{"report_id":"f7309b24-2fdc-4c94-87c9-70a6d3f716cd","version":0,"status":"done","tags":[],"date":"2026-07-30T21:37:31Z","url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":0,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"title":"Qfsworldpatriotledger – Your Financial Freedom Begins here","dom":{"size":144020,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9462)","md5":"b468932a7787665d63a67bb6d64f310b","sha1":"bf1a4409860c2ca329d56800187899edc4ebca23","sha256":"002da320934c41ecf3882243cd6e45428ea6bd8c2d0ddc51fa93b00b949c92dd","sha512":"efbec6aaa5479a8f7c6d102c521306ff4bba13d668e56c3bc0beb9f212c22d7f01b978f977cfce836c787bf49e11d39712a977e7b56c12758697cc894e9571fb","ssdeep":"3072:x4Xf/X5nmGtEdzGJ5wM2iXybBATzxCRME2UCEJWzQaixz995:s/X5VtEdzG8M0","tlshash":"79e370613c96282a214f12df9003230da1d7dfdae913a6e5f5be412863b5ce17bf3169","dom_hash":"domhash9e5dd31ece0c7c53e2adc3798f8e1b36","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":0,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-03T21:37:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.72.117.175","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-07-24T07:15:25.204838Z","alert_count":0,"request_count":1,"received_data":370,"sent_data":553,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-26T22:31:28.839046Z","alert_count":0,"request_count":1,"received_data":452502,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"askproject.net","ip":{"addr":"103.250.10.252","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"domain_registered":"2021-06-16","domain_rank":1391388,"first_seen":"2022-01-10T23:03:43Z","last_seen":"2026-07-27T07:29:51.601024Z","alert_count":0,"request_count":3,"received_data":651,"sent_data":1640,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"qfsworldpatriotledger.xyz","ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-18","domain_rank":0,"first_seen":"2026-07-30T21:13:36.435782Z","last_seen":"2026-07-30T21:13:36.435782Z","alert_count":82,"request_count":82,"received_data":5137427,"sent_data":104494,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.4.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Underscore.js:1.13.4","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.19.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-07-24T07:15:25.153212Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":3,"received_data":113232,"sent_data":1764,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":15903,"sent_data":693,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.bobble.ai","ip":{"addr":"34.160.147.82","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2018-10-05","domain_rank":0,"first_seen":"2022-06-06T12:40:10Z","last_seen":"2026-07-30T21:13:37.014133Z","alert_count":0,"request_count":1,"received_data":24732,"sent_data":584,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"32554ae5b8d53c5a6d0e1d7867274b11","sha1":"05cfa38188e836ba7f68e1efccba071bfae9ff70","sha256":"2bea2d0736eb89a5fd1a8d61d580bbe7ef96b2535634ab2dced2ab77265a2976","sha512":"19ab7ae74f0c4be3b8b0f186a17641577b9c9bd515d1db000881605c056b9d689ed31ff891f507a21d40697fb1b8e4cce848040a2e0fd03d4994510b4a694fcd","ssdeep":"","tlshash":"2a61879a3779388b317b14e3aa6f0e0beb7654271684d034c9bae7141cb14a3c379d89","size":3292,"data":"","first_seen":"2026-06-11T03:01:00.298664Z","last_seen":"2026-07-30T21:45:49.009399Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b242bd83629a7aa6e03771a459f83b23","sha1":"22c412717bdccf5118c0071fdedc2056baefbf8c","sha256":"8eb79cbf43c243a5ecc1859da16af1260aefc19466f74374f2239c85949253e8","sha512":"c1d296d582966732e00571109718d6c3800199626eddc3d8cefe775bc18a83a27b56e38ee79320b2934b3044bda38fde943b1ca47b18b140fd5c10a07f4dbe72","ssdeep":"","tlshash":"2fb01291100c48829d4e410b0ba70b597d010c89d844125cb101056d2026de2e57440a","size":96,"data":"","first_seen":"2026-07-30T21:13:44.828686Z","last_seen":"2026-07-30T21:37:37.324281Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"8540c90158ebc8c18eef938a116b4ee0","sha1":"f73d9a96298f7491a2ff2305509a9efadce258cc","sha256":"0dfa696b281bf3c66fb91a14913e089cfa5db6400cfe65900953bd3861b61b74","sha512":"207a22d4271851eb8818d491597600a12a1242c6a3d8d251e91f2168b39a590421d3d8bf5d4c1e0439030b4b1684b9a51c80cc26cdd4199a02f0c7cee937977c","ssdeep":"","tlshash":"ba41881ac001383b07288396fc8a5bea95fdcba3d1815847a9ff4da9b2c7d386137654","size":2356,"data":"","first_seen":"2023-03-07T12:08:57Z","last_seen":"2026-07-30T22:58:15.652273Z","times_seen":554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d0668988cb18cef70ace004c75f6c7a","sha1":"62f3bb1c0b8409b455b632027e2c5aa06fe75dfc","sha256":"3b09e3a1a502a43f928366d4950bd97cb5e6f3ff0dcb6f0d41f39784bd2db0c2","sha512":"aac4c8d36b13ac3a5e626194b1fc6bd860aadc4654a1945f3535fc8a3b2163ed3c6ba503839ec4d6610ff4491fecc6bd7215eb846101837ad565bb0eb9fd540f","ssdeep":"","tlshash":"40d023583b19011403df010c5209561c864f0f6701035d7b9eb87c650dafdc06053e35","size":207,"data":"","first_seen":"2026-06-11T03:01:00.304416Z","last_seen":"2026-07-30T21:45:49.012928Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"523c803218302180d0ec5d2379d3cbed","sha1":"c5397227151b0ef94119bf00987030d80dd0a830","sha256":"8688c8088ebf8afe3cceec134c5f0c8aa0fbb57d04f80066b0363a0eeee394dd","sha512":"f76aa00ba1f224836b328097c609688c93ad20b76da5f8ad4179c14f71ba87ef05f1915705208c046071bf9add63446c7576917f4f6c20881ee88446e7f1e182","ssdeep":"","tlshash":"c45193317545acbf43e397957817ba02666c05189040bdf8f4fc887d14f6a74230be5b","size":2463,"data":"","first_seen":"2026-06-11T03:01:00.305701Z","last_seen":"2026-07-30T21:45:49.01376Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0dc5e20605de4918f152e84d40883f5f","sha1":"3f51540717fefe8487ed02ed9d77be9ff4f40989","sha256":"55c47c010a8cf7358d55bf364aaf359fff2efec7daaa5f1b7026b4a59c1376d8","sha512":"e1ad226a6d7683591da3d3ea27ef1476f1501ee955078e446b9596983d557348eba3b605296808c1ab5195b3e8a863118dfed42d3882ea9f7ae3982f37ed6364","ssdeep":"","tlshash":"7fa0244c35141f4f514c3cc7d014777f3450331174100d0033c15c100504c04cd04045","size":76,"data":"","first_seen":"2026-06-11T03:01:00.312283Z","last_seen":"2026-07-30T21:45:49.014627Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3598c9e643392974d4d8cb8da193e1fe","sha1":"fe21b3e0e46144cd7d9cd7fd94fb01c2270eef18","sha256":"e25419d532f34706cc20049e4c925cd3ac6630f86b492f9ce001f71e3013737c","sha512":"897905c80d9d9f8922ab94cc9312a293ed8e93e0dc3437a70538c1b1fc65c48dafdb05dc9f28ee7f69d128b2b9206141706ff056d91c09ac5b86e83c72ace274","ssdeep":"","tlshash":"44a0013ae933ada95e8b050a289b0587e6654140f6916848215a07a1572adc29649e8a","size":82,"data":"","first_seen":"2023-03-07T12:06:34Z","last_seen":"2026-07-30T22:59:01.857542Z","times_seen":425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"eea966eea4b259ba78f4860cd20b8240","sha1":"1813a48f54b6e17c828318d7f2cad83458a13369","sha256":"9fc190ce0ee0667902b8543afa16f7d41854e8c619ed29d09f5c686a40d7a65e","sha512":"1ea6916aba77d4015bf796c9815b7b73588d005ae7709e2b30cd4db83e6357bde6cbd0b03bbd7e9e75aa78cef9e00752379efea11242e2f85da68a75f2f617c6","ssdeep":"","tlshash":"a131f1d5e9a2e534099632b6b3c74cd58625b103c6439d9bfa4f111c0bd786590ec760","size":1611,"data":"","first_seen":"2026-06-11T03:01:00.320219Z","last_seen":"2026-07-30T21:45:49.016332Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a89a4300d9b59af6848765b5ee164943","sha1":"7fda781232df17f4708dd0fbced1e2f6a271314a","sha256":"c84a89fb30f28008023e17586d301e272818fbc3ed821fbfaa467fd681952c44","sha512":"2481131e1fa5f525c261c70568a388967be7aed2e99f3278e4fdecb9d4719a10c23621c24e2b2e62d7861446b7cbb9c209a6f08fb242e21957197180d885e073","ssdeep":"","tlshash":"fbe0617d3c354194879351b481f7f2283e1630b44454d957d89a88695cf0fc9bd155d4","size":416,"data":"","first_seen":"2026-07-30T21:13:44.837123Z","last_seen":"2026-07-30T21:37:37.329948Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/js/frontend-modules.min34a734a7.js?ver=3.19.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8e3a5250c3572e5a61534fee10df709","sha1":"0aa3fe5100694f74d0e7d99580f88685fda26631","sha256":"bfbd80809e8f863fa4c57fee859cfb30ed989cb6d521928a73586ed1055e6ffe","sha512":"5eb69c5e2498c26fe366b40a84398f29b2bb44c49cd6db265d276c1ae71764a4b26ee5b7b3d9f5c5a768e30fea17fba68da42d2935cc7e1000444b74935ec21e","ssdeep":"1536:leAjA679C+QRCHXC4WHqMPB8Vx8WXwCDcYNIekHeBHmjkfzRNE4cR8+SxpcxID1x:JdeVW/Clkbx","tlshash":"5443eb863251b4e70bef40eb602b450af32319e4740eb1987ab8ddf66470d5a237b739","size":60173,"data":"","first_seen":"2024-02-08T08:47:03Z","last_seen":"2026-07-30T21:45:48.973131Z","times_seen":1464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/jquery/ui/core.min3f143f14.js?ver=1.13.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-31T01:48:46.756509Z","times_seen":45576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/themes/hello-elementor/assets/js/hello-frontend.min41fe41fe.js?ver=3.0.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"37a18cd57014e833a5c4a7bfa6eea9b3","sha1":"bdaa4dc40b15d010d66959bfe7a40b10292d1763","sha256":"fad3123058cce0346ee9998342ef09cfa766dc1393ee3b5c2b450a18936c7d1b","sha512":"3d721d447bd732f96bf1b2feae5ef6b6064ec6b2396022f06a0d96f8ca1478f77c8910733bc277ebe414a5e85c77ca80b9d2f9a5f9ae77c7e99884c82f15a9a3","ssdeep":"","tlshash":"e651ba0973db2836406f92bb2f47559e722640cf6405c968786dba5e1f50c7016f2bf6","size":2937,"data":"","first_seen":"2023-12-27T11:44:50Z","last_seen":"2026-07-30T21:45:48.910057Z","times_seen":4977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/js/jquery.easing.1.351525152.js?ver=1.0","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6516449ed5089677ed3d7e2f11fc8942","sha1":"82e40d060bc269a6dde20c3990ca5a4fea6ca754","sha256":"0757f7ff6e5f6a581922a5e2d42c5e0cf7475d880885a9802e8bdd5e4188dd34","sha512":"6ebae34e9f46e8c90a5f94235f0c00424b1c7c5a4a8b7a248f267f337bc6c3083da88d66b28cfbcfe11b4012d7b139d52b73ce8d80461dc42f5f7e0614aaffec","ssdeep":"192:pl+Or8ur83V33R3hqRAsfAy4MOr8ur83V33R3hqo:zZr8ur83VHBhm+r8ur83VHBhL","tlshash":"a2f1038963c0631b4359f270aa3e5e4ff268642b566e681fcc5c5084bf7d339c27ad68","size":8097,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-07-30T21:45:48.933055Z","times_seen":19241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/mediaelement/mediaelement-migrate.min84fc84fc.js?ver=6.4.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","size":1191,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-07-31T00:14:12.818399Z","times_seen":56172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min36c736c7.js?ver=1.8.6.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2399ef783701f73c399589ae95298b0f","sha1":"3e1f2a7ac9dcb2b50b1f1cf768441e46fd9f62ee","sha256":"2dea57483641f8762937dfd9b09126a9b21c88bd3d7486186003e0bbb9043145","sha512":"50f1c2b16c8c2fc62c504a33529dcef3fdbdd1533206c8779772cbba1a336c7c5bbb533a35f99e559aded3d1bf0c858c10a04ec083969f47a29deac92e366fa1","ssdeep":"","tlshash":"3901bd34b437beda1c6f122414af138fb266d4b3b2069c91972095b41e71dca634bf88","size":771,"data":"","first_seen":"2023-03-12T15:10:15Z","last_seen":"2026-07-30T21:45:48.911426Z","times_seen":10511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/mediaelement/mediaelement-and-player.min1f611f61.js?ver=4.2.17","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","size":158005,"data":"","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-07-31T00:14:12.842295Z","times_seen":55822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/underscore.mind584d584.js?ver=1.13.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f88d5720bb454ed5d204cbdb56901f6b","sha1":"f1952292fde4b15936e9aac16b2b9896684db95b","sha256":"726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a","sha512":"f7e3ec0c5b832116d75cac2a5a40ab6fe673cc6c0996bd898f25850ed5555484d821e1fc4ca039c69da3ab51faa25613d622db1177d7cde16da477145c3a6e22","ssdeep":"384:ivzwv2QYnTte0KKscI1WxUy/gdLzrXmJUDWjFkgoKjJj5Sh6W0+:WwOQ2te0KaYrXm1hR5Uz","tlshash":"538284c83ad2f059536324ba407f249bf23a7ea2649caa00d265e4fcbc7495dd137d6c","size":18833,"data":"","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-07-31T00:00:32.228574Z","times_seen":35642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16530510156","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6241a23ae8a3886df7e1891e58cd194","sha1":"b0d9eae5b3a7e6190e2bec48843e0a80ac21a0ba","sha256":"8644ed5d58107f32a25e17638e85d9a5db2a15711a881373c03389229fef94e5","sha512":"e177380cb3d9c5bc930ec8f566630298f4564eeb3d6c5b048b25a5e8dc6e7c82bf35757621acb344585a453a2b7f660a352e95b1ba2d83c07b16fba898feb721","ssdeep":"6144:MfvZKEi5HT8qPcyVunyhczJGfEjQ3dpLF5Cy6NJs+4r:MfvZsTQyh5oJV4r","tlshash":"4ca409cdb3d674629392f478903f018ba57a69e2b44cc899f189dce02e7465a4237f7c","size":451852,"data":"","first_seen":"2026-07-30T21:37:34.854416Z","last_seen":"2026-07-30T21:37:37.3163Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/jquery/jquery-migrate.min55895589.js?ver=3.4.