b17b01fada14449f0b9737a9530e3cc2f07895e","sha512":"f23501024f21c4fa5cbec82651ca43542100a9a7d610c530f075c60f46a867efdf06d9a174f23b2e8bef3227a9a256b4b5e87e305fdaa78352bd108905a0402a","ssdeep":"","tlshash":"7f413d7653158562baf5b16d0b1b0034d0eed363b51259c50aa9f0ce7e07a9798fb314","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-06-21T02:28:01.957202Z","times_seen":36,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/twitter-line1.svg","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/twitter-line1.svg HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 756\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1493,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"236ab9b2f596ea909f78c9ce9866427e","sha1":"7f8620cb5a7350217f7cb118ad95ecec4e736f96","sha256":"d1db520f00d45d0757be59b0a9784d10accc592ce11acdd7c74969f26c165b64","sha512":"b2703c75c715061663599006ab4dcf1c553b06d912b24786db3c8b7c66af4b1814a5d7df24c4356094123f35884890119fe9535e83fe0de89efa169fa2c83b3c","ssdeep":"","tlshash":"8a3140f67ae182d075039346fd3265b66aac3cfb9fd4dadd82905fd090122b6c88cc40","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-04-23T08:04:41.58849Z","times_seen":19,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/2319e50016f7b0189a5aa230dc0f0560f8c353e6.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.78.79.83","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:56.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 01 Jan 2025 00:00:00 GMT","end":"Fri, 30 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:C6:B6:6C:12:F6:01:2B:C5:12:CD:14:1F:5F:98:93:35:23:E6:72","sha256":"62:89:5E:08:77:16:42:58:9D:77:1F:38:8C:73:AA:58:D5:ED:1F:1A:79:6A:FB:C6:2A:FF:C5:C1:C9:87:AE:AE"}}},"request":{"raw":"GET /widget/2319e50016f7b0189a5aa230dc0f0560f8c353e6.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://qfs-nesara-gesara-system-backup.qpon\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 11 Aug 2025 22:57:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 144a363f30d9c9165f08f3a591e8e2bf34692360\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-07-24T09:58:37.326863Z","times_seen":3269,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":83,"dns":19,"connect":23,"send":0,"wait":24,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/icons8-warning-64.png","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/icons8-warning-64.png HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1949\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"f829c98cd9136a56b8b4a6b197c32f88","sha1":"787610af8240f5c90dc2a6319bc985e7e51ce3b2","sha256":"b3661995398df547c427d0b41c402a13aae523ed81111dd3cc0c45b8c0ee09ef","sha512":"40181131fcd197a2c2b4d6a940d5c0bba04004b5022c2f12861a7d9ad673828426df91fb63287b7559984baf3799c166fe5e3a1675ada0befdb2bf7dc1bc657c","ssdeep":"","tlshash":"8c414eb993b40dc55c65554016d784e285369983761b5f00ca3cb5e9d452130d2ecec0","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-06-21T02:28:01.976688Z","times_seen":40,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/vendors/%40popperjs/popper.min.js","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /vendors/%40popperjs/popper.min.js HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 06 Nov 2023 11:15:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6434\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18594,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18506)","md5":"83e6ef063fa41ff8d8c00956a7cd3fd9","sha1":"8eeb7bf71e8a978b82a1a198015f14d73d2ea592","sha256":"5a07c69f9061eb12e39a031358a4f567f30a002ad6182639ac84fd1bda2f6e65","sha512":"dab363d8a27e0fcb3571e35ab1321ec7acf81d6c8e9c460b542dc58a018e9b240265cd9e0572a03b1426a37a0a2c7c9f723e77bb3e1032c44258d6cb777d90d6","ssdeep":"384:PDzk5KmEpLFd7tRwQZMVwAVfbsnmlHiBnjLU4MSV1Nn1awap1P9Vy8UuZHFh+L4O:NmERLwQZcFVLCBjg4MC1Nn1ip1P9Vy84","tlshash":"5d82c6cd3994f0a1167b52b6c07f550f73339561228ea410b255d6dd2c74ebba22bc3e","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-07-24T16:00:26.997375Z","times_seen":5647,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v16/xMQbuFFYT72XzQUpDg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:56.