{"report_id":"f0e49a93-3e10-4a50-81e8-e61e513b432c","version":0,"status":"done","tags":[],"date":"2026-08-26T05:34:06Z","url":{"schema":"https","addr":"bitvaultchain.com/","fqdn":"bitvaultchain.com","domain":"bitvaultchain.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"qfslinkconnect.com/root/index.php","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"title":"1 new message","dom":{"size":34325,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7314)","md5":"c5007e1206d97c8b352288a62daa62fb","sha1":"138f59c52cb4c66c87ec0dff543558c903557809","sha256":"74587719b8e50b86267d9a295064493ba360d22a1332b2c8182c5a89b59096c3","sha512":"9df61e3e97f43889e4492f8b63d56fb51fcf49ed8184e234f7c0b1caeef71b13b537c3d76b7c629674fbd41b40ae478142b1cbdc9f41e7b96abb4b07318b9c3e","ssdeep":"384:7bnVtKGRDjoL329tmb38nnjhS8pknXFRosuL:fnVt5va3gk78njhS8pknXFRosuL","tlshash":"78f20e27b9f0102600424241aaf67b7e7ebda5038b264e7472ed27ad5fc3ecbd853548","dom_hash":"domhasha757d4843933938cc2b927438e5efb13","first_seen":"2026-08-26T05:34:14.761244Z","last_seen":"2026-08-26T05:34:14.761244Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bitvaultchain.com/","fqdn":"bitvaultchain.com","domain":"bitvaultchain.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T05:34:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"bitvaultchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"qfslinkconnect.com","ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"domain_registered":"2025-10-21","domain_rank":0,"first_seen":"2026-08-26T05:32:43.029801Z","last_seen":"2026-08-26T05:32:43.029801Z","alert_count":0,"request_count":29,"received_data":5472144,"sent_data":15044,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":7,"received_data":160607,"sent_data":3879,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bitvaultchain.com","ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-11-02","domain_rank":0,"first_seen":"2023-11-02T16:31:35Z","last_seen":"2026-08-26T05:32:43.797135Z","alert_count":1,"request_count":1,"received_data":444,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"vsb96.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1018649,"first_seen":"2020-04-04T10:01:52Z","last_seen":"2026-08-21T12:22:46.83911Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1108,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":2,"received_data":42307,"sent_data":1251,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-08-24T21:09:43.85782Z","alert_count":0,"request_count":26,"received_data":1407644,"sent_data":12957,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-08-25T02:30:25.401442Z","alert_count":0,"request_count":3,"received_data":6307,"sent_data":1710,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-23T23:05:01.76831Z","alert_count":0,"request_count":2,"received_data":305250,"sent_data":976,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/jquery.magnific-popup.min.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-26T08:09:07.107252Z","times_seen":74608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/jquery.countTo.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"acad36d38da9f68c52bb074b2c478d0f","sha1":"922c71c5699f9306a415a7a344be46d92e0fc4a1","sha256":"00619814b3b256720a9ffd9408397d0ffe5559ff301d608eb66f585343fd83a2","sha512":"5be7c4d8f9e001a527d75e1fa0eb63edb24d0eaaea00d2ca8c66fa832cf5e7d868175f8d9c45917e042d1299f79022e3425510fc50214ec9a6a9034ec7f4413b","ssdeep":"","tlshash":"46716d49bbef2111956b20dd5f5f114c3234932b144b8548799d93c08fa6839e6eafbc","size":3761,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-26T05:34:14.784624Z","times_seen":1430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-26T07:11:52.01408Z","times_seen":43148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7308b5ce68bf72454e6d5e038697c151","sha1":"e3256a93e366928adcbae91772415048bcbbf453","sha256":"52070db866258a8cec9501fc7a2f6262a16c2517ce72901c996900a8f2ac65a3","sha512":"898434a37758ede4df98d8ba0fe1d64eefe80419cbf5bbfbc0b8b59d3acf47f14bd2dbda3c5a61f36e10329befe8317ae572123c095276ed62edd0b23b7637bc","ssdeep":"192:0H9Ma8RIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:K8b9HkS316xAFKpLZEh","tlshash":"3632a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","size":11888,"data":"","first_seen":"2026-08-14T21:10:07.032126Z","last_seen":"2026-08-26T07:11:52.013573Z","times_seen":475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/jquery-3.4.1.min.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-26T07:05:58.687321Z","times_seen":139795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/onyx.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebc8660d596d9dc50ee2f76de0a87d49","sha1":"80dc89e61a0da06fb470716e32d6df036faf4931","sha256":"2e8407e7a55fa7b505d07ead0610cad3a387f2a6c5de0120d57410bc6ad48965","sha512":"12a06022db26b278e6c589fc463091f8ede81f27e64fa938ef09b28bab306a82d0b74b95115acfc963eeb3c0b15c45004179c30f7ff11c1220bf252215f5217c","ssdeep":"192:2QZVrIOl+dlD9+ut6d2QyJClf4Q2yjG4znX:zMOYQllbX","tlshash":"66829908fcb1495308bbf47a0b7fa600ea544007cb8ded15b91e97985f4462db4be7da","size":17603,"data":"","first_seen":"2023-03-14T09:06:45Z","last_seen":"2026-08-26T05:34:14.770341Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-26T07:11:52.046492Z","times_seen":94255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca30657f0402cac8339147c951d92e0d","sha1":"91f3ab87c99148c4ef2d7af45207de86c660032a","sha256":"b307b937a93ef6602be9220479c091f96c45d8a07958ec34d204b3123218ce9a","sha512":"a84d1b34bc1f791beed7fad274bd8555a424aa837f1b947134874ff4b10332b8d26d847bfd6811d97d23c486faddd6d082e7c185ea1b38e98d533ca04ab00fcd","ssdeep":"3072:A8gYgcvYqhJrTodCWFW1Wx08fMOAUTqCpQio/rtxLMz9gZ1a:5OCWFW1WxVfMOA/uKbLMz9S1a","tlshash":"4134c69df186b47606a37131501f320af23a685ab45ac0d4f636d8e1bd789cea133f79","size":244281,"data":"","first_seen":"2026-08-14T21:10:06.988881Z","last_seen":"2026-08-26T07:11:51.990654Z","times_seen":756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","size":348923,"data":"","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-26T07:11:52.013066Z","times_seen":10961,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d629d92b0f3db8cf35d9033bfb8bb4de","sha1":"540ad35dc02ac9fe95061c719494cf13f6569aea","sha256":"83e55b6787ffce43087562d22b0af12c12a25e0f729c4c2b76f534278c838499","sha512":"2c4b20bb80ceffa32e292237ab932d36b496b962878f505daab5924b87798cd60d4ecdb3430914fa2bb3e6ab9ffd0bafd9d54e461d530664c470f03e5354ef96","ssdeep":"1536:BigMvSFu1D6woLGnA2jYDpgaOJDWbaylDluKzWNraURPkx3uYV5pKYerlSy:47iul4vGia2x3uYV5pwrlSy","tlshash":"f4b3196ef091b43d89939162209f3212f3363d55a919d0a8f678cef419d89c96127f3e","size":111386,"data":"","first_seen":"2026-08-14T21:10:07.016579Z","last_seen":"2026-08-26T07:11:52.041091Z","times_seen":613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-26T07:11:52.052204Z","times_seen":50716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-26T07:11:27.825373Z","times_seen":52006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/swiper.min.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e03a1642bc770c1b77326254cb654c4","sha1":"6b2802f3b62530d6cc195009b79a825932933240","sha256":"ca478538afebbf85296cca9dfa85da0e1534c290e29c344f0bdd7d00d16a1a28","sha512":"7f105652ee87141e0f2b1f03854bb4328072754324cfb54de137daeaa664698d2747eae7a3178f46546b50a5a9fe80334ff5f2ca6d949e3daa72d9f432922fba","ssdeep":"1536:Fj2qhgxfeuGMfo3i2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgP:wxoz6desFshaKi+HgZsUOUTqiqMr7EO","tlshash":"e6d3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","size":139262,"data":"","first_seen":"2023-08-13T06:11:07Z","last_seen":"2026-08-26T05:34:14.791604Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6a1c75c1b0044c1c309a6dfe/1jpvinven","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86151fe12f722fdfd552e0a1e66a6a2d","sha1":"0537cb927cc48ed61bb18698581e586ec5b55899","sha256":"5b989766f8cdc9dd968ed5a0701de50c3639803c5caeee4458dd22c296dc41cc","sha512":"15608e98b461d44dd1f37739789fece9e551ba8b91c9a6e7afe4c0ad78e2c79c4d6c862cdef062e2bc8681708af8d315702c9de118d1781801d6e4b208b5a4c0","ssdeep":"","tlshash":"5841f3e79f9f1857e32410d90daffa0e747b22ea49e85cd2470c0411b2557ad6acee38","size":2123,"data":"","first_seen":"2026-08-26T05:32:54.356509Z","last_seen":"2026-08-26T05:34:14.786871Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-26T07:11:51.983074Z","times_seen":94282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","size":10918,"data":"","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-26T07:11:51.985116Z","times_seen":15034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"563a805630dd08a9393defdbf2df2bb4","sha1":"ac843996f7ecf9a3e81089a0c95aa437ee73416f","sha256":"df87d66b9d25ff5731a825fd2a0c4759f6f6147a64f5c100bb92a95da4528ff2","sha512":"f7ba303a56e5b2bc3df4bad10b034366d2e85f5f3cc7cdd8d6840f9538ac5c3eb798227152a0f2d1f64fb04b8cdeb8d4bff908763c021d644356bca1e6c276fa","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kC7GN//h6LiJq:SzP2DxSLi8","tlshash":"77822ba6f149311bc925c751605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-08-14T21:10:07.006778Z","last_seen":"2026-08-26T07:11:52.027444Z","times_seen":640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b42986e1b152902aa7e221095c824a29","sha1":"a78d1753a6da51657c1451f10d9b40f9dd6ef534","sha256":"a371707a17d64af6fa61b9084ea1ac40ba60728b383eab5777837453266bbb69","sha512":"af6e1f60ea2ca3241e57215fd80039acc29cec382a248b6cd580ace6c71a69e1f6ce2c7f96a091da044aa0cf7e92ff5bba19b5b1f7431b93b63f047adc0b8c3d","ssdeep":"384:Nqw/U5YK8Hxhq0ThWazJbUZDkM0kWEYPk6c+VtKM5eW:A+hq0ThWazJbUZDkM0kWEYPk6c+e2eW","tlshash":"ac52d7a7b2a4782d02379712308f3204f33b7d45b615da19f36edcea4aa84c16056f3e","size":14277,"data":"","first_seen":"2026-08-14T21:10:07.034439Z","last_seen":"2026-08-26T07:11:52.048986Z","times_seen":601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7d88b42e6403da8e9ff02766a45cb8b","sha1":"3350c387ebb138ebd523634d2afe02a2e51da0bd","sha256":"fd7b35fad22d36ed72bc9ed33b416c8dd43b337484ed41c6fff2cd3817df5bd6","sha512":"91102e89de58787e9c70103ebd5767c2fd2ceccd7597136706590e08750d5a1cb833b5577a222c13e0ab44c4e001253d3c53331358f07d93e4a65edd8c753c0f","ssdeep":"96:zNC9Hqt7pEma7hY/rcKOJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYMLRIvgx43nVY","tlshash":"43b1859af247b456c156225150ef3b1df33a281ca61ccdc4a66965f218784cba077b3d","size":5261,"data":"","first_seen":"2026-08-14T21:10:06.99602Z","last_seen":"2026-08-26T07:11:51.98632Z","times_seen":640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/bootstrap.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffcd65b7f48aea5c910ec3000c3f5738","sha1":"28b4677466efbf48907614d4071f20ba0a4f3aba","sha256":"a84fb10d4ac751de74e2d2d603a4215cb4edef1053e5077a680b73b87b6472e9","sha512":"150ff09ff7c7188ff122ff7acf0c679bffdd4c682bb732a11f75141e1f8ed5d1cd371a824fec148476bc61ca72b9f60c4b1b3c77f24eb235cbdc2fc99096e92e","ssdeep":"1536:5XMG/5lzsiLOvFUqZGbVLK/vuOhubEq12NQdYz:759siWFUOvhMEq1rdK","tlshash":"a0d3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","size":131639,"data":"","first_seen":"2025-08-29T18:47:30.341291Z","last_seen":"2026-08-26T05:34:14.779914Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/index.php","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"18cc7fc303911b4c8595f5e0fb2228e6","sha1":"532329a2897169efd63afa0369e9d29aa74a3f85","sha256":"d219b8456b6d0502e33f53d4bd66c24cb1888d76602e1efd7b4f2d785cdb00a8","sha512":"77b6fd0b2037a961c739fdb2fd07210cb284debba0d5b72df0e7d59f7b19dc49f9ef641593891c0a2aa04758fe7a0a1b2b3ce309752b36056e8aea44a23374de","ssdeep":"","tlshash":"38e0265d2a40be29926356e715b6ee4c34b63128e555a850a8df8c082a18c8ac52cf9d","size":332,"data":"","first_seen":"2026-08-26T05:32:54.39373Z","last_seen":"2026-08-26T05:34:14.802424Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-26T07:11:52.002074Z","times_seen":67752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c30dacb5eab82fcc774efa5e9a7648e","sha1":"17ad955811f541c8d6dfeb63ec76e72911f0e989","sha256":"f1e317e731329be9c1206376e79cab783fa14bef6a1089951206a42d38517baa","sha512":"cb5d5ab3cd2a329f503d05e6602c618a3afec17e752d0aeb35a92e5f78f9cb3eb1615ee18756677649ef23a3b1c1256af3d31d8306b9a9eec94a60a34bed290c","ssdeep":"","tlshash":"494183d937e8f9b6434318e1043f9016f6352976097be8c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-08-14T21:10:07.022852Z","last_seen":"2026-08-26T07:11:51.998582Z","times_seen":757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b7571445a752df762894d31268e7c12","sha1":"54b956960bd4376f15523f25f586fc5478a626fc","sha256":"2a768547370a8933454d03757e1981e616d448234e06e5b9dcf1608f35bec644","sha512":"12e90c52c5cce1f2767060de43c8627fb789a49f5a1b1a681048e732f08ae67194f4ee0c7a80f305778c67e31a756555c54d463bbdab66f19b03f8f050aa4e71","ssdeep":"768:Vlxfu8+HYUmI+rT1Wf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK4/:xfuro0f20UJWfO+Et7GZrCi20k","tlshash":"8133d9cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","size":54211,"data":"","first_seen":"2026-07-08T23:24:03.874474Z","last_seen":"2026-08-26T07:11:52.043506Z","times_seen":3984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qfslinkconnect.com/root/images/digital.png","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.836Z","timestamp":1787722413836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/images/digital.png HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 26 Aug 2027 05:33:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1491345\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1491345,"size_decoded":1491822,"mime_type":"image/png","magic":"PNG image data, 1488 x 816, 8-bit/color RGB, non-interlaced","md5":"1495204e904cab8bcce68a36fbd4b727","sha1":"8350641f81a67667e2b52ee6caa27bff8535239b","sha256":"de2fdaa89e04fa9c3ca28be5d98ca5fca9c313c0603687352ae1051b87824119","sha512":"7685e4496ae20431943ae04efe27cd4755ff5135b5354abbb6eafd051c3b366276aa45524c233f2d6ca530b87606a6d9be466575873f00c557a3f2a5f268d9e5","ssdeep":"24576:qfjG5jx1UOUC37roU0TKuFxM/Fj0XoRJjNLd3jc1w:q7G5jvUON7rST9aBioRJjNLdTQw","tlshash":"532533b9f84996e7437fc8806efcae5cf919b22a87c76c00420eb1d389f5d5831d6858","first_seen":"2025-08-11T22:49:02.238098Z","last_seen":"2026-08-26T05:34:14.76329Z","times_seen":14,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.055Z","timestamp":1787722414055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:11:40 GMT\r\nexpires: Thu, 19 Aug 2027 13:11:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 577314\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":33681,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-08-26T07:03:08.420335Z","times_seen":31058,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":39,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.259Z","timestamp":1787722415259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981367\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3107667690249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36092,"size_decoded":8711,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-26T07:11:51.991972Z","times_seen":50537,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.222Z","timestamp":1787722415222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: \"b42986e1b152902aa7e221095c824a29\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 806\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a310766728fa49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14277,"size_decoded":5532,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14277), with no line terminators","md5":"b42986e1b152902aa7e221095c824a29","sha1":"a78d1753a6da51657c1451f10d9b40f9dd6ef534","sha256":"a371707a17d64af6fa61b9084ea1ac40ba60728b383eab5777837453266bbb69","sha512":"af6e1f60ea2ca3241e57215fd80039acc29cec382a248b6cd580ace6c71a69e1f6ce2c7f96a091da044aa0cf7e92ff5bba19b5b1f7431b93b63f047adc0b8c3d","ssdeep":"384:Nqw/U5YK8Hxhq0ThWazJbUZDkM0kWEYPk6c+VtKM5eW:A+hq0ThWazJbUZDkM0kWEYPk6c+e2eW","tlshash":"ac52d7a7b2a4782d02379712308f3204f33b7d45b615da19f36edcea4aa84c16056f3e","first_seen":"2026-08-14T21:10:07.034439Z","last_seen":"2026-08-26T07:11:52.048986Z","times_seen":601,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/jquery-3.4.1.min.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.810Z","timestamp":1787722413810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30047\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88145,"size_decoded":30572,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-26T07:05:58.687321Z","times_seen":139795,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/menu.html","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.092Z","timestamp":1787722414092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/js/menu.html HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:34 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 09 Oct 2023 09:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 725\r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T08:40:46.137914Z","times_seen":18110161,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.517Z","timestamp":1787722414517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 92\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a3107662be5e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":32852,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-26T07:11:52.002074Z","times_seen":67752,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.223Z","timestamp":1787722415223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981367\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a310766728fb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":1081,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-26T07:11:52.052204Z","times_seen":50716,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.524Z","timestamp":1787722414524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 92\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: a3107662eecb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":654,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-26T07:11:51.983074Z","times_seen":94282,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.674Z","timestamp":1787722414674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://qfslinkconnect.com/\r\nOrigin: https://qfslinkconnect.