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-31T01:33:19.375659Z","times_seen":913458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/js/jquery.superslides51525152.js?ver=1.0","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1da4e50940e31c2661972400ff477985","sha1":"7059704faf2455cdc860ee2544acfd3e33221b59","sha256":"ee446fea39ccdf2d494c55c142e746153f1147c68f74834cd48ef2e6d8bba951","sha512":"3138f006134b09dc3f053f74476a8e9a86f9e43aa452fe6b143527d4adc88cd5f70a56836e14c9c4bbffec284f6735571776d070eefee463c8206b46df72a54e","ssdeep":"192:5SjUaoFC2TJmrunsjRL9iZL53LeP1cVrakio7V1KMgheaapESKdrJXk7zGisbZDv:MAjU2OuMhOL5cscThfdr7ZDJNamqM","tlshash":"e262aa996afa2511d167307a4ebf840c6179802f6d0ddf2c3dec62d41f84128a77bbe6","size":15579,"data":"","first_seen":"2023-11-20T11:10:14Z","last_seen":"2026-07-30T21:45:48.987421Z","times_seen":741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/js/owl.carousel.min77e677e6.js?ver=2.2.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","size":42766,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-31T00:57:03.128083Z","times_seen":20365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/header-footer-elementor/inc/js/frontendb179b179.js?ver=1.6.25","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf77399f3133c7aabd02adffdb64f9ca","sha1":"28e9739756898a8410e2d818832bf761714e23ba","sha256":"7df5bb108fb45ffd903b10fa15e2c7b9b869898bce89408d06609b8e2441bd30","sha512":"437a75b624486947dc06e17920baf71efeec43e305326733b12b43b23c43b49ec6cf5876e8715bc227c348d72798a496d38a22ea71ed93f8f799410b3894d5d3","ssdeep":"192:ejUnO66U3rNBqnnahhnPnlLoOaTWsIsujsTrA1QUvxe6dTkLLxJEvkerJ8OlXgRB:t0ixvlLNbU2TgxdWNQvQo+iT","tlshash":"72c231c577ae1033507f3a8ea517e0ac732f84b2c51514adfeb885ad29e490833e6d76","size":27750,"data":"","first_seen":"2023-05-12T14:34:21Z","last_seen":"2026-07-30T23:19:17.766743Z","times_seen":1941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/js/webpack.runtime.min34a734a7.js?ver=3.19.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1345d371669285e79e2bf7053dd24e6d","sha1":"477456f542859d109d27764748e1a7e4b9bbbf64","sha256":"dc032c361978c8fa496519488b6cee1b77554a1844ed6cb5d212d2fb87bc55e8","sha512":"87fc7b4451c443eead9880888b89bb1940488a66034a490e21d1c8a1e94690ef6223fea20c941e6ff947a8ce73b61db972797aa5fce7f4c792796d6e0a5d75ff","ssdeep":"96:B6sNt0jqf9fzgcf8FD7lCjNVobVDPkqflkxwvT8S2:IsNCjw9fsjFD6N4FPkyXgS2","tlshash":"e5a142d41b90fc6735e135c9a11aa731752fc0333d1bb8c1fa22dced98e8a9187a9571","size":4997,"data":"","first_seen":"2024-02-08T08:47:04Z","last_seen":"2026-07-30T21:45:48.98235Z","times_seen":1462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/js/frontend.min34a734a7.js?ver=3.19.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"22530ea7dba554d4660007fcba3ea75b","sha1":"666c3fc8da09b750adbb6d8fe5957da488dda6fc","sha256":"3fe543befe804b3847051f8d79d0f0bd7c0995248b9b87b1ab3a49f6862cb903","sha512":"adb70de408fe6d47b413ec4d97ef7989808a20cc653c4c218f17c1d2dc458142da3bf22c128021700849c781d97b2a79497225e4add9b0b9f8785120645ead2d","ssdeep":"768:ZRPzjLRkRevx1QEa/A3JSJGfVebVqJj/Q9KEAzBc5GETSebsvTilauUHTSX5aodX:ZRP/LRkRQx1QEa3GfV9JREAzBc53TSe1","tlshash":"5c03081271d2d4aa418f48b7b433121cb3664dcdb402b59db2bdace6a4b1e8373b2775","size":40306,"data":"","first_seen":"2024-02-08T08:47:03Z","last_seen":"2026-07-30T21:45:48.958148Z","times_seen":1463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min459e459e.js?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5945db2f3337fd9f1cbef5b07b2a493","sha1":"8a11439d56af9fb27836bb5f2a30aeb35b93bb5a","sha256":"a8642bcd147ba3528345f5bd17f788cd524931e093255b2c1c8344677a1ab505","sha512":"ddfae8040510dca2e41c5f745b2ec8e349053a02409c41cbc3cbf8df1561b7c586f93090974ee6821fc27e19aba68cc6c95fabe9d9321934fb185d20a8da7a12","ssdeep":"","tlshash":"e30128b72f100835527d0a22f35d7708637100c0a60359596c58592d117ccbbd57a7ff","size":681,"data":"","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-07-30T21:45:48.923554Z","times_seen":26487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/bb/spop.js","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"00b810d6a88ba0f07b7a86d448d06356","sha1":"022bb5e83098df20227cc5b860eee1a82216d75b","sha256":"07dae3b6a264e6015266170a77f4aef96a70b56cc420bd8ecedab497bd5eb684","sha512":"95e539edd994557de85fe1c06522941cc2feacb585b1ee6a0aa39e25878cb2075c18074d2674605d63edc977ca68dc64e1bfbe6cec9a19e74cc42b54644a9380","ssdeep":"","tlshash":"7671312d6550137502fb92de7042064ce53ada29be59684eb6f8dfe8d8b2c45b832b34","size":3602,"data":"","first_seen":"2025-08-09T18:11:59.66106Z","last_seen":"2026-07-30T21:45:48.959827Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts459e459e.js?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c087aaba5bcb76bc96366600b854e20","sha1":"6de8049f8f4e6c83300be31ffa9e54d652f10f1a","sha256":"03ca8c38633872b885f1e54e729c4597da2f1c52d06f9a5289ddda7ca3a9930c","sha512":"c8226fe12963b09e5a70e4987d38b20d54aef88fc871f221275f883b68dac1de51799c3edd479778bda958167f30eeb1f8b73e3ae12c13b5d12e407b5369301f","ssdeep":"1536:ZN/eY/j2zmsmCQxPmnG4RaviizVk3P5hDlrQ9C16WQsA+HvsvGNW5BJBQdQh6Pmp:ZN/eY/azm7PmnhG9bsXz06Pmn+nfi","tlshash":"a4d3f94eb340352542dbf17a926f160e7237a51ca607806cb96ad8ea6db8c4d3037f7d","size":137549,"data":"","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-07-30T21:45:48.922687Z","times_seen":4921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor459e459e.js?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce634c6621026e8fb98418ce432c4b75","sha1":"40a1a488094b4569c3a903eb043ecda0d6bf929e","sha256":"d22a8ce5b62f7de94c4183b2528d1bc7d6b220be97b72d04c7aea220e273d58f","sha512":"985c80c03cc6b2ac537a15abb722631ec5627e12630689c329d9e27de28b5594ff14a67b338d1b81d6e27c1518e729103015d773062aaa99dda0fe04f3bcca1c","ssdeep":"384:FsCB6KbopzQALBEwGBM8/IfE4AoCifSM2JemNUeirDB5evnmc1mtgGMRgGLY1yvU:FsCB6KbopzT2Y8/IfE4AoCifSM2JemNY","tlshash":"fc829455b25120e201ff64ab539f620f72b3287ae5074060f1b7427a4ffdd8935aaf1a","size":18593,"data":"","first_seen":"2023-11-08T16:54:56Z","last_seen":"2026-07-30T21:45:48.91422Z","times_seen":1547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-31T01:11:31.159003Z","times_seen":7839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script459e459e.js?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"94d041d462db321cdb888066586f2068","sha1":"717d2f9da7fb9f9e2bf2058a8177a0344f8a8647","sha256":"b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5","sha512":"9a320fbc1dbeda1700f54140f814a285d1cdadf947f927db7e1d70a686d15fc74d69530bd13ab7cf9c3a2009791f2ac8f358cd9f748b1c2995eb9712b68dc574","ssdeep":"","tlshash":"6590041c144cf04505775114543773047733745031411043111d71400c1cd351307404","size":40,"data":"","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-07-30T21:45:48.986597Z","times_seen":29480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min39583958.js?ver=0.2.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d43b2fcb5ef3e6afdcd539f46148514","sha1":"0ff4d5160beb004c439b20c6343044917c629d10","sha256":"9aa9bb8be2b834059533ce5de7eed3a662ad3d3e70643bbe5f75265075e9bd28","sha512":"00a0c46b067c1609d996bd438d6ef3342a6cdd6323fc8b8c4853cf4a8c2ff983b98e77545ab3b16ba2a8d0e58a2d35ec77b5765ba172f6532b8000239f06e396","ssdeep":"","tlshash":"9031e1187181b22dc66354b1c10b53099232ac751532a168b87dd8e6bc68ecc6677ff7","size":1801,"data":"","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-07-31T01:13:44.594561Z","times_seen":24914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da05da.js?ver=4.0.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-31T00:40:20.890852Z","times_seen":73786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/odometer.min459e459e.js?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2adb8c7cf8cfff04c18947e5a30622db","sha1":"243dc868c7f293e0b498e68df30c65dfc5458609","sha256":"36e97e9e660caa53bc8a8d93a1b688ff167853b7757a9bbe670bdc110c5dbf92","sha512":"69a48bbd562cb32345403d85741872d3bbfcf485855f75f9e37730bbeb6f1763cbf42f2658e9e25a9082b347a1669d59909703dfbb578009a58572c136caee97","ssdeep":"192:DbJw+4Hq2qTJEopzrud8ym7LmsMBEZ8SycbvpQzL:vJwXHnqTJpy7LE1g","tlshash":"67129384ff41a638475362a112be0749b7bb596e2401404df37c99debe26c39e11bfb1","size":9702,"data":"","first_seen":"2023-03-12T11:43:32Z","last_seen":"2026-07-30T21:45:49.007711Z","times_seen":881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/wp-util.min84fc84fc.js?ver=6.4.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","size":1426,"data":"","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-07-31T01:58:52.762436Z","times_seen":101293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/jquery/jquery.minf43bf43b.js?ver=3.7.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-31T01:33:30.43843Z","times_seen":996345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min365c365c.js?ver=1.0.21","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"749034f2041f637ed40dcd96f4fd9759","sha1":"0a03f9a53a588426d83008046d855089ac4c85de","sha256":"641991d00eeb0d50ac64f69ca705f8bdc72cb725a60c8d7f7ef5191cefd5a455","sha512":"6d0a3ec65f4a640cc8c48795cc5f6e3463c9a09c35cce0206f8c93c6e8ec936cef8a650df36d5ab6fd44c1b35b00acd09f972b7e8850962ca713c3a4c6904411","ssdeep":"","tlshash":"ed400000300c000c00303303c030030030000000000000000000000000000000000000","size":7,"data":"","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-07-30T21:45:48.977772Z","times_seen":485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/mediaelement/wp-mediaelement.min84fc84fc.js?ver=6.4.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","size":1107,"data":"","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-07-31T00:14:12.843018Z","times_seen":52962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/bb/js/popper.min.js","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"84415b7368fd6fc764cbe86039ce0626","sha1":"62f238e73348c77eb9e865426a7d1b7de23cbb2d","sha256":"c776195ad46333c6c9a9fe3c74502ffea9a02faf122388ea3567922cc65a3060","sha512":"8423f7a626064813ea9d7ca974ac4a3d23b304717be6853cc10f356ba3a21971c531e2acf7ff0285b81897ba54bf02265c96f4dcde1bb35a350f399ba2479e17","ssdeep":"384:knMQG5rwVO7dV9nNbRGCB9D45Hkn5vj2xpOxvIAgD75zBi5vISg3gzopL9TidOg3:P5sg7X/jD45eSxpOxvKD73i5vTzwL9Ti","tlshash":"c8a2b3cc3294b06643a791a7a0bf960eb2339875610e9410f199f2d97c30ef9917fd79","size":21257,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-07-30T21:51:07.662469Z","times_seen":15691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/js/allscripts51525152.js?ver=1.0","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c3641cc32e8bde1b5b287fe045d9b6f","sha1":"12d37660c4a852e714ba83fa553ffc29dd5d3692","sha256":"ffdcc8f19acf5a03fbf7dd2221b205af6e1c21be153d7f1186fdbfca54bf9309","sha512":"747177184df2587595e60bf28d9af29c5ac5ced99682bddfd965458928a9fcd69dedc33ac3525188eda92739a3cba454771c09361d6ee033411702bc978ea5d0","ssdeep":"","tlshash":"0e411178f6bc265181bf315f066fe5c4b3396567e2015c25bc4e89542fc2509e3e9f05","size":2360,"data":"","first_seen":"2024-02-27T06:27:31Z","last_seen":"2026-07-30T21:45:48.988252Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/js/price-table51525152.js?ver=1.0","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d879112ece9f5ec77931dc2c4e8fdf0","sha1":"7543df9eaf761309316c8c226a432276486b5b82","sha256":"d0a6be327893a4b6cc952863b98ee798c3134bc6bd4f32370c8f842881ddd09d","sha512":"9c7a26de81da4e9a1e89a8c06cd6737cadd2e9a4c7ee505c7bd102dd190caddda26d3447cac9c129f0ffb54c972e9e4415ad1b2bd91eae736cb609dbddc16a7e","ssdeep":"","tlshash":"3441c775bab3248011f3743fa2774e4460629a7716dac920fd0f8a644f9121d87b6b7e","size":1992,"data":"","first_seen":"2023-11-20T11:10:13Z","last_seen":"2026-07-30T21:45:48.9133Z","times_seen":737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://qfsworldpatriotledger.xyz/qfspro/wp-includes/js/jquery/jquery-migrate.min55895589.js?ver=3.4.1","line_number":2,"column_number":981},{"level":"warn","text":"Request failed with status 403","filename":"https://www.smartsuppchat.com/loader.js?","line_number":2,"column_number":17930}]},"http":[{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/themes/hello-elementor/header-footer.min41fe41fe.css?ver=3.0.