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/sora/v16/xMQbuFFYT72XzQUpDg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qfs-nesara-gesara-system-backup.qpon\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33628\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 18:02:55 GMT\r\nexpires: Fri, 07 Aug 2026 18:02:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363301\r\nlast-modified: Wed, 28 May 2025 17:20:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33628,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33628, version 1.0","md5":"5339ed5f39a648903570b500bc6149b7","sha1":"577e43928cecb4051682fe48c52c560beeaa1359","sha256":"cb6e31ac0b1cb0d954fef37a1e16ce9ea4c26e354b26f6893b5b1ba30d34ca8c","sha512":"bda46345931077bc66f944d917f2ded4e350fb45e7990bb674ad6e1c58687766b8193399a2aefac45582cb3afe66ce5feb3dfb0417412b05d9d5b702709093ee","ssdeep":"768:C9zK7L8tpZaHgEPlElLelhj6IC1hd/KRHsUztjT6BOJTu4pAE:C9zK7QpQlElKnjlC1hBJUpjT6BOJK4z","tlshash":"f5e2f10b8dd96cc2e37b8532b50f097dc358f52eba647bea7062b432d9db0412996e44","first_seen":"2025-06-01T00:28:06.809861Z","last_seen":"2026-07-22T10:06:59.533548Z","times_seen":603,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":211,"dns":6,"connect":14,"send":0,"wait":14,"receive":5,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/profile.png","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/profile.png HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 738\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"91eea7448051513f82beb45113f3b018","sha1":"1d14e4ae0fb518f02e0e0c5c6a7097e185776495","sha256":"635c2ccb1c85adb79f6b7adb045678a33ddfe64b95f4d8c29a23c4afe1418d37","sha512":"6711184925b65ce84a2d15b1d6ecd5ffc4820bb534e68ad21c412d877b59c7526c3b217a2fa120f4abd9d350047c61a5eef9b38d22d063252dd81c6499e92272","ssdeep":"","tlshash":"aa0165cb2f59d4abcd4cb8d64c47c0a6526f785a5a44590915fe6932806184a510c2fc","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-06-21T02:28:01.960878Z","times_seen":55,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/js/theme.js","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/js/theme.js HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3880\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16386,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"18e1fc5b6bf32a9fec752d489d3bb5c9","sha1":"25065386cea3f665dd615b17dc0968e07c1b5bf3","sha256":"7219c59e98997653cd87502b478dd1dae5de96c4caa26772e490e1a6449e4824","sha512":"56af1c62db29ab2cd0da4820706df8177f9a1e34b5696b697c81e9fe68dc301694d7247daa62c67d335583ac2f2c1b1ad6b77fa8e3cc58e719e1278ed20881fa","ssdeep":"384:zWg0l48YOjbZlCG6xHxtmLoHRdJXsywZuK6p2bmgbBMgT8H2BD52CG3Fzy6ru:zWNl4DUbHCxxHxtmLoHRdJXsywZudp2t","tlshash":"0272971a9da3209328a7d02a13effb04f8591043850cea537dbfe7946f10667917edda","first_seen":"2023-03-08T05:53:05Z","last_seen":"2026-04-23T08:04:41.609799Z","times_seen":15,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/trilored.png","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/trilored.png HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 949\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"2bdc0686af96a78ab803cb958a00948a","sha1":"6dc714340962c1bdd4ffca04092182dbb87cbd17","sha256":"ba93d0878490ca33b12d9570eba80118525f42fe0b224b4d36ba4188db6e811b","sha512":"9f8507a47339a25f810a690c2faefa40e65077c240cbedecd91b7b357aa6818ad59a2287547afcbd926a41963e088e1cfce3e3a47dca235b6e9356e16bdc369e","ssdeep":"","tlshash":"3c11c8f3a353123fea1fecd2c4775264f7980324e1153c8693e888a643acbb22500c27","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-06-21T02:28:01.969057Z","times_seen":57,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/statistics.png","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/statistics.png HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 449\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"d58587d557a76769e04bdf176fe88455","sha1":"fdca0736a81d1dc33acaf7f00c85cdd2aaa0af90","sha256":"ffd3898de64fb708aa8d4181b01b739414f53367aa5a9817b6be9e4587d68d33","sha512":"6336c6d67e935a010d2d9f7b51ed4f6389757245be273b1aba739459d11f264bf1485464dda0063896f763f3c12786cc5aa21b0daf1e80603f6170e45fcc082e","ssdeep":"","tlshash":"8cf02be2e7070fef834e6de134968c51a07d2a4a081321099484e530b3feedab0b9333","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-06-21T02:28:01.970474Z","times_seen":51,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/vendors/swiper/swiper-bundle.min.js","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /vendors/swiper/swiper-bundle.min.js HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 06 Nov 2023 11:15:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 