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-q1wb\r\naccess-control-allow-origin: https://qfslinkconnect.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a3107663bc14b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":716,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T08:40:46.137914Z","times_seen":18110161,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/images/block.html","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.841Z","timestamp":1787722413841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/images/block.html HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 05 Aug 2024 06:33:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10676\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10762,"size_decoded":11195,"mime_type":"text/html","magic":"data","md5":"ffa0bd47e288903770e38ff7e006a071","sha1":"30bcbf173f7824c8960fc3552eed04ba67810752","sha256":"14fe4e2aa4209e41db6a815e29d23d6161e063c66ed1257b6630a0fc2c1f8d7f","sha512":"f053d4a454eaf640568544285d2b8ec8407ee0b46a1e028be0aed75c60a75172da665682d5e8ed0f777652e1f9706652facb68d65f54f8761785763a9e2cbd67","ssdeep":"384:LklvQlJro6Niw7ftmCKWC1BroSSrzqXe8FZw/XoWKsXvo95J:Jl1o6N/fg0CFoSDXV3WKsXv0","tlshash":"f962af62ae04ef30ee3ec1f114675b44a3e525fdbae0a291c114d9507ca50d8b6dfeb4","first_seen":"2026-08-26T05:32:54.347917Z","last_seen":"2026-08-26T05:34:14.769305Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/onyx.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.821Z","timestamp":1787722413821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/js/onyx.js HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3010\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17603,"size_decoded":3534,"mime_type":"text/javascript","magic":"magic text fragment for file(1) cmd, 2nd line \"/*-----------------------------------------------------------\", 3rd line \"* Template Name    : Onyx | Responsive One Page HTML Template\"","md5":"ebc8660d596d9dc50ee2f76de0a87d49","sha1":"80dc89e61a0da06fb470716e32d6df036faf4931","sha256":"2e8407e7a55fa7b505d07ead0610cad3a387f2a6c5de0120d57410bc6ad48965","sha512":"12a06022db26b278e6c589fc463091f8ede81f27e64fa938ef09b28bab306a82d0b74b95115acfc963eeb3c0b15c45004179c30f7ff11c1220bf252215f5217c","ssdeep":"192:2QZVrIOl+dlD9+ut6d2QyJClf4Q2yjG4znX:zMOYQllbX","tlshash":"66829908fcb1495308bbf47a0b7fa600ea544007cb8ded15b91e97985f4462db4be7da","first_seen":"2023-03-14T09:06:45Z","last_seen":"2026-08-26T05:34:14.770341Z","times_seen":78,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.057Z","timestamp":1787722414057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Aug 2026 23:00:36 GMT\r\nexpires: Wed, 25 Aug 2027 23:00:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 23578\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":8627,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-26T08:47:12.638555Z","times_seen":303259,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/fonts/LineIcons.woff2","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.059Z","timestamp":1787722414059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/fonts/LineIcons.woff2 HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://qfslinkconnect.com/root/temp/assets/css/LineIcons.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 02 Sep 2026 05:33:34 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 51676\r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51676,"size_decoded":52150,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51676, version 1.0","md5":"ab4f93708f366ab8c6576d60e1646dbd","sha1":"099c8552ddc2cfb05159333577c1821d2c6d4919","sha256":"22d65627d2483a04af29571b0637043746d2536c84a977860bc3ece769cf3418","sha512":"922a15cc852de48f4c1f6456d1c35bd3c37d434d6071c7ce9513176cf10ecfe85c484cfe06e7258c75ae028ea31116e96ea9449a75403d8af4d81b142299419b","ssdeep":"1536:300E1+oUoXBAlRcofcklQagQN4zBiKgNT:k0q+JoXBY+S6QOBRgNT","tlshash":"5933f12c3416b2d2567850afb84e8afa4c5ef576ecc257ad98110650cd833c9fe7d08a","first_seen":"2023-04-30T20:48:07Z","last_seen":"2026-08-26T05:34:14.772818Z","times_seen":660,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.317Z","timestamp":1787722415317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981366\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3107667b90f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19329,"size_decoded":4800,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-08-26T07:11:52.03662Z","times_seen":39682,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitvaultchain.com/","fqdn":"bitvaultchain.com","domain":"bitvaultchain.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T05:33:33.060Z","timestamp":1787722413060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitvaultchain.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:54:52 GMT","end":"Wed, 30 Sep 2026 19:54:51 GMT"},"fingerprint":{"sha1":"34:85:50:AA:F7:1A:DF:0E:C6:C7:BF:20:47:E8:4F:29:59:4D:82:55","sha256":"C2:E0:35:A8:B8:10:CB:80:1A:B6:48:39:18:44:4D:B4:5F:59:F9:93:A6:76:C6:D3:48:19:0E:C4:F6:48:46:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitvaultchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nlocation: https://qfslinkconnect.com/root/index.php\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T08:40:46.137914Z","times_seen":18110161,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":4,"connect":28,"send":0,"wait":47,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"bitvaultchain.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/img/019b231e-23dc-4c7e-8412-e96433966535%20(1.html).jpg","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.011Z","timestamp":1787722414011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/img/019b231e-23dc-4c7e-8412-e96433966535%20(1.html).jpg HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/temp/assets/css/main.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1666,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-26T08:44:28.487836Z","times_seen":152312,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vsb96.tawk.to/s/?k=6a8e7aaf50fc5d6f1045b6dd\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTFjNzVjMWIwMDQ0YzFjMzA5YTZkZmUiLCJ2aWQiOiI2YTFjNzVjMWIwMDQ0YzFjMzA5YTZkZmUtMVZSaWZLblA5UjZXQV9aSWFFMlBMIiwic2lkIjoiNmE4ZTdhYWY1MGZjNWQ2ZjEwNDViNmRkIiwiaWF0IjoxNzg3NzIyNDE1LCJleHAiOjE3ODc3MjQyMTUsImp0aSI6IlB0d0prMFNZSXBWTnRSNXdBalF3TiJ9.hQ6jdXGAeOHQk1KaAKf_JynU8oriGsArUSU1bSg01hnvaCvfQZPQgrj9P3A1v7mLqPe_j1KWYT4f36ZR9ScZyw\u0026EIO=3\u0026transport=websocket\u0026__t=Q0yZpnq","fqdn":"vsb96.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.247Z","timestamp":1787722415247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /s/?k=6a8e7aaf50fc5d6f1045b6dd\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTFjNzVjMWIwMDQ0YzFjMzA5YTZkZmUiLCJ2aWQiOiI2YTFjNzVjMWIwMDQ0YzFjMzA5YTZkZmUtMVZSaWZLblA5UjZXQV9aSWFFMlBMIiwic2lkIjoiNmE4ZTdhYWY1MGZjNWQ2ZjEwNDViNmRkIiwiaWF0IjoxNzg3NzIyNDE1LCJleHAiOjE3ODc3MjQyMTUsImp0aSI6IlB0d0prMFNZSXBWTnRSNXdBalF3TiJ9.hQ6jdXGAeOHQk1KaAKf_JynU8oriGsArUSU1bSg01hnvaCvfQZPQgrj9P3A1v7mLqPe_j1KWYT4f36ZR9ScZyw\u0026EIO=3\u0026transport=websocket\u0026__t=Q0yZpnq HTTP/1.1\r\nHost: vsb96.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://qfslinkconnect.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: mwkm13CA8C9c0q4yOcMQwQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 26 Aug 2026 05:33:35 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: QPkeMChfmrcb/56AMfceYMQSky4=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: a3107667797156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":417,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T08:40:46.137914Z","times_seen":18110161,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":16,"connect":13,"send":0,"wait":639,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.358Z","timestamp":1787722415358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6a7f7fd8722/css/bubble-widget.