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.222Z","timestamp":1785447419222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/themes/hello-elementor/header-footer.min41fe41fe.css?ver=3.0.1 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1310\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7325,"size_decoded":1619,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7323), with no line terminators","md5":"4f6608672aae4899d264369dd0c580d9","sha1":"c4b0007b7f9377cd9d7c6b8106dffedaa03d1610","sha256":"97a09cb2af7d4406f6163874dad15c607d571749611d00890d47143495a0a617","sha512":"71269b46a4c18fb845dc411d6de352b8f3ed0bf320e05c4873209b18298beee451975d5108c55a1249f6e37e1227b0b3e4c1de4fcfe85d9dcabf608f5ae39a5f","ssdeep":"96:EfTvO5c2yhjFobxStP53m8yPoTZFo5jJxzy4vA3eCiwtzG/4vo3otubEm+B1Yz:3/otJtFo5jLLx+zI4vdud","tlshash":"fae1cf66f8f2357813338623a7e147ae50bac00dd90babf561eac31b05db44217a7f59","first_seen":"2023-12-28T03:57:54Z","last_seen":"2026-07-30T21:45:49.004419Z","times_seen":5605,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min365c365c.js?ver=1.0.21","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.413Z","timestamp":1785447419413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min365c365c.js?ver=1.0.21 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7,"size_decoded":196,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"749034f2041f637ed40dcd96f4fd9759","sha1":"0a03f9a53a588426d83008046d855089ac4c85de","sha256":"641991d00eeb0d50ac64f69ca705f8bdc72cb725a60c8d7f7ef5191cefd5a455","sha512":"6d0a3ec65f4a640cc8c48795cc5f6e3463c9a09c35cce0206f8c93c6e8ec936cef8a650df36d5ab6fd44c1b35b00acd09f972b7e8850962ca713c3a4c6904411","ssdeep":"","tlshash":"ed400000300c000c00303303c030030030000000000000000000000000000000000000","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-07-30T21:45:48.977772Z","times_seen":485,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/mediaelement/mediaelementplayer-legacy.min1f611f61.css?ver=4.2.17","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.424Z","timestamp":1785447419424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-includes/js/mediaelement/mediaelementplayer-legacy.min1f611f61.css?ver=4.2.17 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2394\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11256,"size_decoded":2703,"mime_type":"text/css","magic":"ASCII text, with very long lines (11256), with no line terminators","md5":"2b0dd7eecea03b4bdedb94ba622fdb03","sha1":"703becba85161118dd6fc66af465428ef43f561c","sha256":"b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646","sha512":"fe64cff950921bdf83ec09fe79ca5ce52de40f5b8788697eb1d7b28055f2817778347d5d3c81a324801c7ec7151b3ee0eee99b2882c3c3b10bd760342d3bf3e7","ssdeep":"192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r","tlshash":"713223929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-07-31T01:51:33.576461Z","times_seen":90466,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/themes/hello-elementor/assets/js/hello-frontend.min41fe41fe.js?ver=3.0.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.428Z","timestamp":1785447419428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/themes/hello-elementor/assets/js/hello-frontend.min41fe41fe.js?ver=3.0.1 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 814\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2937,"size_decoded":1050,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"37a18cd57014e833a5c4a7bfa6eea9b3","sha1":"bdaa4dc40b15d010d66959bfe7a40b10292d1763","sha256":"fad3123058cce0346ee9998342ef09cfa766dc1393ee3b5c2b450a18936c7d1b","sha512":"3d721d447bd732f96bf1b2feae5ef6b6064ec6b2396022f06a0d96f8ca1478f77c8910733bc277ebe414a5e85c77ca80b9d2f9a5f9ae77c7e99884c82f15a9a3","ssdeep":"","tlshash":"e651ba0973db2836406f92bb2f47559e722640cf6405c968786dba5e1f50c7016f2bf6","first_seen":"2023-12-27T11:44:50Z","last_seen":"2026-07-30T21:45:48.910057Z","times_seen":4977,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/js/jquery.easing.1.351525152.js?ver=1.0","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.435Z","timestamp":1785447419435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/gum-elementor-addon/js/jquery.easing.1.351525152.js?ver=1.0 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1879\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8097,"size_decoded":2116,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"6516449ed5089677ed3d7e2f11fc8942","sha1":"82e40d060bc269a6dde20c3990ca5a4fea6ca754","sha256":"0757f7ff6e5f6a581922a5e2d42c5e0cf7475d880885a9802e8bdd5e4188dd34","sha512":"6ebae34e9f46e8c90a5f94235f0c00424b1c7c5a4a8b7a248f267f337bc6c3083da88d66b28cfbcfe11b4012d7b139d52b73ce8d80461dc42f5f7e0614aaffec","ssdeep":"192:pl+Or8ur83V33R3hqRAsfAy4MOr8ur83V33R3hqo:zZr8ur83VHBhm+r8ur83VHBhL","tlshash":"a2f1038963c0631b4359f270aa3e5e4ff268642b566e681fcc5c5084bf7d339c27ad68","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-07-30T21:45:48.933055Z","times_seen":19241,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/js/allscripts51525152.js?ver=1.0","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.438Z","timestamp":1785447419438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/gum-elementor-addon/js/allscripts51525152.js?ver=1.0 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 743\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2360,"size_decoded":979,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"4c3641cc32e8bde1b5b287fe045d9b6f","sha1":"12d37660c4a852e714ba83fa553ffc29dd5d3692","sha256":"ffdcc8f19acf5a03fbf7dd2221b205af6e1c21be153d7f1186fdbfca54bf9309","sha512":"747177184df2587595e60bf28d9af29c5ac5ced99682bddfd965458928a9fcd69dedc33ac3525188eda92739a3cba454771c09361d6ee033411702bc978ea5d0","ssdeep":"","tlshash":"0e411178f6bc265181bf315f066fe5c4b3396567e2015c25bc4e89542fc2509e3e9f05","first_seen":"2024-02-27T06:27:31Z","last_seen":"2026-07-30T21:45:48.988252Z","times_seen":91,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/mediaelement/mediaelement-migrate.min84fc84fc.js?ver=6.4.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.444Z","timestamp":1785447419444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-includes/js/mediaelement/mediaelement-migrate.min84fc84fc.js?ver=6.4.3 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 479\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1191,"size_decoded":715,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-07-31T00:14:12.818399Z","times_seen":56172,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/js/frontend.min34a734a7.js?ver=3.19.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.455Z","timestamp":1785447419455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/js/frontend.min34a734a7.js?ver=3.19.2 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11876\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40306,"size_decoded":12114,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40266)","md5":"22530ea7dba554d4660007fcba3ea75b","sha1":"666c3fc8da09b750adbb6d8fe5957da488dda6fc","sha256":"3fe543befe804b3847051f8d79d0f0bd7c0995248b9b87b1ab3a49f6862cb903","sha512":"adb70de408fe6d47b413ec4d97ef7989808a20cc653c4c218f17c1d2dc458142da3bf22c128021700849c781d97b2a79497225e4add9b0b9f8785120645ead2d","ssdeep":"768:ZRPzjLRkRevx1QEa/A3JSJGfVebVqJj/Q9KEAzBc5GETSebsvTilauUHTSX5aodX:ZRP/LRkRQx1QEa3GfV9JREAzBc53TSe1","tlshash":"5c03081271d2d4aa418f48b7b433121cb3664dcdb402b59db2bdace6a4b1e8373b2775","first_seen":"2024-02-08T08:47:03Z","last_seen":"2026-07-30T21:45:48.958148Z","times_seen":1463,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/elementor/css/post-448741e741e.css?ver=1707565078","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.217Z","timestamp":1785447419217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/elementor/css/post-448741e741e.css?ver=1707565078 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2416\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33333,"size_decoded":2725,"mime_type":"text/css","magic":"ASCII text, with very long lines (20752)","md5":"6edb92db2be341a58922343b5b112f91","sha1":"4a204e6e4e2e9941387912b3a73970cd77916462","sha256":"8c4aa9879e676b87ff7787274416b740cb05bd5aee35f0453be8af7e09624b3a","sha512":"2eae2d71f330bd131a542295a549b46d8fb2c4df91191e898eb53303dc44c026e2ab277a3a0dca10c27845408c442305a1780c1b9dc557fad2145c0937720724","ssdeep":"384:7hpg4fnuOZMf89mDJQdgW5a/gwTgMge5gO6yzIzL:1pffuOZMEm2xa/BTXf5jkv","tlshash":"a8e239dc7e53c538b4af245f614be1ac20389cde8a2da2f6f9644213f476e6a33e4550","first_seen":"2025-10-03T14:17:00.827078Z","last_seen":"2026-07-30T21:45:48.9434Z","times_seen":18,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts459e459e.js?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.434Z","timestamp":1785447419434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts459e459e.js?ver=3.0.4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40428\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":137549,"size_decoded":40666,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (45047)","md5":"6c087aaba5bcb76bc96366600b854e20","sha1":"6de8049f8f4e6c83300be31ffa9e54d652f10f1a","sha256":"03ca8c38633872b885f1e54e729c4597da2f1c52d06f9a5289ddda7ca3a9930c","sha512":"c8226fe12963b09e5a70e4987d38b20d54aef88fc871f221275f883b68dac1de51799c3edd479778bda958167f30eeb1f8b73e3ae12c13b5d12e407b5369301f","ssdeep":"1536:ZN/eY/j2zmsmCQxPmnG4RaviizVk3P5hDlrQ9C16WQsA+HvsvGNW5BJBQdQh6Pmp:ZN/eY/azm7PmnhG9bsXz06Pmn+nfi","tlshash":"a4d3f94eb340352542dbf17a926f160e7237a51ca607806cb96ad8ea6db8c4d3037f7d","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-07-30T21:45:48.922687Z","times_seen":4921,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/js/webpack.runtime.min34a734a7.js?ver=3.19.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.452Z","timestamp":1785447419452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/js/webpack.runtime.min34a734a7.js?ver=3.19.2 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2071\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4997,"size_decoded":2308,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4957)","md5":"1345d371669285e79e2bf7053dd24e6d","sha1":"477456f542859d109d27764748e1a7e4b9bbbf64","sha256":"dc032c361978c8fa496519488b6cee1b77554a1844ed6cb5d212d2fb87bc55e8","sha512":"87fc7b4451c443eead9880888b89bb1940488a66034a490e21d1c8a1e94690ef6223fea20c941e6ff947a8ce73b61db972797aa5fce7f4c792796d6e0a5d75ff","ssdeep":"96:B6sNt0jqf9fzgcf8FD7lCjNVobVDPkqflkxwvT8S2:IsNCjw9fsjFD6N4FPkyXgS2","tlshash":"e5a142d41b90fc6735e135c9a11aa731752fc0333d1bb8c1fa22dced98e8a9187a9571","first_seen":"2024-02-08T08:47:04Z","last_seen":"2026-07-30T21:45:48.98235Z","times_seen":1462,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/wp-util.min84fc84fc.js?ver=6.4.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.461Z","timestamp":1785447419461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-includes/js/wp-util.min84fc84fc.js?ver=6.4.3 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 690\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1426,"size_decoded":926,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391)","md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-07-31T01:58:52.762436Z","times_seen":101293,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/Credit-Card-Mockup-Vol-18.jpg","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.683Z","timestamp":1785447419683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/Credit-Card-Mockup-Vol-18.jpg HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/elementor/css/post-47741e741e.css?ver=1707565078\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 122881\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":122881,"size_decoded":123149,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 762x1192, components 3","md5":"e2e2f567cb0d803a336b355e71ef83f9","sha1":"36504979a7cef75e2fcfc2fb82ab2ef22febbe5b","sha256":"cda98c2a910758fb2c11db9fb6c934eb5b5d979cd1dce9f92c07f567eabb2dcd","sha512":"f600c8e97a944e3500c62509aa2b4a741da768f48dbf1188861f7e97ef0dad97633e3b994ae599ba027693116b814289b3550d85589547cb2e45c95fbea59d7e","ssdeep":"3072:sLpDx7BBqT2bevWFQYuRRs8nErhsv5yiJclPEH:mDx7qTAAdjs8ES68H","tlshash":"a4c312ac96bb3b3eb544fd724fc76164e43511440228c92b55f0cfba769a2a0bfd0893","first_seen":"2026-02-03T21:07:13.228412Z","last_seen":"2026-07-30T21:45:48.92615Z","times_seen":9,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/linebg_4.png","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.687Z","timestamp":1785447419687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/linebg_4.png HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/elementor/css/post-448741e741e.css?ver=1707565078\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 92157\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92157,"size_decoded":92423,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"cf083dbf0c2944d2efa6b3b855cd68b0","sha1":"74b52a0cf50437715d87fc2ddb37f2a792c8543a","sha256":"1a7b0475ffa719e9871b0bf6e5c91bccc08694e51a344aeb82cd63479f37b632","sha512":"3e2c25853e730d65bf1ddf7a80ffd18f40c2a32301c7249b6ab53681c76d46c57a4aefe8196669a17b95e972ef3bd31a26e12dec03a020f6a061c6cab1a55381","ssdeep":"1536:TCD1Mo392GoUeL09ruACX85kno0HsmlcrUjY91pupYgOz9g5UyC:TCZMot9oJL09ruACm6Hmwj8u+gOzK5y","tlshash":"2793ce7c99b2879cd41a3ef48badbe7a53b4101e879c6706d22c7d6b4c11bc77053828","first_seen":"2025-07-04T20:26:13.159719Z","last_seen":"2026-07-30T21:45:48.960622Z","times_seen":28,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/thoughtful-silly-girl-with-cute-curly-hairstyle-b-6M3LUVX.jpg","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.804Z","timestamp":1785447419804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/thoughtful-silly-girl-with-cute-curly-hairstyle-b-6M3LUVX.jpg HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94052\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94052,"size_decoded":94319,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=4000, bps=218, PhotometricInterpretation=RGB, description=Thoughtful