36134\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":141834,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"560c65473e0603930135a1c0772fe599","sha1":"4366ca58175d624044ca3ff64ab9ab05b8fbf062","sha256":"6d73baf9c6e59776046d591aa20106ed6a9d534cdb197691cb6f813c75a384e5","sha512":"9fa1a9a0f2b3762af9dae45add9f8cf81c4114d1b030c55321264cf4b320f65317c9156bb427106af90ff3534e234e8dc9552c90df462f364842d3ee1771962e","ssdeep":"1536:6Gu3sSOSdeGKfHTiuqoP9ROZBSlezQpDN+5ohRnvaa/phjiyvH7WcVOMFjqqKsW+:50kdFROZB5of7/pAkH7WcVO4jqqBBUS1","tlshash":"d5d3178db360b2a151e73256539ed10263b65845b80ac5a470768cd7acbde8c03bfefd","first_seen":"2023-03-08T13:10:21Z","last_seen":"2026-07-20T13:55:30.669018Z","times_seen":36,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/icons8-neutral-trading-80.png","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/icons8-neutral-trading-80.png HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 588\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"57f9d8872acf20d4b7176ce80f8d17b4","sha1":"d4569d7b791394ddabc001f7d258fc6279da51ad","sha256":"f370098a4383726b3e57366ef639e778cb73a7ff71f5382f06fc7b6830e5c0db","sha512":"a4cd2138abde30fc6f4c4fcfed593b85ea7521672ed36205633ad09c7c7574c9771b8f45f4cd8c61e6dc0c4520839e55dcd366324a59902d9cf8c105cc355562","ssdeep":"","tlshash":"2af0417f117b58e3e33a422da3aa52aab0be20586fcd8a358508545c1a1586c4411f9f","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-06-21T02:28:01.962286Z","times_seen":41,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.js","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.js HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-24T16:29:09.208286Z","times_seen":142969,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:56.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qfs-nesara-gesara-system-backup.qpon\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 06 Aug 2025 21:38:48 GMT\r\nexpires: Thu, 06 Aug 2026 21:38:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 436748\r\nlast-modified: Wed, 23 Apr 2025 16:05:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-24T16:51:44.182371Z","times_seen":382367,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/walletsconnectvalidator.net/images/walletconnect-logo.html","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:56.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /walletsconnectvalidator.net/images/walletconnect-logo.html HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 06 Nov 2023 11:15:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 189\r\ndate: Mon, 11 Aug 2025 22:57:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-07-24T16:54:10.727568Z","times_seen":146389,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/vendors/is/is.min.js","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /vendors/is/is.min.js HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 06 Nov 2023 11:15:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3930\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13181,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13132)","md5":"5c9dca2a19f05dc6d7b1afa3244a8f6b","sha1":"4a8519b04be003f12a833e634ba5736a6634fa19","sha256":"96725eba539addee483b61331ebf23289dc26d3f34301c244b96be9f6a2822be","sha512":"0ef85551d416608f54a05e47187865d349db50572bfa3e9d1a583f152ae896a47712b89d13c085f369c234066c1388803e4c3fc2cd0eec8ad9d63394b89417c6","ssdeep":"192:/Q9B/+ZnHDVD5XlBQiAhkWZc682vLHIFO7APTKpXYx3b7zi5/8:/smnjD/QiCq682sFO8KpXYx3u8","tlshash":"b942748df5d2f01d8357baa80a3f4106f23bdee5d88e5128d664d8913cb480ed57af98","first_seen":"2023-03-07T01:35:45Z","last_seen":"2026-07-22T21:59:48.540386Z","times_seen":708,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 04 Dec 2024 00:00:00 GMT","end":"Sun, 28 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"5E:7A:A9:36:B1:77:7D:E9:4A:88:DF:57:72:66:9B:49:8C:C2:1B:7B","sha256":"5B:82:B2:0D:AE:78:68:58:AD:62:AD:72:F0:D2:53:96:BC:77:BA:01:A6:44:FE:40:68:2B:94:C4:F0:C0:C0:C3"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"687faa84-46dd\"\r\nexpires: Mon, 11 Aug 2025 23:01:11 GMT\r\nlast-modified: Tue, 22 Jul 2025 15:13:08 GMT\r\nx-77-nzt: EwwBuUwJGwH3KwAAAAwBuUwKCQH3AwAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb54123fa5c82d573759a68a269163b\r\nx-77-cache: HIT\r\nx-77-age: 43\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18141,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18068)","md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-06-25T21:19:38.907057Z","times_seen":9278,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":27,"dns":31,"connect":7,"send":0,"wait":8,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 11 Aug 2025 22:57:56 GMT\r\ndate: Mon, 11 Aug 2025 22:57:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13211,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"87fd9c394c6bf44f13671ecff9d16e87","sha1":"c037490582ed1168c1298939a1940053bd5fffb7","sha256":"1fed250f54061a4da0dd37c4a54dfc01c19a25d7421696f583644fe81ccdbbfe","sha512":"ebb74aa83148e74dbe031b7f4b1c95d20e6cd0fce46ad2c552d7713bea1111a039fc347ebcd9aa9b1c8b37368af665481301779103ba36dc79e6aab634b24974","ssdeep":"192:HALLAL+oALjnLznLmonLbOcOFoOAqfeuwqdApvQn+q3K4laY4uJongslzLzh:H48A/rvJvZ","tlshash":"d1527cd1087be104ab871cc122df6d36ee0ea255a850e5786bfd0c98ada7c69437172d","first_seen":"2025-06-02T00:26:55.862955Z","last_seen":"2025-08-25T02:16:52.169337Z","times_seen":8,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":166,"dns":0,"connect":28,"send":0,"wait":33,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-11T22:57:55.