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 91\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3107667fc3eb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93868,"size_decoded":94437,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-26T07:11:27.763834Z","times_seen":36492,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.051Z","timestamp":1787722414051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 03:06:02 GMT\r\nexpires: Fri, 20 Aug 2027 03:06:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 527252\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-26T08:40:10.211704Z","times_seen":282041,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":36,"connect":37,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.509Z","timestamp":1787722414509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 92\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: a3107662be4249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":630,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-26T07:11:52.046492Z","times_seen":94255,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.519Z","timestamp":1787722414519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"2fecc9d90ae6ad7f85d676e274e5d4a5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 92\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a3107662dea449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348923,"size_decoded":117168,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-26T07:11:52.013066Z","times_seen":10961,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.520Z","timestamp":1787722414520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"ca30657f0402cac8339147c951d92e0d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 91\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a3107662dea849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244281,"size_decoded":69541,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"ca30657f0402cac8339147c951d92e0d","sha1":"91f3ab87c99148c4ef2d7af45207de86c660032a","sha256":"b307b937a93ef6602be9220479c091f96c45d8a07958ec34d204b3123218ce9a","sha512":"a84d1b34bc1f791beed7fad274bd8555a424aa837f1b947134874ff4b10332b8d26d847bfd6811d97d23c486faddd6d082e7c185ea1b38e98d533ca04ab00fcd","ssdeep":"3072:A8gYgcvYqhJrTodCWFW1Wx08fMOAUTqCpQio/rtxLMz9gZ1a:5OCWFW1WxVfMOA/uKbLMz9S1a","tlshash":"4134c69df186b47606a37131501f320af23a685ab45ac0d4f636d8e1bd789cea133f79","first_seen":"2026-08-14T21:10:06.988881Z","last_seen":"2026-08-26T07:11:51.990654Z","times_seen":756,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/images/favicon.png","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.916Z","timestamp":1787722414916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: TawkConnectionTime=1787722414860; twk_idm_key=ggq78gLDEVlxRoxu_va6k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 26 Aug 2027 05:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Oct 2023 09:16:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3536\r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3536,"size_decoded":4010,"mime_type":"image/png","magic":"PNG image data, 199 x 74, 8-bit/color RGBA, non-interlaced","md5":"238dc098aa116bf9e9065e2236087888","sha1":"aeb5d01ea78a14834a5d9f72bdb03be91e66fa2f","sha256":"99f59dc2b8ed349939b1bc0fcb550f37532bf917670398735da3470049bbb3f5","sha512":"ead764a660f6023e828c44ff1418e7a7e20ce902d6291b0ad725a951f8d475589c698dc8a068e14de78e53934c528675c3520333c1eddeb65c321005471c7c6b","ssdeep":"","tlshash":"8b717cdfd687b864ecd727f4d81144a40b63c64f706632dd8908c8edbd8827c6d82a4c","first_seen":"2026-08-26T05:32:54.337517Z","last_seen":"2026-08-26T05:34:14.777793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/img/jamie-street-VP4WmibxvcY-unsplash.jpg","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.834Z","timestamp":1787722413834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/img/jamie-street-VP4WmibxvcY-unsplash.jpg HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 26 Aug 2027 05:33:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 375680\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":375680,"size_decoded":376157,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 3668x2751, components 3","md5":"0fb2ad5a1ac771142326fa1097235f01","sha1":"82e384a1bcadebec5e8d2c71fa7a530de032100b","sha256":"49c9277dc10e807f7458edccb69e5c68f0b786e443da3c048ada0ddd948157b1","sha512":"3ee3d4095e705f2218e8c49f4df90339d0519b4d6170618d9d16ca7c78c3090a5a8849798c67661e351411d4b500557c59aaa99aa2c925f44543120cbfdd18bb","ssdeep":"6144:MdOcgs29dKWTQtTGX7bjeIM8IQztGYVMXuzBcwDdf/e0gvVMcHjbHegsPFp23MHd:Fls2bKGQ5ueU9tGIMudfFylDT5sPFp20","tlshash":"4a842363f7301633ce4b1e75808f9f53546b71f947a0d203bae11a8d5ea19aa3f2da14","first_seen":"2025-05-15T10:22:25.810022Z","last_seen":"2026-08-26T05:34:14.778728Z","times_seen":45,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/ad.mp4","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.869Z","timestamp":1787722413869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/ad.mp4 HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: video/mp4\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\ncontent-range: bytes 0-25136769/25136770\r\ncontent-length: 25136770\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T08:40:46.137914Z","times_seen":18110161,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/css/bootstrap.css","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.801Z","timestamp":1787722413801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/css/bootstrap.css HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22803\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":192348,"size_decoded":23499,"mime_type":"text/css","magic":"ASCII text, with very long lines (570)","md5":"bd551f56ce2be3eba2812e605ab4f5b2","sha1":"94d6450720dd8deb413760cc9184204b46802e9c","sha256":"35fbb6dc3891aacaf1ffa07abec2344fdbc454aab533a2a03bcf93577eb7837b","sha512":"3310948ae23eb805e0afd67d7f11f563cd829ea46b5b2496a877a367250c5b9e5526a2f8b6b7fd15733f4a24fb3505d97781f49c93abe85000253123026ae6f8","ssdeep":"1536:2ycclspJfXkgUpuoRnm4ADXeASzja+QTzNlXK1wqLq9S/zDL4iDF4jg:25jkgUA2wqsS/zDL4iDF40","tlshash":"60147458fdf11504746b826c64d6f7f57b6d8087c61edebabae22224cf493c14cb2988","first_seen":"2023-04-05T16:44:06Z","last_seen":"2026-08-26T05:34:14.779329Z","times_seen":1688,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/bootstrap.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.812Z","timestamp":1787722413812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/js/bootstrap.js HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23507\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":131639,"size_decoded":24032,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (328)","md5":"ffcd65b7f48aea5c910ec3000c3f5738","sha1":"28b4677466efbf48907614d4071f20ba0a4f3aba","sha256":"a84fb10d4ac751de74e2d2d603a4215cb4edef1053e5077a680b73b87b6472e9","sha512":"150ff09ff7c7188ff122ff7acf0c679bffdd4c682bb732a11f75141e1f8ed5d1cd371a824fec148476bc61ca72b9f60c4b1b3c77f24eb235cbdc2fc99096e92e","ssdeep":"1536:5XMG/5lzsiLOvFUqZGbVLK/vuOhubEq12NQdYz:759siWFUOvhMEq1rdK","tlshash":"a0d3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","first_seen":"2025-08-29T18:47:30.341291Z","last_seen":"2026-08-26T05:34:14.779914Z","times_seen":16,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.060Z","timestamp":1787722414060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:11:40 GMT\r\nexpires: Thu, 19 Aug 2027 13:11:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 577314\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":33681,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-08-26T07:03:08.420335Z","times_seen":31058,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":72,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.281Z","timestamp":1787722415281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"ce7c2f1d3256f84d0760bd9f400963fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981365\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3107667890849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23063,"size_decoded":5842,"mime_type":"text/css","magic":"ASCII text, with very long lines (23017)","md5":"ce7c2f1d3256f84d0760bd9f400963fc","sha1":"1375bb0f0223b374f9805cb441970de2cb004591","sha256":"ff92cac16c5ea67e7df480d38f6fd806385a85e69d13da5317ceb3acc469af62","sha512":"3f33f2cf811797404a3bdd12ab6af60b5356bdd577c82e8a97ad7d4cf81dcd1b24bf87c1256e175a6ae6f44d0d2f9c9daf8c29316bc60b370288f98e78e5716e","ssdeep":"384:Wgfco+ziLwH0Lg26/tFTiBB6TXngxYe4fbFU3xi7Ur3K:B+ziLwH0Lg261F2BBCXrsr3K","tlshash":"efa2dbf5e47b10d87363c02293d4f2685499f370ca8adea1f52b661c49e52763682efc","first_seen":"2025-04-29T09:54:46.086393Z","last_seen":"2026-08-26T07:11:52.027958Z","times_seen":39489,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/images/Capture.png","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.844Z","timestamp":1787722413844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/images/Capture.png HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 26 Aug 2027 05:33:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3417\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3417,"size_decoded":3891,"mime_type":"image/png","magic":"PNG image data, 165 x 84, 8-bit/color