silly girl with cute curly hairstyle, biting finger and looking left at promo logo, smiling thinking about tasting o, orientation=upper-left, width=9988], progressive, precision 8, 800x800, components 3","md5":"8e83717bd19a3512c9dc7a82e0542cac","sha1":"063bee00c04451d240da78a750fd69780a9d0084","sha256":"8e5f34682d751283ac2afcb9aa5c6442329c90c852980c82dff93491eb0ad469","sha512":"74c5f1241eabf3186d5344eca56921d96f2d2d8b2ff651eb52787cf446a2c2cfa9e2dea8d14129da11252252869a71e64402acb0219f8f2bb96a4fc83c1e47b7","ssdeep":"1536:LkrYrVQxheTSL4jdPWNtm+kwvrXoJssA93zj/MSiUjYNJcWZ2yzjuB9o/Q:e+exheGsdWNtFhr2zAdUdUjYNJcejXKf","tlshash":"7c93f12565944e00f4e436b079fae3c6c3337ce42f77a629358ea8047fa0b905daa353","first_seen":"2025-07-04T20:26:13.18566Z","last_seen":"2026-07-30T21:45:48.927947Z","times_seen":21,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/cc2-1-1024x800.png","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.825Z","timestamp":1785447419825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/cc2-1-1024x800.png HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 228978\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":228978,"size_decoded":229245,"mime_type":"image/png","magic":"PNG image data, 1200 x 937, 8-bit colormap, non-interlaced","md5":"69c1254a078136225ee44feb2f2d0ae7","sha1":"ae18a2b88bec53da46894de8a1bd2dbaab8e988e","sha256":"e44b0bebad12cd4f151aa3fc24bd18c9da058c66c68cbd143d3cae92086cbfc1","sha512":"9314f1e0e238ff7b9e373d615db368a9f8b93c963ef2eacc707297ed45d77fdc4e6b5a57cb4e0d0a64046faef6f988f0fef3eb8dad2b0cb171bd17263182751d","ssdeep":"6144:Gd7Tdoku8QNAHGZI/xuzJV/Bq+/0qvqX4XrWCUH547:Gd7TdokrOAHt/xS/QXqCkw47","tlshash":"892423291de220faa91dfdd624cb532d39c26ab2b382e59068145341771cff2d1f887e","first_seen":"2026-02-03T21:07:13.269203Z","last_seen":"2026-07-30T21:45:48.930079Z","times_seen":9,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-30T21:36:58.662Z","timestamp":1785447418662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.32\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; expires=Thu, 30 Jul 2026 23:36:58 GMT; Max-Age=7200; path=/; secure; samesite=lax\nqfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D; expires=Thu, 30 Jul 2026 23:36:58 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 30 Jul 2026 21:36:58 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress:6.4.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Underscore.js:1.13.4","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.19.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":145382,"size_decoded":22504,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9462), with CRLF line terminators","md5":"85ffb0168e2a0924b3c2085134a8d39d","sha1":"056b6d3a5c8ce5d1c8e3eddc97d6a04aeadffb83","sha256":"9ecab9b3baaf35bb8abe59b7c9f301c6a4b50f806ecd3d7e22da693f07ecad28","sha512":"f94c7394089143f6b2b008929bcc23b17e8edc659820273715557da7f5c6ceb8dbe6fa16ed3cb663e70c5bdca131ec1757106b449f2ad0684d3c2e60d4aa6d34","ssdeep":"1536:bapPjEsRzIRgzSlTpyC13K3vbSjEfzSOU4bGr45ZtzTG7sWtzLG94WtzDGLkWtzn:+KakCMmA09UsSrB55fP","tlshash":"5ce350613996902a211f02df8023230de1d7dfd9e613a6e5f5fc623a67b5ca07be3125","first_seen":"2026-07-30T21:13:44.75291Z","last_seen":"2026-07-30T21:37:37.254699Z","times_seen":3,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":11,"connect":22,"send":0,"wait":256,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/friendly-cute-pleasant-asian-woman-showing-way-in-3KHRWN2.jpg","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.819Z","timestamp":1785447419819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/friendly-cute-pleasant-asian-woman-showing-way-in-3KHRWN2.jpg HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70388\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70388,"size_decoded":70655,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=4000, bps=206, PhotometricInterpretation=RGB, description=Friendly cute pleasant asian woman showing way, indicating interesting promo, pointing left smiling broadly, introduce advertis, orientation=upper-left, width=7955], progressive, precision 8, 800x800, components 3","md5":"0ce24d7f6aa90a6de1a93e3aa7056d45","sha1":"7c9ad1d012ab5f5531a1fb768e6b9eca633e6df1","sha256":"c397c3558666988860dbf073f6a80b5e5262c782cbac19e1eb141e732f51aadd","sha512":"520a6323fe56103439660e24fa752dfd741154dca84cec2860e3a94762912586ea9bd114174d55d97200c44ecde63ffc3935d878c16c93e77911b6a3b9b0cec6","ssdeep":"1536:ChOMaiozaionwNv7257eK3hN8EHJOKvybzIEU5:ChOXlulwNxChKotyb05","tlshash":"9463ae21a2a46c12f9d8333894fdc640e3f3bcd44eb2299e3a9c99283f219585dd5797","first_seen":"2025-07-04T20:26:13.171265Z","last_seen":"2026-07-30T21:45:48.956414Z","times_seen":21,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/animations/animations.min34a734a7.css?ver=3.19.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.427Z","timestamp":1785447419427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/lib/animations/animations.min34a734a7.css?ver=3.19.2 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2442\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18468,"size_decoded":2751,"mime_type":"text/css","magic":"ASCII text, with very long lines (10019)","md5":"4601ba55044413706c2022cb6c1c3d05","sha1":"5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec","sha256":"fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c","sha512":"8dab2d19378e34b40043621aac57b418e56486dcfebd1a5991be8a02ee6b071d07ec6bfd9408dea8ff0198995de9d42a46e66513d68b40b68056707e4e691e01","ssdeep":"384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm","tlshash":"c58269c9ee12104902a70373caca5e68c9388ec764325cfe7366544f0a51add73eba77","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-31T00:40:21.054559Z","times_seen":42897,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/logo_Asset-7.png","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.503Z","timestamp":1785447419503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/logo_Asset-7.png HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19048\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19048,"size_decoded":19314,"mime_type":"image/png","magic":"PNG image data, 923 x 169, 8-bit/color RGBA, non-interlaced","md5":"ba5afd11d6a02ed21e21017d397211e7","sha1":"349619b9923f567401ae7c30a84c413208e90f77","sha256":"e12a11593704d450094f2b5105c7b84aa9186ba4dd6f8abaa07966acb04b5a4c","sha512":"6584df0b04e16892de487b1403d0c5ad070a89a4aa0632a3dd44bf7e268d45bb1ae676ea7ceb93b15279fa9a0f8a438d480bba65f9e1e5b048ce4f807bdf05db","ssdeep":"384:0DX50obe66LmPvvxdr9wJIgqPAMsDHvGYkNzL6P7q0EA:0+6DxTwJIOMs6YkNaDqk","tlshash":"1982d0f40ebe90f7bf942acbf9086aba54e7f8749560008527c14516febad5f000b5b8","first_seen":"2025-10-06T04:06:00.164867Z","last_seen":"2026-07-30T21:45:48.995097Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.778Z","timestamp":1785447419778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:49 GMT","end":"Wed, 02 Sep 2026 14:34:48 GMT"},"fingerprint":{"sha1":"77:06:42:CE:73:9F:CA:05:A3:6E:99:99:F2:3F:B7:EE:E4:60:E9:29","sha256":"E7:6E:68:C5:CD:6C:F6:14:84:A0:18:1A:D7:94:77:7A:28:F6:67:8E:90:58:94:AE:3A:65:6A:B7:95:0F:5D:1B"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 21:37:06 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: k+C8ooWe3J1VEo+/WpgrZLBTlEWHZ0egHsMLRp4isci5tpNC+3JKv5PbgX0D/cyV15cJB0s\r\nx-77-nzt-ray: fdb541236b7dfaa702c46b6a76cd5b1e\r\nx-77-cache: HIT\r\nx-77-age: 40\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-31T01:11:31.159003Z","times_seen":7839,"resource_available":true,"data":null}},"time_used":6735,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":8,"receive":0,"ssl":6715},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/icon2_4.png","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.827Z","timestamp":1785447419827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/icon2_4.png HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 171517\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":171517,"size_decoded":171784,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"50b4de6dc7317aa6d9e2e9ba27ef9d60","sha1":"8c1d9e2904f201b5eb2732da8286d0eedf2ed7c9","sha256":"5d63aa5dd455db2e4ce9e1d345d8a34437a13b08fb319f0ea17fd8c4bf0e21da","sha512":"573d51214b65208356113bea5b862ff82d8bfa70220c34c6d579a5e5f16c8a6478afeb2ab70d42d090746e8381f7d2a0c43ec23817416e0adfae3e3dc692786f","ssdeep":"3072:qpSX9MlOuiVLpiu0ANRYcTcXa2juAKMwLJK9E+SKL0oIVXxz8mv4S6Q31kRFLwt4:qpSqOuiVku0ANR1QapLJK3L03xz8RZcC","tlshash":"59f3127ae07bb3a009926b4b4e4e5b4feb36bfaf9c5438c8d467440d12763e05222d75","first_seen":"2025-07-04T20:26:13.211728Z","last_seen":"2026-07-30T21:45:48.973997Z","times_seen":20,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/woman-with-laptop-using-credit-card-DZ35VKV-1024x683.jpg","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.509Z","timestamp":1785447419509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/woman-with-laptop-using-credit-card-DZ35VKV-1024x683.jpg HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 106343\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":106343,"size_decoded":106611,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1024x683, components 3","md5":"ca1717bb007f4d67add77f780525a7a6","sha1":"36f7958f666681d3f98295f8d1f0e673f1411b6b","sha256":"c64ae97583ccf16ea9239a91a06261bde9de0704147e02c5031a7e5b999490f7","sha512":"cd11d7bb568ad60ab85cd3d9b985b424612dc88618cf60288d585a6d95386f81ab8d6965b844ac62310ab85e6114db5b3316f2899182df80e04af7476a5a9d45","ssdeep":"3072:PjO4xx/VK5osgKuPpkDv9VQZV3fOlSqHYm:S4x9VAkKumIdmSqT","tlshash":"80a3125e4b769affee8c5c633905029ab0a7fb27488e30bdb08484d9acc1bd553d8551","first_seen":"2025-07-04T20:26:13.144006Z","last_seen":"2026-07-30T21:45:48.933662Z","times_seen":21,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/girl-searching-gifts-for-holidays-online-carefree-GGDCXRK.jpg","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.805Z","timestamp":1785447419805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/girl-searching-gifts-for-holidays-online-carefree-GGDCXRK.jpg HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 118285\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":118285,"size_decoded":118553,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=20, height=3840, bps=254, PhotometricInterpretation=RGB, description=Girl searching gifts for holidays online. Carefree happy redhead female student using smartphone app, laughing joyfully, holdin, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, width=5760], baseline, precision 8, 800x800, components 3","md5":"e601822e5e51e5a34a6fe44af23e49f0","sha1":"9914883032e4c96218857bccb1a44e23bfce7d2b","sha256":"756a1732893d33250823edc429e7972d2947172aa2b24b276d509c2db437526d","sha512":"de8e7ec7f43e0ec30a21a851efc7ca345a2fb64ec1cff8e92245b2fffab6de05aa9117c75a6bf6f9d67bb68ada38f5d72d89d007b7fadbf12155729ada97058c","ssdeep":"3072:jlZKxSRSzLJ/nf3u//kCbnTDPq/JK/1YrFzN:iSRi/f3IHDP+D","tlshash":"bcc3e05175956902e2f92638edfddb82e2e76e94ac7b554a7ecc881c3f52e400cca343","first_seen":"2025-07-04T20:26:13.210772Z","last_seen":"2026-07-30T21:45:48.961466Z","times_seen":21,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/cc1-1-1024x869.png","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.823Z","timestamp":1785447419823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/cc1-1-1024x869.png HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 173347\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":173347,"size_decoded":173614,"mime_type":"image/png","magic":"PNG image data, 1200 x 1018, 8-bit colormap, non-interlaced","md5":"691a6cbe7b986858d21ae6df19669938","sha1":"d64805698a161783a79bc55514fb6706852b5a08","sha256":"b15955a62674caf402274940d48b73c20bba22d1141828e4b0de0cec0a3872fa","sha512":"daff53dac86f071032f75e08fa37982601694aaf865e4ed24669ce1a1d6f86e535d17cd7c4546e7ba0103e57c7e7d172815b0b024bf0a86ecd9a005694ac88e0","ssdeep":"3072:4mTcssjWcv40e3L7RBtYfoUlUwNG1WQd4BD6u5Zgu/3Cd45jrG:4kcssyY406/YQso/d4BX5ZgC3Cd45ja","tlshash":"360422b002397eebd7b5181f4189f364d2e6fb3b248464b2a4d3c9520513ee86f6d639","first_seen":"2026-02-03T21:07:13.316287Z","last_seen":"2026-07-30T21:45:48.962514Z","times_seen":9,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/cc3-1-1024x780.png","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.824Z","timestamp":1785447419824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/cc3-1-1024x780.png HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 263297\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":263297,"size_decoded":263564,"mime_type":"image/png","magic":"PNG image data, 1400 x 1067, 8-bit colormap, non-interlaced","md5":"d4a08d02e57498fa17be97616cecf0c3","sha1":"a9b512bb351decab388250aacb52583f1fafece8","sha256":"ba20945341cb57b27eba8f046c9d521fa2f7f1dcd1fc31dd927f3f2d059c5b90","sha512":"2e119c1e10de92bd2d742cf02c86c8e253ebf89b15381152878a2c0edeea9f7987718852ebc2b698310f5f460741b1ed0c76ea6beb6cdd3d411f3889bc6b59bd","ssdeep":"6144:ldQUbNs8jsPLiXUIZZ6PRO5QmHM1RBxUNRKlJuQyTI5AF:ldkosCT6RuHMZuFzTI2F","tlshash":"514423c59f45db140c938fb89e71e4d70a02ce6826aae878859ff9f81f4e24f5183593","first_seen":"2026-02-03T21:07:13.216194Z","last_seen":"2026-07-30T21:45:48.995997Z","times_seen":9,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/elementor/css/post-47741e741e.css?ver=1707565078","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.212Z","timestamp":1785447419212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/elementor/css/post-47741e741e.css?ver=1707565078 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11965\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":277133,"size_decoded":12275,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5b6b0c805ade0aa15f446b75ba3a773a","sha1":"370cfd4c07a7367d68d649330a8e4e547f06ae9d","sha256":"d891c513a26aa8e8f975660baeba4eff2760b70c9cabedb54342ecc4c03c5b50","sha512":"bbc0225a2ccaa7b7fa7a1edeba6c32fa976b140f5c7124b2fe205eeacd1d723beea3b502e884d68fb0a479a5d4e023d7fd7ae649b1fb6cb6b5ce1a710d69f5a0","ssdeep":"6144:Hk73fHt/W7QfVF8W/LjB/FWChmCwoGXwgQRBpXfp9L:W","tlshash":"3944379c7e53c028b4bf145f6647a5ac242cdcdec82e93f7e8598213a1b6f7a7398501","first_seen":"2025-10-03T14:17:00.904276Z","last_seen":"2026-07-30T21:45:48.920962Z","times_seen":13,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min52d552d5.css?ver=5.15.