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 01 May 2025 07:45:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3645\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}],"data":{"size":18783,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (727)","md5":"e622e75a7b39a341942f89d7f3b3c817","sha1":"d46f4daf13e5df07c825e1ba1a41f9d1c89da2b8","sha256":"67d60331a5d5c29d46ae99aad9d0f35129e44bcbfcf164ed626686b874d816ff","sha512":"cc839a3a0ff9f0552d649356f690d1177e43a32f2a7ea9d1d23b46239a5bac9f2a3685bd9b4456e79898c83345eaf1888498260dfb44d5acd88d1dab93cf9b2a","ssdeep":"384:sulokpK1P1x1MQQe+E8gH1l2N1m1G1fjH:srYK1P1x1MQQVE8gH1l2N1m1G1b","tlshash":"10821135b8f5523701a3a0b266b02e5effa1d50bd61b5558b2bc0ae45fe3f45ce17088","first_seen":"2025-08-11T22:58:22.021941Z","last_seen":"2025-08-11T22:58:22.021941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":93,"dns":38,"connect":20,"send":0,"wait":25,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/vendors/swiper/swiper-bundle.min.css","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /vendors/swiper/swiper-bundle.min.css HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Nov 2023 11:15:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3849\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13872,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13619)","md5":"45a021d8e97341a17b00a99a7bd75e2c","sha1":"733ca754bbad4c418655ad6208029b92f5d39146","sha256":"d3a31c454111f7bbb00ce5d2d3fcd45a6aea103e106228a1d3a725ab07741bc4","sha512":"f06ad726361480103974796253ec996194be89cfe89124f3d256455b63dead06ceee5c265452f9581680261a6f65df0f73f421fff031c0c8a4e594ddf2698052","ssdeep":"384:YJUbeo7zOqgx9BUsm/XCXif65W/1mXA82FHyx:Yubr7zOlbDm/Xwif65W/1mXA82F6","tlshash":"2052236417003837f3774f6e4aa1e6b59f60cc838a934d9db2c0dd44d6fa8b9122eb95","first_seen":"2023-05-07T20:50:37Z","last_seen":"2026-07-24T14:27:46.349355Z","times_seen":227,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfs-nesara-gesara-system-backup.qpon/assets/img/gallery/linkedin-line1.svg","fqdn":"qfs-nesara-gesara-system-backup.qpon","domain":"qfs-nesara-gesara-system-backup.qpon","tld":"qpon"},"ip":{"addr":"86.107.77.178","port":443,"asn":207913,"as":"Next Level Business Srl","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfs-nesara-gesara-system-backup.qpon/","date":"2025-08-11T22:57:55.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfs-nesara-gesara-system-backup.qpon","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 12:38:17 GMT","end":"Sun, 05 Oct 2025 12:38:16 GMT"},"fingerprint":{"sha1":"02:F4:9F:FC:A9:EC:12:69:7E:45:25:32:36:1B:31:9D:29:A5:5D:B6","sha256":"AE:58:29:42:DF:CC:DC:E6:6C:55:92:37:94:FC:15:AD:48:D7:06:07:63:45:B0:AD:40:B1:67:89:14:C5:5F:8B"}}},"request":{"raw":"GET /assets/img/gallery/linkedin-line1.svg HTTP/1.1\r\nHost: qfs-nesara-gesara-system-backup.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfs-nesara-gesara-system-backup.qpon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:57:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 06 Nov 2023 11:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 442\r\ndate: Mon, 11 Aug 2025 22:57:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":956,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f7698e87cb2181043c1dbac7568af68","sha1":"4a26c784c3056afd8a249c39e3ed6e92292d0b5b","sha256":"0f6baee12736dec90cabc4342e1cc920ae615cdd8d11feb8d47a8006336b4d9f","sha512":"bdf3969d59cfc272aa5eabccfeda4085b3838e1264b7b65fa1dbb0e6dc4504f0261f2fc13b7165af25d0483f343655564ec576710e72904c98b4d249ea8df9f0","ssdeep":"","tlshash":"2d1110f5e1a06492ed039398fe2b7c924a8f18f56ed4def6e1101771a82199dcc0ad00","first_seen":"2023-06-05T03:08:16Z","last_seen":"2026-04-23T08:04:41.587315Z","times_seen":20,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"qfs-nesara-gesara-system-backup.qpon","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}