RGBA, non-interlaced","md5":"a9680754ffd239e0ba5e4d86c489c575","sha1":"91a2431e91e59b18be5ae0c89bb898eb5845689f","sha256":"db3813989d2beb1ac39e8a66563cf42924d2488e6d02a1b0c641147dbf034b3a","sha512":"11e83b276e4e322cef35b4a0d15fb5038c47aed5dd64c58143ca7754f2050489587f9675157ff570a6d98025890c74564450f9b0832be6f5a33b03a806bb20dd","ssdeep":"","tlshash":"fa616de9a02a044dfa9e14b7165880bba9300afe510e88027377d596063ccdd2533f15","first_seen":"2025-05-15T10:22:25.457677Z","last_seen":"2026-08-26T05:34:14.781052Z","times_seen":36,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.215Z","timestamp":1787722415215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"8c2091a992e4303600967e53388cb5c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981367\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a310766718f549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10918,"size_decoded":3755,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10918), with no line terminators","md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-26T07:11:51.985116Z","times_seen":15034,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.227Z","timestamp":1787722415227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"d629d92b0f3db8cf35d9033bfb8bb4de\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981367\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a310766728fe49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111386,"size_decoded":28597,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d629d92b0f3db8cf35d9033bfb8bb4de","sha1":"540ad35dc02ac9fe95061c719494cf13f6569aea","sha256":"83e55b6787ffce43087562d22b0af12c12a25e0f729c4c2b76f534278c838499","sha512":"2c4b20bb80ceffa32e292237ab932d36b496b962878f505daab5924b87798cd60d4ecdb3430914fa2bb3e6ab9ffd0bafd9d54e461d530664c470f03e5354ef96","ssdeep":"1536:BigMvSFu1D6woLGnA2jYDpgaOJDWbaylDluKzWNraURPkx3uYV5pKYerlSy:47iul4vGia2x3uYV5pwrlSy","tlshash":"f4b3196ef091b43d89939162209f3212f3363d55a919d0a8f678cef419d89c96127f3e","first_seen":"2026-08-14T21:10:07.016579Z","last_seen":"2026-08-26T07:11:52.041091Z","times_seen":613,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.220Z","timestamp":1787722415220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: \"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 6107\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a310766728f949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5504,"size_decoded":2972,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-26T07:11:52.01408Z","times_seen":43148,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.796Z","timestamp":1787722413796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 26 Aug 2026 05:33:33 GMT\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":1594,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-08-26T07:30:04.882746Z","times_seen":50930,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":39,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Muli:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.799Z","timestamp":1787722413799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Muli:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 26 Aug 2026 05:33:33 GMT\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19280,"size_decoded":1428,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a45ae4d37faae26c0af66b350ab07e78","sha1":"01468dce265b9a198c70f2ce54ae292eb8b8fe8c","sha256":"0de6a50c2d0a1256cb7088bff088836bab1558092d1e6901cb0fbcf88219145c","sha512":"85f882cb1659887a27eb5c911ca7f9b84680119cb6b00d967d127d0e1a0ca05210bb2e0b43730979a98d68a34f2234bc4f862f11166a95e8cd53d46ba13aadc8","ssdeep":"384:cnh9Sn2mvn/j4ncMVnNJOnCC7nr/EnYoxbaRAv+l/:P","tlshash":"9382b092046be100db472dc6a3cfbe32ee4eb165b454c5796ffd0899ac5ac322325b4d","first_seen":"2025-09-12T08:49:07.617019Z","last_seen":"2026-08-26T05:34:14.78408Z","times_seen":313,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":39,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/jquery.countTo.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.819Z","timestamp":1787722413819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/js/jquery.countTo.js HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1030\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3761,"size_decoded":1554,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"acad36d38da9f68c52bb074b2c478d0f","sha1":"922c71c5699f9306a415a7a344be46d92e0fc4a1","sha256":"00619814b3b256720a9ffd9408397d0ffe5559ff301d608eb66f585343fd83a2","sha512":"5be7c4d8f9e001a527d75e1fa0eb63edb24d0eaaea00d2ca8c66fa832cf5e7d868175f8d9c45917e042d1299f79022e3425510fc50214ec9a6a9034ec7f4413b","ssdeep":"","tlshash":"46716d49bbef2111956b20dd5f5f114c3234932b144b8548799d93c08fa6839e6eafbc","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-26T05:34:14.784624Z","times_seen":1430,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/images/how.png","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.838Z","timestamp":1787722413838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/images/how.png HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 26 Aug 2027 05:33:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1894674\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1894674,"size_decoded":1895151,"mime_type":"image/png","magic":"PNG image data, 1488 x 816, 8-bit/color RGB, non-interlaced","md5":"7fdffb5440dfa3d7c604fc5b79013499","sha1":"9bf64b62cd8a7743f58d56f549bd3dd09b38239c","sha256":"a12a286b9432e972680a418cd09b2230465da6230b4de551bc2400ea6600613f","sha512":"c21960ef9e7458b0c240a7072cf85b8b494a89c11b33b40e20d5c3005e89d828806756dcbb222a21071be6c7bc9e9e35e3713111d6421e97aca467a6d78f11ba","ssdeep":"24576:8VxgGOZ1nGvjJH6nhPbRqEhj+9JnZkBFa5EsSeK+HBWNJqqBKIvg:8EGODnqH8NboCisAEMK+Ijvvg","tlshash":"aa2533d6a005cd5afd8c09e0d85838de4e5c38b2ba6ecae513d855f226122b5a333d7d","first_seen":"2025-08-11T22:49:02.419942Z","last_seen":"2026-08-26T05:34:14.785111Z","times_seen":14,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/images/secure.webp","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.840Z","timestamp":1787722413840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/images/secure.webp HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 26 Aug 2027 05:33:33 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 427612\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":427612,"size_decoded":428089,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12363639067a9d7522218243d9abd0c5","sha1":"99aab920fe6c17dbcd395d6759fcef2fdaadbbe1","sha256":"2c314a055ff35956dff55aed5763ef25fb8ee5c6b180b5c9f82618779f9e68ba","sha512":"eebb664c87f852fc06f5acdef334920c8439ff311f53812ae9e9b9da3e3b4c19430375e2856411c0aefee79dfe2109e9e029a8797c6f20a971d2df75b391ef6f","ssdeep":"12288:6qFgP158+WXCIiXXOzNMbHOqpdg+oYMyQ4o4R:6OcWyPOzNMzOqp6+oL4f","tlshash":"be9423c9672a7e54b226cac1c25d369781c55594fcae9b8d33ea12cb483178cf43f643","first_seen":"2025-05-15T10:22:25.60096Z","last_seen":"2026-08-26T05:34:14.785599Z","times_seen":15,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/images/FINRA.png","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.843Z","timestamp":1787722413843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/images/FINRA.png HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 26 Aug 2027 05:33:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8873\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8873,"size_decoded":9347,"mime_type":"image/png","magic":"PNG image data, 900 x 500, 8-bit colormap, non-interlaced","md5":"c3144595a7eb33eff7c8af5a9c95e3cf","sha1":"2dd6e7255946b1d9ac5d243963f316f01609f4b2","sha256":"19827d4deebff23c0cc636e50b1742f25068d74e7dca759e3bf976377525362f","sha512":"d6e46f08c9cc9a427509ab2255648fedcbb1524c26067174afc6184ecbc818981cb22c214f75d52ad04b90688f5a2669226dc93ce59c51d0a80f8ba6ecfe36da","ssdeep":"192:+WaI2kwChPld9ZjvFElZgu4mqGjjJ/F+91ZpTbqFZvUm0uOMku:+WF2UzzZrFEljH1J/F+bP2HUm0uOMku","tlshash":"b802ae244263ed6eff0cef399f90ce86c6bd696103911f2c66607d81189308b8b6ea11","first_seen":"2025-05-15T10:22:25.820303Z","last_seen":"2026-08-26T05:34:14.786324Z","times_seen":36,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6a1c75c1b0044c1c309a6dfe/1jpvinven","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.370Z","timestamp":1787722414370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /6a1c75c1b0044c1c309a6dfe/1jpvinven HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6a7f7fd8722\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 