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.410Z","timestamp":1785447419410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min52d552d5.css?ver=5.15.3 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 318\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1126,"size_decoded":626,"mime_type":"text/css","magic":"ASCII text, with very long lines (940)","md5":"a5e438a2ca7fbba74f5689fc0ffe43f7","sha1":"354609359888b8237c63339277da343598921d62","sha256":"1751d40e31f849a2a1a951417f9be32811ae584d75e2530c7c4864e68d78caae","sha512":"0910740145fa4034346c07ca91f62a21b451f1069621103c8f8209f49b89197bce1813a1686e335163a1f88562e2a382fdddc91e8f0e7e49d1399e17d86f9193","ssdeep":"","tlshash":"23214332043a318471460b4334c26e9a9f484ec57e4a8f6ab12ecdbc4cf9e8a2361f54","first_seen":"2025-10-03T14:17:00.854046Z","last_seen":"2026-07-30T21:45:48.985812Z","times_seen":12,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/jquery/jquery-migrate.min55895589.js?ver=3.4.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.412Z","timestamp":1785447419412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-includes/js/jquery/jquery-migrate.min55895589.js?ver=3.4.1 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":4915,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-31T01:33:19.375659Z","times_seen":913458,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/bb/spop.js","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.417Z","timestamp":1785447419417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/bb/spop.js HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:33:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1203\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3602,"size_decoded":1440,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (637)","md5":"00b810d6a88ba0f07b7a86d448d06356","sha1":"022bb5e83098df20227cc5b860eee1a82216d75b","sha256":"07dae3b6a264e6015266170a77f4aef96a70b56cc420bd8ecedab497bd5eb684","sha512":"95e539edd994557de85fe1c06522941cc2feacb585b1ee6a0aa39e25878cb2075c18074d2674605d63edc977ca68dc64e1bfbe6cec9a19e74cc42b54644a9380","ssdeep":"","tlshash":"7671312d6550137502fb92de7042064ce53ada29be59684eb6f8dfe8d8b2c45b832b34","first_seen":"2025-08-09T18:11:59.66106Z","last_seen":"2026-07-30T21:45:48.959827Z","times_seen":32,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script459e459e.js?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.432Z","timestamp":1785447419432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script459e459e.js?ver=3.0.4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40,"size_decoded":230,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"94d041d462db321cdb888066586f2068","sha1":"717d2f9da7fb9f9e2bf2058a8177a0344f8a8647","sha256":"b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5","sha512":"9a320fbc1dbeda1700f54140f814a285d1cdadf947f927db7e1d70a686d15fc74d69530bd13ab7cf9c3a2009791f2ac8f358cd9f748b1c2995eb9712b68dc574","ssdeep":"","tlshash":"6590041c144cf04505775114543773047733745031411043111d71400c1cd351307404","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-07-30T21:45:48.986597Z","times_seen":29480,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.733Z","timestamp":1785447419733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfsworldpatriotledger.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 05:02:15 GMT\r\nexpires: Fri, 30 Jul 2027 05:02:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 59684\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37744,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-31T01:51:35.119964Z","times_seen":31487,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":17,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontendb179b179.css?ver=1.6.25","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.213Z","timestamp":1785447419213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontendb179b179.css?ver=1.6.25 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7413\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75855,"size_decoded":7722,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1646)","md5":"b46c6c561749d353ded2332c13a5e8eb","sha1":"4c5ad91ccb661a5e48f9c502c06b326878f4f715","sha256":"6f708315ec1e5f14fcf831768764aad338d6507ac1e5f11c155c820487052544","sha512":"5d78f15b8df7df985c5a5a9cfffba6a9862d77d12aa37497042cffa33cd33ee6db9d0e7edcf122a131168d04f92d9e0e5614d4b50aef4c7e5d6d773541f893a5","ssdeep":"768:22+Rm5ukW6EdVBSs+QXLjBnTGpIq5pbTpqzGI5eFV/ftc/yorXzFSSBlzfSKVn/J:22+Rm5ufoqDr1GL2","tlshash":"e173c8c61dc229749a16681ea2ee93a457b60043cf34adac37ed811ccf82741b7f6b57","first_seen":"2024-02-13T08:59:30Z","last_seen":"2026-07-30T21:45:48.996819Z","times_seen":1058,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles459e459e.css?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.224Z","timestamp":1785447419224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles459e459e.css?ver=3.0.4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 47178\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":445846,"size_decoded":47488,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4a17cdf1b8097197772d73b579ffb7bd","sha1":"7294f938bb2fdf646f89d9f5bea89bd5150eae30","sha256":"4535afae18f870ab2653e557e8e4140a4665f489c8403c26ff2745afa9cdddba","sha512":"4715faec4d60907f54a9408c4cbcda1f7c2fe9b11cc3c1f46a7f3856948934ffaa81d719f9317dc85eddbefce68a6704bc7e4b9c48171b2a1af0d10a00a65a34","ssdeep":"3072:TLBCqgV5wO0Br9fOVfjhWpGphoGguTfefH:TLBCx5wO0BJfOVfjhWpGphoGgyfefH","tlshash":"489464526c923248513f8e1f93dd9a5c1728c193e4630ddeb6c26c1bc74aebd72ea607","first_seen":"2025-10-03T14:17:00.883768Z","last_seen":"2026-07-30T21:45:48.971329Z","times_seen":12,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d5.css?ver=5.15.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.408Z","timestamp":1785447419408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d5.css?ver=5.15.3 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 316\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1120,"size_decoded":624,"mime_type":"text/css","magic":"ASCII text, with very long lines (934)","md5":"1f57a3300b7596622d0f1ef655e05a29","sha1":"20cc5789795cc64a2f41cd3973affebd0ee489c5","sha256":"263aa23a26042590f47bf1565c0b656bac926b23be75f879e855671cf642de7c","sha512":"75a8c4355ffbe80c802571d0c6e53ba47ac87e500781e35b380b8fef82b9b999264445d5120f8ea8470aed036f4bf6e0a57b294b2b1808074ab44e377605ff2b","ssdeep":"","tlshash":"4221603b043a368030991a4334d2ae9a9f446ec57f454f36b12ddcbc8ce5e5a7361f54","first_seen":"2025-10-03T14:17:00.869198Z","last_seen":"2026-07-30T21:45:48.938289Z","times_seen":12,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/js/owl.carousel.min77e677e6.js?ver=2.2.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.439Z","timestamp":1785447419439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/gum-elementor-addon/js/owl.carousel.min77e677e6.js?ver=2.2.1 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10649\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42766,"size_decoded":10887,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32000)","md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-31T00:57:03.128083Z","times_seen":20365,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.735Z","timestamp":1785447419735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfsworldpatriotledger.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 05:02:15 GMT\r\nexpires: Fri, 30 Jul 2027 05:02:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 59684\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37744,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-31T01:51:35.119964Z","times_seen":31487,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":21,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/src/qfsvideo.mp4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.803Z","timestamp":1785447419803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /src/qfsvideo.mp4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-powered-by: PHP/8.2.32\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T01:31:10.741284Z","times_seen":17625700,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:37:06.784Z","timestamp":1785447426784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qfsworldpatriotledger.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 05:02:15 GMT\r\nexpires: Fri, 30 Jul 2027 05:02:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 59691\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37744,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-31T01:51:35.119964Z","times_seen":31487,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min48f548f5.css?ver=5.3.6","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.207Z","timestamp":1785447419207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min48f548f5.css?ver=5.3.6 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2179\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12876,"size_decoded":2488,"mime_type":"text/css","magic":"ASCII text, with very long lines (12876), with no line terminators","md5":"bcad7781b3e74db2565b8424c45232cd","sha1":"41b0d94434ef667897c06e1184b703064ffceda1","sha256":"d622534d53d3ac1095af275f0b30274fcd835785577df2dde6d9398e6f7a2c8f","sha512":"8bf688ad357079c992136d62ad437795165f22ea1f23919611fcb756d1975d34fe2272819cfcb6b16aa79980997149f253c20334f8ab7bf133e3c91b3f9e98b7","ssdeep":"96:E/RM439EyyCqLCi5BQ6i4CPIrf6OTpOuwIoLgIZqxydn6YFwQ2gGhsxtUIf/6Mie:E/Rh9EyiCPIrf6DuLWgEn6Y2BgGhsxNZ","tlshash":"5d4222102b42343bb33a4fae54a1eab95721ddc38a9309dfe690de54d3f9474231e6e4","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-07-31T01:58:25.988607Z","times_seen":18851,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/elementor/css/post-366446644.css?ver=1707565075","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.209Z","timestamp":1785447419209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/elementor/css/post-366446644.css?ver=1707565075 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1383\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14398,"size_decoded":1692,"mime_type":"text/css","magic":"ASCII text, with very long lines (14398), with no line terminators","md5":"0324518db4b63236de87077b1c051d23","sha1":"299823012ca04c377902c512316699ee65e75e7a","sha256":"e206c5b51599e975c46d927063722cbc262625fce84d4247f1806a75e3e81375","sha512":"f9e02f680f7c1b841b833ef9c9b74c396fc5e58a806d5d508e75db52eb59f9d312d6029244746373b2af67b7899b25370c6ca615c4770e4b82d744cd35746314","ssdeep":"192:EfY8MTDxDzMNpY5MlR6BbePIV83hns3iEODmmUwns3iE6KREnmzIDlcRvencRv7:Lj5oTtc4lJ8","tlshash":"085292997b61d025f4b7482faacbe5bc182cd46b085fc4ffe54d8315a1abb2f921c205","first_seen":"2025-10-03T14:17:00.908147Z","last_seen":"2026-07-30T21:45:48.920095Z","times_seen":17,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min39583958.js?ver=0.2.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.442Z","timestamp":1785447419442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min39583958.js?ver=0.2.1 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 677\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1801,"size_decoded":913,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1801), with no line terminators","md5":"4d43b2fcb5ef3e6afdcd539f46148514","sha1":"0ff4d5160beb004c439b20c6343044917c629d10","sha256":"9aa9bb8be2b834059533ce5de7eed3a662ad3d3e70643bbe5f75265075e9bd28","sha512":"00a0c46b067c1609d996bd438d6ef3342a6cdd6323fc8b8c4853cf4a8c2ff983b98e77545ab3b16ba2a8d0e58a2d35ec77b5765ba172f6532b8000239f06e396","ssdeep":"","tlshash":"9031e1187181b22dc66354b1c10b53099232ac751532a168b87dd8e6bc68ecc6677ff7","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-07-31T01:13:44.594561Z","times_seen":24914,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/cheerful-friendly-asian-female-blond-hairstyle-wea-GNF7LX2.jpg","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.504Z","timestamp":1785447419504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/cheerful-friendly-asian-female-blond-hairstyle-wea-GNF7LX2.jpg HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 96755\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96755,"size_decoded":97022,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=4000, bps=206, PhotometricInterpretation=RGB, description=Cheerful friendly asian female blond hairstyle wear striped summer t-shirt glasses, pointing right showing you cool place smili, orientation=upper-left, width=7955], progressive, precision 8, 800x800, components 3","md5":"44b92fa4065ef6af11366568b9076b84","sha1":"a31318042ee435baa12cb0396a7c2fe3344d510b","sha256":"b30e74de8c198bfb1f6c1f82fc839ba41530ee2e5d8254bfc09a915b95d15a7a","sha512":"b03751bdc2a43050e4c0b01a2bcb65e380f977476729939193b8c39960c9b8a6fd21035ff00f5a424311b88cf46e441232b1459952d5dc4f5170c9089462e9db","ssdeep":"1536:3vX/MX/ARe2sRrjgskcLYslTx/C2Cjf/o1BCz3Ye0nkowLoNReKvVsXX:3P/O/6sZjgsJYshxKRT/o+cnyLo3eyVA","tlshash":"5e93cf2966a45c06f6e93a38d4fed684ebb76cd14e73818e3add98003f316846cd4397","first_seen":"2025-07-04T20:26:13.139566Z","last_seen":"2026-07-30T21:45:48.915103Z","times_seen":21,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/css/frontend.min34a734a7.css?ver=3.19.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.205Z","timestamp":1785447419205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/css/frontend.min34a734a7.css?ver=3.19.2 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19085\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":172998,"size_decoded":19395,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"d7c14ce0abea2ce0bed19d0e7c6029db","sha1":"79e2c6c03a19702e718c00bbea08d1bada4e8ec3","sha256":"d4a644fce45ef551d24567df9deba08f2e35ade606e4fa17aaefcaceb77094a5","sha512":"7ec5603ab9589bfa3fedec0f6b1122e4c1a94a237ef66f2a1657e0eb449b91029556662ff7a35e60a0a8c1d1fb0a0d74592b09a4e7a23d67198087e296a15555","ssdeep":"1536:wuTtQxWqn/snSla6T8L47YwbuXhW+kZfQLuJZ:wz+kL","tlshash":"11f343923d17511a272f5a2f4a87764c62a445c4ee83bad5f882d403d2fede53b32c36","first_seen":"2024-02-08T02:10:11Z","last_seen":"2026-07-30T21:45:48.903836Z","times_seen":335,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/js/jquery.superslides51525152.js?ver=1.0","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.437Z","timestamp":1785447419437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/gum-elementor-addon/js/jquery.superslides51525152.js?ver=1.0 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3555\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15579,"size_decoded":3792,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"1da4e50940e31c2661972400ff477985","sha1":"7059704faf2455cdc860ee2544acfd3e33221b59","sha256":"ee446fea39ccdf2d494c55c142e746153f1147c68f74834cd48ef2e6d8bba951","sha512":"3138f006134b09dc3f053f74476a8e9a86f9e43aa452fe6b143527d4adc88cd5f70a56836e14c9c4bbffec284f6735571776d070eefee463c8206b46df72a54e","ssdeep":"192:5SjUaoFC2TJmrunsjRL9iZL53LeP1cVrakio7V1KMgheaapESKdrJXk7zGisbZDv:MAjU2OuMhOL5cscThfdr7ZDJNamqM","tlshash":"e262aa996afa2511d167307a4ebf840c6179802f6d0ddf2c3dec62d41f84128a77bbe6","first_seen":"2023-11-20T11:10:14Z","last_seen":"2026-07-30T21:45:48.987421Z","times_seen":741,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/assets/upload/logo/favicon.png","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:37:00.493Z","timestamp":1785447420493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/assets/upload/logo/favicon.png HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:37:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 07:34:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3378\r\ndate: Thu, 30 Jul 2026 21:37:00 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3378,"size_decoded":3643,"mime_type":"image/png","magic":"PNG image data, 48 x 85, 8-bit/color RGBA, non-interlaced","md5":"f01e50e63da858e0de7f119dedaf21b4","sha1":"4fa73688351245d29879a2826f7a46e5c3418410","sha256":"527e9699d331e11a09c9062a0743fdc3721000109e8b24e0809b1184612af6df","sha512":"c5288c7a5836259fd232254e19a3c3e2e756961838d8e126902e3fdf5c0b2e60ce6b185be2e416ae225c52a54f885b0b7e6738cf7ef8261d46e61666ccd92987","ssdeep":"","tlshash":"dc616b4134728ed6a6dc66b794028b54e62f9c8a334a6cd82c70173a57d831d1fa3fa6","first_seen":"2025-10-03T14:17:00.872789Z","last_seen":"2026-07-30T21:45:48.931617Z","times_seen":15,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/themes/hello-elementor/theme.min41fe41fe.css?ver=3.0.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.220Z","timestamp":1785447419220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/themes/hello-elementor/theme.min41fe41fe.css?ver=3.0.1 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1145\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5131,"size_decoded":1454,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5127), with no line terminators","md5":"08fae0e9f8ce7e1cc244d6957a0fc71c","sha1":"958fbf4f8b318e39612dd25eefae43c006769883","sha256":"30c2e510f9fac929eeab0ea915d80904a4e72b22eb8612dd8c83c7dfb71862e0","sha512":"e8f69bb51f6caf9ab132b1be8f6ee3248c80dd74e47823c17ce4c1a14b289bdb2c2ac19035309724e3f8f53a2647b3204f8dc83ae85081e9069275fcac7ae4e3","ssdeep":"96:5ElyBGxT+vAeTzwKbFudzJGW3tCgcMNl3MNM1MNIXMNd8MN7zMNbKD:5ZBGmTNbch8KCgR5A","tlshash":"76b1757ef8d1307c593f9b06fac65b8d2068871ad3530ae9eb99db1a819e710781334d","first_seen":"2023-12-28T03:57:54Z","last_seen":"2026-07-30T21:45:48.976819Z","times_seen":4863,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/mediaelement/wp-mediaelement.min84fc84fc.js?ver=6.4.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.446Z","timestamp":1785447419446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-includes/js/mediaelement/wp-mediaelement.min84fc84fc.js?ver=6.4.3 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 453\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1107,"size_decoded":689,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1107), with no line terminators","md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-07-31T00:14:12.843018Z","times_seen":52962,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/bb/js/popper.min.js","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.462Z","timestamp":1785447419462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/bb/js/popper.min.js HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:33:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7223\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21257,"size_decoded":7460,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21084)","md5":"84415b7368fd6fc764cbe86039ce0626","sha1":"62f238e73348c77eb9e865426a7d1b7de23cbb2d","sha256":"c776195ad46333c6c9a9fe3c74502ffea9a02faf122388ea3567922cc65a3060","sha512":"8423f7a626064813ea9d7ca974ac4a3d23b304717be6853cc10f356ba3a21971c531e2acf7ff0285b81897ba54bf02265c96f4dcde1bb35a350f399ba2479e17","ssdeep":"384:knMQG5rwVO7dV9nNbRGCB9D45Hkn5vj2xpOxvIAgD75zBi5vISg3gzopL9TidOg3:P5sg7X/jD45eSxpOxvKD73i5vTzwL9Ti","tlshash":"c8a2b3cc3294b06643a791a7a0bf960eb2339875610e9410f199f2d97c30ef9917fd79","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-07-30T21:51:07.662469Z","times_seen":15691,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/Credit-Card-Mockup-Vol-41.jpg","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.685Z","timestamp":1785447419685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/Credit-Card-Mockup-Vol-41.jpg HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/elementor/css/post-47741e741e.css?ver=1707565078\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 85800\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":85800,"size_decoded":86067,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", progressive, precision 8, 766x857, components 3","md5":"53a24e93a1d0acf7d1e76fec52e2a529","sha1":"44caaffa44869ff62189e035a45e7b3c1faf2799","sha256":"887bd36ec8a54f1580e12095c6dce281b205dfd010d109f6e28eeb2a0ed082b8","sha512":"cf91bffbd808612b3e32528cc470e32ece54b74c812522ccb8d7202f5ef88eb65223f332a3f3e3dc516ecb35560509fb2043b822d151de4a371446976a8a7de7","ssdeep":"1536:s50RhPy8bHkLiYCIEa1Zwj9xokjjwImw6NnY2TIKiyTlkxlkU6C5x8u38I:s2rP5jkecPzwBHEhG6QaLy8I","tlshash":"a483129fe2c7ef8df7e25173242572d3501c1d28ea9fe00a752dd91286ae08726354fa","first_seen":"2026-02-03T21:07:13.223031Z","last_seen":"2026-07-30T21:45:48.984133Z","times_seen":9,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/icon2_3.png","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.826Z","timestamp":1785447419826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/icon2_3.png HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74202\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74202,"size_decoded":74468,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"4653ff053c5823c6a15556a2ec4fc195","sha1":"a93eb67c8a805701286b22bc8cbda9f3483b85af","sha256":"03ec303bda49a4d157a42ca9ef58df5ec1d17e07183ffa4089b927bcc62773fb","sha512":"c6778539f94cd1ac322abc478e7e29d21e4a5ebe40d6d2ddc4b960959c72b3241cdd7f16236f3cd8f76a8f2b047936eae41aaebc22c70d4afafba84e1885fcd8","ssdeep":"1536:+chuHDzAp13Y3WhmKXjaeYBRxLmBvNeKwIWDH8Bm/DSSukKlIt30Sr:hu4n32cnm5Br67eBIWikcCP","tlshash":"c673f1cd982a5ef0d4994833d426ff8db6e58c21b039611732f1f0d5de99a43a7a3389","first_seen":"2025-07-04T20:26:13.166224Z","last_seen":"2026-07-30T21:45:48.963951Z","times_seen":20,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"askproject.net/deroly/wp-content/plugins/elementor/assets/js/image-carousel.4455c6362492d9067512.bundle.min.js","fqdn":"askproject.net","domain":"askproject.net","tld":"net"},"ip":{"addr":"103.250.10.252","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:37:00.051Z","timestamp":1785447420051,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"askproject.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 22:28:16 GMT","end":"Fri, 31 Jul 2026 22:28:15 GMT"},"fingerprint":{"sha1":"D0:4B:39:71:70:AD:29:E5:44:39:A2:38:2A:B2:0B:93:84:34:72:CE","sha256":"39:44:55:4A:89:E4:50:1F:49:33:B4:A2:58:54:65:22:D7:9F:E3:8F:0D:C4:7B:ED:64:D3:BB:87:78:F2:A0:44"}}},"request":{"raw":"GET /deroly/wp-content/plugins/elementor/assets/js/image-carousel.4455c6362492d9067512.bundle.min.js HTTP/1.1\r\nHost: askproject.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Thu, 30 Jul 2026 21:37:00 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Length: 277\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T01:31:10.741284Z","times_seen":17625700,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/elementor/css/globaldfd6dfd6.css?ver=1707565077","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.210Z","timestamp":1785447419210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/elementor/css/globaldfd6dfd6.css?ver=1707565077 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1740\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40373,"size_decoded":2049,"mime_type":"text/css","magic":"ASCII text, with very long lines (12111)","md5":"1895eb5498b2744ae27246a97abb2050","sha1":"fabec0f74b9155fbf46758f581e45884a4e5aa95","sha256":"ff59e525027dd31f45521be4ebd4cdabda66a144528e583c20fe747acab7f9fb","sha512":"7104b5427aa95351679724da7e6e4227520f267b90750f1f5cf276c2fbd6d7316915db2f4015e971a18ca9fe9fda0f6c81718e5be083b676f7bef0a8fb1b8891","ssdeep":"192:CL4BJW/ns3iEJ7JdPypJtOTHWRkXNW7t7Dd1r1ns3iEh6ItteMPrIRBLcD0dR6H/:YbRDFn2DD03dyDD03do","tlshash":"9703b99c7a22d021f477042f768ff438282cd4da9d1bc9fbf59d931591ebb2a6728214","first_seen":"2025-10-03T14:17:00.845564Z","last_seen":"2026-07-30T21:45:48.975215Z","times_seen":19,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/elementor/css/post-446741e741e.css?ver=1707565078","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.216Z","timestamp":1785447419216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/elementor/css/post-446741e741e.css?ver=1707565078 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1912\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23351,"size_decoded":2221,"mime_type":"text/css","magic":"ASCII text, with very long lines (16159)","md5":"9782f8aa12192d12d43d1f9f85b202ae","sha1":"f27768303032c174f51a9ecc98235f5904388069","sha256":"2d3ca1f3e4129d1457912834753e1774deda51749c2365c462a3e23c800d38e5","sha512":"d2a7ba9cd655a7a007668a3ca911cb5a2caf3f7c8775a4005b64ad71f0d8120aad1347684c21db58062e94a30873fc08d1781017985cea51da5f6222dda70367","ssdeep":"384:aEwgND/8F8U0O/ITUlOTRsTpTNTTTlT9T5uTpuTruThuT9T3TCZTZkTgTJsXXpT3:3k95HRJ5ApArAhAJDCNZeiJsXX9J+X9q","tlshash":"9ba246883d03a228f56f240f5187e5dc25245ceed96d73e2f8b65263e8b9da337d4901","first_seen":"2025-10-03T14:17:00.851964Z","last_seen":"2026-07-30T21:45:48.985022Z","times_seen":18,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=DM+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=6.4.3","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.405Z","timestamp":1785447419405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=DM+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=6.4.3 