92\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a31076620c5349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":1198,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"86151fe12f722fdfd552e0a1e66a6a2d","sha1":"0537cb927cc48ed61bb18698581e586ec5b55899","sha256":"5b989766f8cdc9dd968ed5a0701de50c3639803c5caeee4458dd22c296dc41cc","sha512":"15608e98b461d44dd1f37739789fece9e551ba8b91c9a6e7afe4c0ad78e2c79c4d6c862cdef062e2bc8681708af8d315702c9de118d1781801d6e4b208b5a4c0","ssdeep":"","tlshash":"5841f3e79f9f1857e32410d90daffa0e747b22ea49e85cd2470c0411b2557ad6acee38","first_seen":"2026-08-26T05:32:54.356509Z","last_seen":"2026-08-26T05:34:14.786871Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":51,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.216Z","timestamp":1787722415216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"563a805630dd08a9393defdbf2df2bb4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981367\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a310766718f649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18392,"size_decoded":5826,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"563a805630dd08a9393defdbf2df2bb4","sha1":"ac843996f7ecf9a3e81089a0c95aa437ee73416f","sha256":"df87d66b9d25ff5731a825fd2a0c4759f6f6147a64f5c100bb92a95da4528ff2","sha512":"f7ba303a56e5b2bc3df4bad10b034366d2e85f5f3cc7cdd8d6840f9538ac5c3eb798227152a0f2d1f64fb04b8cdeb8d4bff908763c021d644356bca1e6c276fa","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kC7GN//h6LiJq:SzP2DxSLi8","tlshash":"77822ba6f149311bc925c751605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-08-14T21:10:07.006778Z","last_seen":"2026-08-26T07:11:52.027444Z","times_seen":640,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/css/main.css","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.806Z","timestamp":1787722413806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/css/main.css HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16143\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":129312,"size_decoded":16661,"mime_type":"text/css","magic":"ASCII text","md5":"c1527ceb3d6a80c0a7863e964831555c","sha1":"60d6c3d39987a4f684d7cdaee82202324096b976","sha256":"68877f3b25d93c7d7ba0530bd09c63097d0b4defdeff83195d0972ba3f1e0c16","sha512":"6725f6aaa7c109b395749e3ebce666bf93cf2efa94875885d0f8a2079d75726e3c990c55a876d9002433b1f0fcdd4b22451dab7fc2b03e82e3a9a421ee5838d8","ssdeep":"3072:YICR0UTWst6mq11l9q4F5vCMIj82OdpOsTJ6F6xNFumsmho:YICR0UOmq11l9q4F5vCMIj82OdpOsTJE","tlshash":"e3c38153afea0909301fd1fc3a56aa65f77c58b2824fdeb8bbe930189f415d5403ea44","first_seen":"2025-11-30T04:15:08.20128Z","last_seen":"2026-08-26T05:34:14.788057Z","times_seen":9,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/jquery.magnific-popup.min.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.818Z","timestamp":1787722413818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7043\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20216,"size_decoded":7567,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-26T08:09:07.107252Z","times_seen":74608,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/img/footer.jpg","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.013Z","timestamp":1787722414013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/img/footer.jpg HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/temp/assets/css/main.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 26 Aug 2027 05:33:34 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 339797\r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":339797,"size_decoded":340274,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"7ec435c418edd9f98e2e644e36af4402","sha1":"74e57926f814ba1113a1e6ef4e6533109e8edc26","sha256":"bd5a155b051de5323937c2a19a2fa5e31d2d3bdd569610b6752b12e44615293b","sha512":"5b21cc7b6e18d611aacd4e15a2e9e24ceb295e241950fdf9c63690bf639b6a3f20d1259ee3dcab76c04cc2ba083ba9b44d6befe7a0b59960df546d97e51e7904","ssdeep":"6144:rV5mHYMJRHz2v/rFrn5agY/Ju52fxi9M0+YPp9BBohhJgeQWSbqeDspO:LmTHz2nl5ab/JhfaM/w9TShD2b4pO","tlshash":"9074238e558b25e5dbba0b7c496d0a201175f7936f8b7c3deb0f8e70b31826610e805e","first_seen":"2023-06-27T21:49:27Z","last_seen":"2026-08-26T05:34:14.789177Z","times_seen":77,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.672Z","timestamp":1787722414672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 194\r\nOrigin: https://qfslinkconnect.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":194,"data":"{\"p\":\"6a1c75c1b0044c1c309a6dfe\",\"w\":\"1jpvinven\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://qfslinkconnect.com/root/index.php\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"ggq78gLDEVlxRoxu_va6k\"}"}},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-6s62\r\naccess-control-allow-origin: https://qfslinkconnect.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a3107664bc1eb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1052,"size_decoded":1429,"mime_type":"application/json","magic":"JSON text data","md5":"e6f20d5ee8b32c4c580364ee797ddaba","sha1":"7fa7b8a85d1938e847cf50774903aa6ea042edcb","sha256":"4586a8841f789cee531d5158f4cdc55e1d6df0935c2ace62c8253d318f7e3a7a","sha512":"54edcfa106cfd7fa33ac4f4cc3ead7e53e8800b1fd503cc8ca4e2fcf19a2b895ade98688c2be39cd0dca75d31ef051d2422784f4d4a809607c9b85d5f5d228b2","ssdeep":"","tlshash":"7811a8452f0a3d2db7b35ba30bdf3d5128ec8781349c801ae0e13e1661d90bd25c70e6","first_seen":"2026-08-26T05:34:14.789682Z","last_seen":"2026-08-26T05:34:14.789682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.225Z","timestamp":1787722415225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: \"0b7571445a752df762894d31268e7c12\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 9151\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a310766728fd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54211,"size_decoded":14817,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54092)","md5":"0b7571445a752df762894d31268e7c12","sha1":"54b956960bd4376f15523f25f586fc5478a626fc","sha256":"2a768547370a8933454d03757e1981e616d448234e06e5b9dcf1608f35bec644","sha512":"12e90c52c5cce1f2767060de43c8627fb789a49f5a1b1a681048e732f08ae67194f4ee0c7a80f305778c67e31a756555c54d463bbdab66f19b03f8f050aa4e71","ssdeep":"768:Vlxfu8+HYUmI+rT1Wf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK4/:xfuro0f20UJWfO+Et7GZrCi20k","tlshash":"8133d9cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","first_seen":"2026-07-08T23:24:03.874474Z","last_seen":"2026-08-26T07:11:52.043506Z","times_seen":3984,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.522Z","timestamp":1787722414522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"1c30dacb5eab82fcc774efa5e9a7648e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 92\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a3107662dead49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":1735,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"1c30dacb5eab82fcc774efa5e9a7648e","sha1":"17ad955811f541c8d6dfeb63ec76e72911f0e989","sha256":"f1e317e731329be9c1206376e79cab783fa14bef6a1089951206a42d38517baa","sha512":"cb5d5ab3cd2a329f503d05e6602c618a3afec17e752d0aeb35a92e5f78f9cb3eb1615ee18756677649ef23a3b1c1256af3d31d8306b9a9eec94a60a34bed290c","ssdeep":"","tlshash":"494183d937e8f9b6434318e1043f9016f6352976097be8c0531dd4f5bc78849815afb6","first_seen":"2026-08-14T21:10:07.022852Z","last_seen":"2026-08-26T07:11:51.998582Z","times_seen":757,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/menu.html","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.814Z","timestamp":1787722413814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/js/menu.html HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 09 Oct 2023 09:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 725\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T08:40:46.137914Z","times_seen":18110161,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/js/swiper.min.js","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.816Z","timestamp":1787722413816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/js/swiper.min.js HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34045\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":139262,"size_decoded":34570,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"6e03a1642bc770c1b77326254cb654c4","sha1":"6b2802f3b62530d6cc195009b79a825932933240","sha256":"ca478538afebbf85296cca9dfa85da0e1534c290e29c344f0bdd7d00d16a1a28","sha512":"7f105652ee87141e0f2b1f03854bb4328072754324cfb54de137daeaa664698d2747eae7a3178f46546b50a5a9fe80334ff5f2ca6d949e3daa72d9f432922fba","ssdeep":"1536:Fj2qhgxfeuGMfo3i2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgP:wxoz6desFshaKi+HgZsUOUTqiqMr7EO","tlshash":"e6d3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","first_seen":"2023-08-13T06:11:07Z","last_seen":"2026-08-26T05:34:14.791604Z","times_seen":16,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.053Z","timestamp":1787722414053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:11:40 GMT\r\nexpires: Thu, 19 Aug 2027 13:11:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 577314\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":33681,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-08-26T07:03:08.420335Z","times_seen":31058,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":43,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.062Z","timestamp":1787722414062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:11:40 GMT\r\nexpires: Thu, 19 Aug 2027 13:11:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 577314\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":33681,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-08-26T07:03:08.420335Z","times_seen":31058,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":72,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.231Z","timestamp":1787722415231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"a7d88b42e6403da8e9ff02766a45cb8b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981367\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a310766738ff49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5261,"size_decoded":2633,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"a7d88b42e6403da8e9ff02766a45cb8b","sha1":"3350c387ebb138ebd523634d2afe02a2e51da0bd","sha256":"fd7b35fad22d36ed72bc9ed33b416c8dd43b337484ed41c6fff2cd3817df5bd6","sha512":"91102e89de58787e9c70103ebd5767c2fd2ceccd7597136706590e08750d5a1cb833b5577a222c13e0ab44c4e001253d3c53331358f07d93e4a65edd8c753c0f","ssdeep":"96:zNC9Hqt7pEma7hY/rcKOJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYMLRIvgx43nVY","tlshash":"43b1859af247b456c156225150ef3b1df33a281ca61ccdc4a66965f218784cba077b3d","first_seen":"2026-08-14T21:10:06.99602Z","last_seen":"2026-08-26T07:11:51.98632Z","times_seen":640,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.339Z","timestamp":1787722415339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: W/\"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2180197\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\ncf-ray: a3107667d93249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22356,"size_decoded":7331,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-08-26T07:11:27.802993Z","times_seen":40045,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/index.php","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T05:33:33.181Z","timestamp":1787722413181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/index.php HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":22751,"size_decoded":5881,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (909)","md5":"8e5d88274519922234da3660a1b620c8","sha1":"0922afaa2f26bc00034de653936e360057285859","sha256":"a8615a6d013f6970b315752f3d1ba3d1d0bf3ba6d0b92f14182c92a2419fbfc8","sha512":"16da421264f67e6ecd27e65ad5dc9d97335a3da9c6616ee599a436c9592ff2672e9d534a3a61af606ad69f503e37ca928cbd110977ed756a4f56cbe848341f54","ssdeep":"192:6QFbNIJZu3Uxd1yXT8y2cfJoQRDtZosdPf26gxt2CgwR38nnTXhSAIUqIBkHpXW:HbI3QRDjoU329tPL38nnjhS8pkJXW","tlshash":"0ca2832668f62037009391917ab12b5f7fa1e907ca5f461076fc0bc46fc3e9acd67998","first_seen":"2026-08-26T05:32:54.377692Z","last_seen":"2026-08-26T05:34:14.793368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":84,"connect":24,"send":0,"wait":28,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/css/swiper.min.css","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.804Z","timestamp":1787722413804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/css/swiper.min.css HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3805\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13667,"size_decoded":4322,"mime_type":"text/css","magic":"ASCII text, with very long lines (13411)","md5":"08a2179b7e519e9258cd789a70c0c02e","sha1":"970250d20f2ec314420a20e9b2c27ec02b89639d","sha256":"607b6373b529d07da80e5c0bbce46ea42f08f93c3c0d5c26aa231cff4a2d80a5","sha512":"1bcce525618810f9fbbd80ca7e7f47cf2860cbb81a8194ddf31945f1d818c7dcf05ea0d8a165b793d49a14abba415a1fe7e580d36f6e52f243565cc0012b59da","ssdeep":"384:VbUbeQS7Rgx9BU0W/XCcif65W/1mXA82FHpx:VIb67gbhW/XDif65W/1mXA82Fn","tlshash":"8652236417003837f3774f6e4aa1e6b59f60cc838a934d9db2c0dd44d6fa8b9122eb95","first_seen":"2023-04-17T09:05:25Z","last_seen":"2026-08-26T05:34:14.794396Z","times_seen":1144,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/images/qfs.png","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.837Z","timestamp":1787722413837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/images/qfs.png HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 26 Aug 2027 05:33:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6088\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6088,"size_decoded":6562,"mime_type":"image/png","magic":"PNG image data, 267 x 189, 8-bit colormap, non-interlaced","md5":"539a4a5b9d5e7b498325135fce5f9545","sha1":"9bcdef91fb267b165b294324bcc94af4041c63f4","sha256":"941f655bada78bea3433d45ecf4f886f45b3953fc6e4ceb2aeb816c3165c04b8","sha512":"497989239f3d618d596feae9cee640e88e7a3f1f68c7a3588d65a2cecfc7634872d82ad23db6e5e153e5f2a9a4c616e49be71d08af67aac8bee56930be9f5d1a","ssdeep":"96:mQugx4CAU9RpacGJA7nqA/nVvHhi3SMys2c9687eQFZbwULPtfxG3V5AIwVWOASP:bugF5GJATL9vBSSLAbhLVfxgnAIwVWx8","tlshash":"84c19e64a88f6ca17ad713338571a4182d9f4b86203af486dabc423ed5548b28d9f38c","first_seen":"2025-05-15T10:22:25.448423Z","last_seen":"2026-08-26T05:34:14.794945Z","times_seen":11,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.671Z","timestamp":1787722414671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 14 Aug 2026 20:52:24 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 91\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3107663bc13b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10839,"size_decoded":4367,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-26T07:11:52.035991Z","times_seen":30059,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:36.708Z","timestamp":1787722416708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 26 Aug 2026 05:33:36 GMT\r\nage: 2519085\r\nx-served-by: cache-fra-etou8220049-FRA, cache-bma-essb1270067-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 39460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302554,"size_decoded":40204,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-26T07:11:27.825373Z","times_seen":52006,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":9,"receive":8,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.219Z","timestamp":1787722415219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"7308b5ce68bf72454e6d5e038697c151\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981366\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a310766718f849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11888,"size_decoded":4542,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11888), with no line terminators","md5":"7308b5ce68bf72454e6d5e038697c151","sha1":"e3256a93e366928adcbae91772415048bcbbf453","sha256":"52070db866258a8cec9501fc7a2f6262a16c2517ce72901c996900a8f2ac65a3","sha512":"898434a37758ede4df98d8ba0fe1d64eefe80419cbf5bbfbc0b8b59d3acf47f14bd2dbda3c5a61f36e10329befe8317ae572123c095276ed62edd0b23b7637bc","ssdeep":"192:0H9Ma8RIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:K8b9HkS316xAFKpLZEh","tlshash":"3632a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","first_seen":"2026-08-14T21:10:07.032126Z","last_seen":"2026-08-26T07:11:52.013573Z","times_seen":475,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:36.717Z","timestamp":1787722416717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6a7f7fd8722/css/message-preview.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:36 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 92\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a31076707cc3b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93868,"size_decoded":94437,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-26T07:11:27.763834Z","times_seen":36492,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/img/crypto.jpg","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.839Z","timestamp":1787722413839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/img/crypto.jpg HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 26 Aug 2027 05:33:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45259\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45259,"size_decoded":45735,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x400, components 3","md5":"f8c9fe7cce8316c4e7747fe8be4d5c3a","sha1":"a8f39c18448989d4a5dc05ccb61e8e1ff4bb11f9","sha256":"4c865d7c75dc40be9ffa3cf8e548b7d6140fbddf4bd0e897d312724d14c4fa05","sha512":"13eda55bcdbe5427b239a184b1148f1070cddacf3e908b1c6d68efe10458f7332a1af04a39fb2d44b4281e5926dd1261feb1523bc85872ee563cb190af2b20ac","ssdeep":"768:hYy1/kr1dZvQ4DLyGWGyYHCkBaw+3jTDaOm349sGT5gkHNAymdFo6tyDZCKhIaae:hiR84Dujbt3jTbGg7gkHNAymLJtyD8FW","tlshash":"e013f1a0257599c3f12ca67100e6d3d6b2d1122afe73a2c4e598ad63e2c9811dcda99c","first_seen":"2025-05-15T10:22:25.69754Z","last_seen":"2026-08-26T05:34:14.797213Z","times_seen":32,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/css/LineIcons.css","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.802Z","timestamp":1787722413802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/css/LineIcons.css HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4472\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28260,"size_decoded":4989,"mime_type":"text/css","magic":"ASCII