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 30 Jul 2026 21:36:59 GMT\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15219,"size_decoded":1355,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c6a440ba26c0d356709455dde0ca8a1a","sha1":"b67aa858a41674ab7998957bdf0d278bb479da38","sha256":"82a9263833397ff317c1a0f1351fb26b95de083c9ba99adf4ee155a4ef8f94ba","sha512":"f71543b2d6c1574d7065e6f6c103b405690a3d6383928f7bea4af3c5fea6e79cb7621da6c703b3e7e529d6a30e64a15f27f37e453486ce45e9e74828ba191108","ssdeep":"192:M37QV37kiQViklQVlkkQVkkPQVPk2QV2kpQVpkIQVIkTQVTh7wY7+Awz+rwo+2wj:M3s3odxGevXYMZ1iSL7kNhKAyoO4qwu3","tlshash":"3b62dd81083ba154a7932dc422de7d32ef1fa19464456c64affe2888fca6c7e537274c","first_seen":"2025-09-12T01:11:16.406993Z","last_seen":"2026-07-30T21:45:48.905877Z","times_seen":306,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/storage/app/public/logos/TvjVBamCdzflThluO45QBfnCu8uSbdL3Idjg8K7P.png","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.420Z","timestamp":1785447419420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /storage/app/public/logos/TvjVBamCdzflThluO45QBfnCu8uSbdL3Idjg8K7P.png HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 25 Jul 2025 20:22:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63770\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63770,"size_decoded":64036,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"1cb75e5561394a61e9ea1700b5123642","sha1":"704338a3387c7b51025e30cfad63eee777afc1a1","sha256":"6aa923a64c8c070b4e131b9e830d8981a81a24c4b98b2afa0870c4a573d08457","sha512":"440f62dd0984cf23e6851891eca376fa6e9288cf211cabe867950c857c8daf03461eddcb61c1ef4ebf31c439195b78709c5fbd11c53e84a57712ee1d2c0469f5","ssdeep":"1536:/KSJUIh8KkPYJnlTvdJNh17yFm1fPLsptde0xCdj7fqF+:rZ2cdJNh17yMPsUt97K+","tlshash":"6b5301eaebcecb4ac1600357c7ee5547906f77fd027d63c9bc9921c600a2d2658a6dc8","first_seen":"2026-07-30T21:13:44.762309Z","last_seen":"2026-07-30T21:45:48.964863Z","times_seen":6,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/header-footer-elementor/inc/js/frontendb179b179.js?ver=1.6.25","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.450Z","timestamp":1785447419450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/header-footer-elementor/inc/js/frontendb179b179.js?ver=1.6.25 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3645\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27750,"size_decoded":3882,"mime_type":"text/javascript","magic":"ASCII text","md5":"cf77399f3133c7aabd02adffdb64f9ca","sha1":"28e9739756898a8410e2d818832bf761714e23ba","sha256":"7df5bb108fb45ffd903b10fa15e2c7b9b869898bce89408d06609b8e2441bd30","sha512":"437a75b624486947dc06e17920baf71efeec43e305326733b12b43b23c43b49ec6cf5876e8715bc227c348d72798a496d38a22ea71ed93f8f799410b3894d5d3","ssdeep":"192:ejUnO66U3rNBqnnahhnPnlLoOaTWsIsujsTrA1QUvxe6dTkLLxJEvkerJ8OlXgRB:t0ixvlLNbU2TgxdWNQvQo+iT","tlshash":"72c231c577ae1033507f3a8ea517e0ac732f84b2c51514adfeb885ad29e490833e6d76","first_seen":"2023-05-12T14:34:21Z","last_seen":"2026-07-30T23:19:17.766743Z","times_seen":1941,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/js/frontend-modules.min34a734a7.js?ver=3.19.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.453Z","timestamp":1785447419453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/js/frontend-modules.min34a734a7.js?ver=3.19.2 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16458\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60173,"size_decoded":16696,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60132)","md5":"a8e3a5250c3572e5a61534fee10df709","sha1":"0aa3fe5100694f74d0e7d99580f88685fda26631","sha256":"bfbd80809e8f863fa4c57fee859cfb30ed989cb6d521928a73586ed1055e6ffe","sha512":"5eb69c5e2498c26fe366b40a84398f29b2bb44c49cd6db265d276c1ae71764a4b26ee5b7b3d9f5c5a768e30fea17fba68da42d2935cc7e1000444b74935ec21e","ssdeep":"1536:leAjA679C+QRCHXC4WHqMPB8Vx8WXwCDcYNIekHeBHmjkfzRNE4cR8+SxpcxID1x:JdeVW/Clkbx","tlshash":"5443eb863251b4e70bef40eb602b450af32319e4740eb1987ab8ddf66470d5a237b739","first_seen":"2024-02-08T08:47:03Z","last_seen":"2026-07-30T21:45:48.973131Z","times_seen":1464,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/jquery/ui/core.min3f143f14.js?ver=1.13.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.454Z","timestamp":1785447419454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-includes/js/jquery/ui/core.min3f143f14.js?ver=1.13.2 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6801\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21438,"size_decoded":7038,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-31T01:48:46.756509Z","times_seen":45576,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min36c736c7.js?ver=1.8.6.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.464Z","timestamp":1785447419464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min36c736c7.js?ver=1.8.6.4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 342\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":771,"size_decoded":578,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (771), with no line terminators","md5":"2399ef783701f73c399589ae95298b0f","sha1":"3e1f2a7ac9dcb2b50b1f1cf768441e46fd9f62ee","sha256":"2dea57483641f8762937dfd9b09126a9b21c88bd3d7486186003e0bbb9043145","sha512":"50f1c2b16c8c2fc62c504a33529dcef3fdbdd1533206c8779772cbba1a336c7c5bbb533a35f99e559aded3d1bf0c858c10a04ec083969f47a29deac92e366fa1","ssdeep":"","tlshash":"3901bd34b437beda1c6f122414af138fb266d4b3b2069c91972095b41e71dca634bf88","first_seen":"2023-03-12T15:10:15Z","last_seen":"2026-07-30T21:45:48.911426Z","times_seen":10511,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons459e459e.css?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.223Z","timestamp":1785447419223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons459e459e.css?ver=3.0.4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11792\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":124928,"size_decoded":12102,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"93e05f729d42d0a37036c45e9246f5ec","sha1":"4b293f4415340fa021ed1bb4204cadd7eed83a4e","sha256":"b5d6f91c845ca36f441e3a44e0e693bfc5463105a9c1bad0226c86abfdfc42df","sha512":"60d47498595f53e29d4cdc13343d1e2988af3b0abdc60c459b60ef1944d8a3dc96f38ba54c3ef986e883d72e459d1d0ca03ddbfc0561e0c8eeccefa885f1e362","ssdeep":"768:mKEgCSYRb1sJrre8pg0jSXgxH1qzCj8NIgb6MpedmxSAhVejh+duFk:mKEgCh2Sm1qzCj8NcLAhVe6uFk","tlshash":"fcc330d4cc4d6ac1ab78c80f4324b609dd5076e29de24c27f4af8d4d0bfaabc64e1656","first_seen":"2025-10-03T14:17:00.861785Z","last_seen":"2026-07-30T21:45:48.99171Z","times_seen":12,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/css/odometer-theme-default459e459e.css?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.426Z","timestamp":1785447419426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/css/odometer-theme-default459e459e.css?ver=3.0.4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 368\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2802,"size_decoded":676,"mime_type":"text/css","magic":"ASCII text, with very long lines (2802), with no line terminators","md5":"ed949c28da77f28cd9dae2bab5debec4","sha1":"b42ba3e1bc9ca68c4d5aeac9c136ee5bc4eabd20","sha256":"412aab0225a10570ea34f0152b5383095d329976d4849a27cf03014a8e76afaf","sha512":"3ff62fa3323f5f0e44bd71afacbf7425fec9822f3eb18d2662b0b84506a904906543c088f96aef2916f425d4390748da9373af98d9442f469e57c1c3851813aa","ssdeep":"","tlshash":"d05105198f91136863327502bac81660fffce8415223e68d635da54bcf97d79e388b0b","first_seen":"2023-04-07T18:44:24Z","last_seen":"2026-07-30T21:45:48.908822Z","times_seen":877,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min459e459e.js?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.457Z","timestamp":1785447419457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min459e459e.js?ver=3.0.4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 393\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":681,"size_decoded":629,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (681), with no line terminators","md5":"f5945db2f3337fd9f1cbef5b07b2a493","sha1":"8a11439d56af9fb27836bb5f2a30aeb35b93bb5a","sha256":"a8642bcd147ba3528345f5bd17f788cd524931e093255b2c1c8344677a1ab505","sha512":"ddfae8040510dca2e41c5f745b2ec8e349053a02409c41cbc3cbf8df1561b7c586f93090974ee6821fc27e19aba68cc6c95fabe9d9321934fb185d20a8da7a12","ssdeep":"","tlshash":"e30128b72f100835527d0a22f35d7708637100c0a60359596c58592d117ccbbd57a7ff","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-07-30T21:45:48.923554Z","times_seen":26487,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor459e459e.js?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.458Z","timestamp":1785447419458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor459e459e.js?ver=3.0.4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5027\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18593,"size_decoded":5264,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18593), with no line terminators","md5":"ce634c6621026e8fb98418ce432c4b75","sha1":"40a1a488094b4569c3a903eb043ecda0d6bf929e","sha256":"d22a8ce5b62f7de94c4183b2528d1bc7d6b220be97b72d04c7aea220e273d58f","sha512":"985c80c03cc6b2ac537a15abb722631ec5627e12630689c329d9e27de28b5594ff14a67b338d1b81d6e27c1518e729103015d773062aaa99dda0fe04f3bcca1c","ssdeep":"384:FsCB6KbopzQALBEwGBM8/IfE4AoCifSM2JemNUeirDB5evnmc1mtgGMRgGLY1yvU:FsCB6KbopzT2Y8/IfE4AoCifSM2JemNY","tlshash":"fc829455b25120e201ff64ab539f620f72b3287ae5074060f1b7427a4ffdd8935aaf1a","first_seen":"2023-11-08T16:54:56Z","last_seen":"2026-07-30T21:45:48.91422Z","times_seen":1547,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/receptionist-returning-credit-card-7ZNNYHL-1024x683.jpg","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.507Z","timestamp":1785447419507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/receptionist-returning-credit-card-7ZNNYHL-1024x683.jpg HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63604\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63604,"size_decoded":63871,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1024x683, components 3","md5":"82ece07c3518588deaab9854e3116504","sha1":"f1d006692a4f769771ebcc39bc07e870f2a296b0","sha256":"d3fe354adae62e9a1e2a4349f37b47e01aa5bfbf86e9616788af952cf1e751af","sha512":"807c5e51c8c212c4c87987354dbd9fbdbb42153101d44e6738299efa8b2b8105cdc19efd867a7360ea48aa4f060946b4f4b5817c41c3e43dde68d7f5c6329df8","ssdeep":"1536:ifI3ssdOUHEkm178TVqwi5SZWfEVTYQDub76:P8sdtEkiLoRTYcub76","tlshash":"ab53e19b901daadae9649ff97f930eac66581208f4547efb00f21f063b522461c1d07e","first_seen":"2025-07-04T20:26:13.15631Z","last_seen":"2026-07-30T21:45:48.940138Z","times_seen":21,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bobble.ai/images/download-latest-apk/android-download.png","fqdn":"www.bobble.ai","domain":"bobble.ai","tld":"ai"},"ip":{"addr":"34.160.147.82","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.510Z","timestamp":1785447419510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bobble.ai","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Sat, 14 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:73:60:0A:CF:51:5D:58:C8:C3:54:E1:89:2E:5E:83:BB:1B:86:B7","sha256":"9D:53:72:CA:58:6B:10:7D:99:63:A3:4D:46:70:77:8E:AC:40:23:5E:41:6E:C1:0E:39:1B:57:3D:C4:8C:06:50"}}},"request":{"raw":"GET /images/download-latest-apk/android-download.png HTTP/1.1\r\nHost: www.bobble.