text","md5":"9bdd836bfef4e60ac3b5c337ded27292","sha1":"6c8041b87228dac6ea6c5b7a54e506c894840a34","sha256":"56d09c4cd80f372c855706df481c12ff5d22e25cab78db087cc92b283f1d107b","sha512":"218bdc1700f2a14bebd69352c5e2f03c9066482680dfed4bcd358675d7a4f868603db7e88b12f5b6f0c552680def612097596d0f6d69a58fa21db1609634586d","ssdeep":"192:fq1XhYDGyqlxTBsdXK9EYEBPJljOET5TEVpfeAfbMJVxp5OyohTrfj4fGUxH7n/E:wlsU0jSET5TE/9/IlxH7nZUt","tlshash":"83c222e4d9ff0cd09b0dd0dd2247a620eb1cb2b5a8074c1dd7a2798e67e261464dabdc","first_seen":"2023-04-17T09:05:25Z","last_seen":"2026-08-26T05:34:14.79789Z","times_seen":756,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/root/temp/assets/css/magnific-popup.css","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.805Z","timestamp":1787722413805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /root/temp/assets/css/magnific-popup.css HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 25 Sep 2026 05:33:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Sep 2023 09:43:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1660\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6951,"size_decoded":2177,"mime_type":"text/css","magic":"ASCII text","md5":"30b593b71d7672658f89bfea0ab360c9","sha1":"d6963db6faa9294387bb3175813a61bc3f859437","sha256":"45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e","sha512":"58440dbfd777facab21e3aea519a1b0e11404590e4a36c2959d7dca6fe3896cca9b12b8c3b490719ddcc43caebb019ff41adfd5688e985d53a08c92925498357","ssdeep":"192:hRQ4fS5bzRyIy++mcS3n2s96/LEpeXHFykgxe:Alx3pSFh","tlshash":"a5e11bd39fb22305e525e9a8a657a76973120013e70fcc6bbfd12448df8d7c942a3b85","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-08-26T07:28:53.754909Z","times_seen":30115,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfslinkconnect.com/images/logo.png","fqdn":"qfslinkconnect.com","domain":"qfslinkconnect.com","tld":"com"},"ip":{"addr":"51.68.132.246","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:33.833Z","timestamp":1787722413833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfslinkconnect.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:11:25 GMT","end":"Sun, 22 Nov 2026 20:11:24 GMT"},"fingerprint":{"sha1":"84:47:0B:0A:A6:F4:74:BC:45:E5:EF:53:8E:5B:87:20:6E:B8:ED:EB","sha256":"75:C0:3E:D3:F6:49:20:B9:E2:39:99:B8:7F:FC:FC:B8:15:67:BE:80:56:6C:7B:EB:4A:5B:82:80:6E:E7:20:10"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: qfslinkconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/root/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 26 Aug 2027 05:33:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Oct 2023 09:16:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3536\r\ndate: Wed, 26 Aug 2026 05:33:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3536,"size_decoded":4010,"mime_type":"image/png","magic":"PNG image data, 199 x 74, 8-bit/color RGBA, non-interlaced","md5":"238dc098aa116bf9e9065e2236087888","sha1":"aeb5d01ea78a14834a5d9f72bdb03be91e66fa2f","sha256":"99f59dc2b8ed349939b1bc0fcb550f37532bf917670398735da3470049bbb3f5","sha512":"ead764a660f6023e828c44ff1418e7a7e20ce902d6291b0ad725a951f8d475589c698dc8a068e14de78e53934c528675c3520333c1eddeb65c321005471c7c6b","ssdeep":"","tlshash":"8b717cdfd687b864ecd727f4d81144a40b63c64f706632dd8908c8edbd8827c6d82a4c","first_seen":"2026-08-26T05:32:54.337517Z","last_seen":"2026-08-26T05:34:14.777793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.670Z","timestamp":1787722414670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 14 Aug 2026 20:52:24 GMT\r\netag: W/\"17fa2497bdae7324a17eaedfe6fc8650\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 91\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3107663bc12b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11596,"size_decoded":4374,"mime_type":"application/json","magic":"JSON text data","md5":"17fa2497bdae7324a17eaedfe6fc8650","sha1":"27bce6a96d49d0077bc16228801a3089fce5be2a","sha256":"cce37a30801a132937edb0ac257f4ed917559c00d6a648716bd9ac406cfc62b1","sha512":"f4155fcb97d0180daa46cb293cd70f01b984c39f9895f76a0acc098b0c5f86f883378620e75f8fb79b0e0b1e5033e4ace16046bc48ca2a9c2127053ae48be305","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9KvKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59t3Zwfi","tlshash":"98323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2026-05-13T09:28:21.606546Z","last_seen":"2026-08-26T07:11:51.994454Z","times_seen":12341,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.312Z","timestamp":1787722415312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981367\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3107667b90c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54016,"size_decoded":12896,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-26T07:11:52.047007Z","times_seen":34771,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/assets/png/1f44b.png?v=2.2.7","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:36.891Z","timestamp":1787722416891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /emojione/assets/png/1f44b.png?v=2.2.7 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 1311\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\netag: W/\"51f-Lhpf/5pVjttXKKAzYbc9FjP7pB4\"\r\naccept-ranges: bytes\r\ndate: Wed, 26 Aug 2026 05:33:36 GMT\r\nage: 1112736\r\nx-served-by: cache-fra-eddf8230174-FRA, cache-bma-essb1270028-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":1952,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c146761c3af8335c09eff9b1cdecbe08","sha1":"2e1a5fff9a558edb5728a03361b73d1633fba41e","sha256":"d84e890fa93c018d8b78e3bff3f6252036aa7ead6e48b292c0b92b1cb5127371","sha512":"b99a6fcfe0c4f4884fec84ec4e9951fc23b246302d4eac2996f4b6df3e063543b640a99e083494633f946fd85a3b217e18356e6b46d6584dcbccd88215638950","ssdeep":"","tlshash":"f221c59314628da28e23c525ac24c5e0b2fb40fcd78f8ae24903feb552b530c99d478b","first_seen":"2023-05-15T15:27:55Z","last_seen":"2026-08-26T07:11:27.787211Z","times_seen":21581,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.063Z","timestamp":1787722414063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 02:57:17 GMT\r\nexpires: Fri, 20 Aug 2027 02:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 527777\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-26T08:37:24.227551Z","times_seen":395490,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6a1c75c1b0044c1c309a6dfe\u0026widgetId=1jpvinven\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:34.647Z","timestamp":1787722414647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6a1c75c1b0044c1c309a6dfe\u0026widgetId=1jpvinven\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nOrigin: https://qfslinkconnect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-wncj\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-4-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 26 Aug 2026 05:33:34 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 91\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a31076639c11b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3214,"size_decoded":1978,"mime_type":"application/json","magic":"JSON text data","md5":"34bca099316c60de63401f04076f2076","sha1":"6229ae09145c14d01f5d3c5337fc2286e6f8b1b2","sha256":"aab5e70d7d67d5072d56856d6061c975077ed21a679feac60d4aabac042b6eab","sha512":"ec79f53647983b2e83aa048c0fdfa95135bd0acdfa0d1a1859015ddb129b074c5a3b08d3d5edb4f310445383f9e31d771ad6648851e1566065b45cef3acb3153","ssdeep":"","tlshash":"226124398915dd396389d253a0df3627b93dd123e384591de1986e3883efacd321278b","first_seen":"2026-08-26T05:32:54.37142Z","last_seen":"2026-08-26T05:34:14.801124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":3,"dns":3,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a7f7fd8722/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfslinkconnect.com/root/index.php","date":"2026-08-26T05:33:35.363Z","timestamp":1787722415363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a7f7fd8722/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qfslinkconnect.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 05:33:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 20:52:23 GMT\r\netag: W/\"cbdd0e0be2613c6b640df2946da570be\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 981366\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3107668093749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114106,"size_decoded":24593,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cbdd0e0be2613c6b640df2946da570be","sha1":"df3804c44e57c518eb007548536902ca46a7e8ef","sha256":"4e7d47ffbb92bc9205c6113755b8199880c4aa332dfc3e34218e4e2a0b4bb130","sha512":"c10ddf8aa735ee142197fcfdcc16999215efee2dc0264fb11679a2244fa9ef9eacd770f39b39ea08be251c953d64492533132a4c8f70cd7b12c9763fa0442342","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBC4GDJ7GjsVGdkauV3cGiH27PNWE98MGfU9:xVDJ7GjsVGbuVLmi0V0Z+tKaK","tlshash":"37b3a8b1b5a710cc73a3c23652d4faac1029e370c756cab9f427766d4ac21933262f9d","first_seen":"2026-08-14T21:10:06.914152Z","last_seen":"2026-08-26T07:07:09.369831Z","times_seen":588,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}