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 24383\r\ncache-control: public, max-age=155520000, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Fri, 17 Jul 2026 15:34:20 GMT\r\netag: W/\"5f3f-19f70b6e00e\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":24383,"size_decoded":24732,"mime_type":"image/png","magic":"PNG image data, 928 x 264, 8-bit colormap, non-interlaced","md5":"fe51ad8162ac78042b7765dfb8f494ee","sha1":"e02c3b0fe8b346b8ae5e88254506a8bffbcffe7f","sha256":"37e8a877f57b769440078458276cf0821e2300899e1882c98e0ff92ef1ba6d80","sha512":"5a0713980405cc8fdad3590aeaaf22a375c7c7668a6cd9f415b21745c4faf6a8a0dd7cbc0755d60de4208f56f4232d8c7042210c9b367fb25b061e519b70df38","ssdeep":"384:p71Tr1IITIT/gb4wom5XzRW1yYWjzTDNXdo7yPaPPejmL42fIXWhbU3:FvIUoG44XzkvWnToXKmL4MImhbU3","tlshash":"f6b2e0b45670fe0d83a8470fb29f7a9d83c265049a2c2d73d79eb263a27c9d1e42c851","first_seen":"2025-09-07T18:44:30.206183Z","last_seen":"2026-07-30T21:45:48.965987Z","times_seen":12,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":386,"receive":137,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/deroly/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/fonts/elementskit.woff","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.734Z","timestamp":1785447419734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/deroly/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/fonts/elementskit.woff HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons459e459e.css?ver=3.0.4\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 23 Apr 2025 23:44:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 459560\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":459560,"size_decoded":459827,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 459560, version 1.0","md5":"35d9d8d17344729e636b122ef44b7e1b","sha1":"2302c9d38e2fb3b64f0f4e64152a6b23ab6f8149","sha256":"edb1e4c879a22b1b413be44cb521a8f20fcc40e9ca1aa50c1c38cd45868de369","sha512":"34571a19e9eb0e902c2fd57806e09c242057249aa4dc794b89643884caf8cba48dd45cc82f9aebe4b6938248984e18187b86d9fcbe949718c69ccbda99b7ebf7","ssdeep":"12288:hl/hVTvxzj6uZieIDZt7Ox36wGyuazRQq/hVrs8VlF5lyCw7jjWQ:rICtJly0Q","tlshash":"5aa47c2be3d7cf6ec41698bb1d06a2724cf6d631823fe286be895c11d1098f84d7865d","first_seen":"2024-10-27T21:49:12.853634Z","last_seen":"2026-07-30T21:45:48.917412Z","times_seen":6148,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/award_Asset-6.png","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.821Z","timestamp":1785447419821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/award_Asset-6.png HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25609\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25609,"size_decoded":25875,"mime_type":"image/png","magic":"PNG image data, 484 x 448, 8-bit/color RGBA, non-interlaced","md5":"66e1d0f6acb84afb79e7851157282d07","sha1":"84f259521a155722b8057c82e9da68b63d0ab924","sha256":"910b580c3ea2ce2c4775a67e5b67f927771ae2ac5742d20e2a3758e036e55ab5","sha512":"81f05c49696b3e0cd105f9e961c28a48f6cd46599e93ff900cdee0daf630f5346e379fe5b5bb8a93b0e656869b30fcd76da553a771bb9032bd72ee473670f6e0","ssdeep":"768:xCu+m8JkCGtuePq/AsMi+hmvsOrc88FI3P/S8G1D2D:xCup8fD9d+ho64o1u","tlshash":"94b2e01c38a8163f239f3547b673f9e6f4e774e3529ae1c8ca742e1569910cf7981206","first_seen":"2025-07-04T20:26:13.212326Z","last_seen":"2026-07-30T21:45:48.941746Z","times_seen":21,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/css/style84fc84fc.css?ver=6.4.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.197Z","timestamp":1785447419197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/gum-elementor-addon/css/style84fc84fc.css?ver=6.4.3 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6896\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53420,"size_decoded":7383,"mime_type":"text/css","magic":"ASCII text, with very long lines (776), with CRLF line terminators","md5":"8e5239d7903b75d955e5bd49fce79ed9","sha1":"6877ff52d2604d73c27e99126f27a10cb6090a87","sha256":"912c03fbc608b221f8290efb78fa203c4fb4613712964ef921ec99e6a6293ade","sha512":"161d203042d81cd3a4308854f559df3592cfce6cd35e7c613f6a9819decd446aaad19a8f666749e958498815366c7091af9a020c2f31c0cb2e6f33eef4502e0c","ssdeep":"768:c/1kO7p60qFRff1wnvKchf9T29Qhz0KNOcOMVmY:c/Dp6fpf1wnvKy9T29Qhv","tlshash":"083342657e231014532f561ff7db079c1e78d2d2a31198ecf6c550078f9be8a23a6ab2","first_seen":"2024-02-27T06:27:32Z","last_seen":"2026-07-30T21:45:48.935612Z","times_seen":23,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min50c350c3.css?ver=5.27.0","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.204Z","timestamp":1785447419204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min50c350c3.css?ver=5.27.0 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3731\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20031,"size_decoded":4040,"mime_type":"text/css","magic":"ASCII text, with very long lines (19985)","md5":"92510ced6e579dd598ddb9fab269f0d6","sha1":"cf63f9ba06712bdd8f7070f35a17edc83dfc59a0","sha256":"1ecedc61634b5e2e84c7737283228bb318f57210df8fa6e946918ada9760cc7d","sha512":"98dd447e460050a19b403aa0b2f6bf1e1b90fb29ca501385b0d24a4c911af20a237e9f87c7fa423d02391c7138f8daad5e803ad86fa82bc64058c692d42f15e9","ssdeep":"192:u3W877iN3iCOy2bvGIdp8khugk8/H6qiMs7HqnFTSZq7RXDlCdkgIR:uv7iNyqEpXk8/aq8uFucbrgIR","tlshash":"1192ecf4e42923c87b32c403e344f64c64d9f921dac99d59fa6f850c5ee16a31286fb8","first_seen":"2025-10-03T14:17:00.867336Z","last_seen":"2026-07-30T21:45:49.003597Z","times_seen":11,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive459e459e.css?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.226Z","timestamp":1785447419226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive459e459e.css?ver=3.0.4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2853\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30299,"size_decoded":3162,"mime_type":"text/css","magic":"ASCII text, with very long lines (30299), with no line terminators","md5":"317fbc87772718eb181ec7feba35e148","sha1":"e08708d82fba6bdb5d2a6826cc5099662f7daab1","sha256":"12c3f7bc60c99d1b6b634d6cd16fbb0e26ae75ddda15d7a6e5106cd5dad83f14","sha512":"12f3e8e96f53d74b1a93f80d1b3f5174879b29588f74c1eae3e67c6bfc76afc0613d4392b3b46b488b5557bf1dcd1752b4fe27e26acfbac2b2f88bf8aed1796a","ssdeep":"768:Lb6v2vjV3zv6vzv2DBsBI6v2njVAjVFSlNBc6vzv2vBe6izi2iBPB5BQzeE8r7va:Lb6v2vjV3zv6vzv2DBsBI6v2njVAjVFk","tlshash":"d5d2121ee93b3699127d8c2e13a2588d3b8480dbd1c329f6ac82de16c79dd70797944f","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-07-30T21:45:48.958995Z","times_seen":6720,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d552d5.css?ver=5.15.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.407Z","timestamp":1785447419407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d552d5.css?ver=5.15.3 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12133\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57912,"size_decoded":12443,"mime_type":"text/css","magic":"ASCII text, with very long lines (57726)","md5":"eeb705d0bdccfd645d3bbd46dd1fbab3","sha1":"066def290f42ed8c00860e573cc880bd46e9ced4","sha256":"d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9","sha512":"39d11741808e95d8ea504b2e30ab19463f771eddb741196121bf04fd7d2c6f066199ef1e530ea0f2aec077118929a91c05bbfbfbf3d7d067366ed7fb46ef1c64","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzO:0E0PxXE4YXJgndFTfy9lt5C","tlshash":"1843f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-31T00:40:20.996555Z","times_seen":27656,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/jquery/jquery.minf43bf43b.js?ver=3.7.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.411Z","timestamp":1785447419411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-includes/js/jquery/jquery.minf43bf43b.js?ver=3.7.1 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":29982,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-31T01:33:30.43843Z","times_seen":996345,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/bb/spop.css","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.416Z","timestamp":1785447419416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/bb/spop.css HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:33:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1116\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5037,"size_decoded":1425,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (4921)","md5":"a175c697131167d29fecd3414218f78e","sha1":"652d13a3c3534abe54c63b5f6e147d5e942f00e6","sha256":"4127dd22a934fd0003971141412feda14afd526e3d9ea7feff7dd5950c88bcd6","sha512":"efda3662b3e5c1ad1ec38158c697c5238d0b27fb9848c3b9d7f441734dcc69143735bec710d3f814b7ec904815aaefebd8f6908af531047e4143699645338e30","ssdeep":"96:ISvF/0V9kKpEH+Lpuh57JsT8ACqidSuy0cUw6xrWr6rqrmTVgbfo8:IGoEJlCcrWr6rqrmTVmfo8","tlshash":"b2a1dbbb4e43288c72329b96d7cd5e68a2acd343b1538ddf33092b5e8706e9925c5207","first_seen":"2025-08-09T18:11:59.65305Z","last_seen":"2026-07-30T21:45:49.002781Z","times_seen":33,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/underscore.mind584d584.js?ver=1.13.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.460Z","timestamp":1785447419460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-includes/js/underscore.mind584d584.js?ver=1.13.4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7179\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18833,"size_decoded":7416,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18798)","md5":"f88d5720bb454ed5d204cbdb56901f6b","sha1":"f1952292fde4b15936e9aac16b2b9896684db95b","sha256":"726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a","sha512":"f7e3ec0c5b832116d75cac2a5a40ab6fe673cc6c0996bd898f25850ed5555484d821e1fc4ca039c69da3ab51faa25613d622db1177d7cde16da477145c3a6e22","ssdeep":"384:ivzwv2QYnTte0KKscI1WxUy/gdLzrXmJUDWjFkgoKjJj5Sh6W0+:WwOQ2te0KaYrXm1hR5Uz","tlshash":"538284c83ad2f059536324ba407f249bf23a7ea2649caa00d265e4fcbc7495dd137d6c","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-07-31T00:00:32.228574Z","times_seen":35642,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/deroly/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.738Z","timestamp":1785447419738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/deroly/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min52d552d5.css?ver=5.15.3\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 23 Apr 2025 09:00:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 81612\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":81612,"size_decoded":81879,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 81612, version 1.0","md5":"b4d6b90f14c0441aac364e194978408e","sha1":"142696d43851c8eba0f54c7b94c5f6ebd09703e6","sha256":"6b2680fab784d245cbb23d3b51e8d18740e8fc1c7c1c8eadcf0b2b7612125ff8","sha512":"feab357b65d7302cc6ca2afc86b84851c9b307ba68659fe9e6f7191ff38bdd1d38658e503124b6940f77f5c216b4400c23b8babcd6c13fac2313fa91e5269f09","ssdeep":"1536:mU9FSafiVK4eoDE9kuqu3GbcJuGiZmvfgFrsrr4l1ESfkmS3a+:mYFURoZCMLngsEl1DYK+","tlshash":"678312531fb0ab4ed86e9b3a171d7c3ba4cb2e224b4a704c1d5504068b7ba6d35f45c7","first_seen":"2024-03-11T23:30:43Z","last_seen":"2026-07-31T01:51:33.478556Z","times_seen":85238,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/template-kit-export/public/assets/css/template-kit-export-public.min365c365c.css?ver=1.0.21","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.200Z","timestamp":1785447419200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/template-kit-export/public/assets/css/template-kit-export-public.min365c365c.css?ver=1.0.21 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 371\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1111,"size_decoded":679,"mime_type":"text/css","magic":"ASCII text, with very long lines (303)","md5":"4ee432d2ea3aac0ac9d01136c784b46b","sha1":"48ba2c95fd24b12d388ec27a79536add8ec639b1","sha256":"1c2665008fa6f6c15056deef5134ca42043ac7df2fc20bb37d5268afafe1bd25","sha512":"3893c355f70a5581238b11c9f6c1d4724c3c3eeccc1cac5f0497ff5fbb5a7ff3382fca467712d69e33166b08d77e79452207c6a60964a19f9dcdfc4584df4705","ssdeep":"","tlshash":"1d211eb30d82a3116637c924f7e49485e4b58c396b811bd3d9e3ea2acf17c6f0978646","first_seen":"2023-07-08T02:54:03Z","last_seen":"2026-07-30T21:45:49.008539Z","times_seen":241,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/css/owl.carousel84fc84fc.css?ver=6.4.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.423Z","timestamp":1785447419423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/gum-elementor-addon/css/owl.carousel84fc84fc.css?ver=6.4.3 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1190\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4765,"size_decoded":1499,"mime_type":"text/css","magic":"ASCII text","md5":"6c3140c27d267165f7b877e572479cf7","sha1":"bf70e030992f1df4fb978fc8b8a65a8e56f9984b","sha256":"983a2ab05649c2fc58c488ee219ac1c9641f17a72316c102cefe30ac7f2396bf","sha512":"c9778b5a86e5ec7e4fbb2d79e280210834325bc0bce663bbd0f510e22e66e29e9bc77a8a5cad94876a812bac30db8d18b14cbd3d7e93c591caf0064835ab5893","ssdeep":"96:erGgJcBG8wXehkNw+TyIAIaFxJHXIL4NV5TV7KWT+8FjFppgrYCwBuU4X:eKgJcQpNwayIAIaFf4oV5TV7KWT+Epg5","tlshash":"2ba1efe6217a010d381a93941eee5b46367e9453c81c8d98b6f7620cdf8ee8c215ff5e","first_seen":"2025-10-03T14:17:00.842218Z","last_seen":"2026-07-30T21:45:48.939198Z","times_seen":20,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/gum-elementor-addon/js/price-table51525152.js?ver=1.0","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.441Z","timestamp":1785447419441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/gum-elementor-addon/js/price-table51525152.js?ver=1.0 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 533\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1992,"size_decoded":769,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"7d879112ece9f5ec77931dc2c4e8fdf0","sha1":"7543df9eaf761309316c8c226a432276486b5b82","sha256":"d0a6be327893a4b6cc952863b98ee798c3134bc6bd4f32370c8f842881ddd09d","sha512":"9c7a26de81da4e9a1e89a8c06cd6737cadd2e9a4c7ee505c7bd102dd190caddda26d3447cac9c129f0ffb54c972e9e4415ad1b2bd91eae736cb609dbddc16a7e","ssdeep":"","tlshash":"3441c775bab3248011f3743fa2774e4460629a7716dac920fd0f8a644f9121d87b6b7e","first_seen":"2023-11-20T11:10:13Z","last_seen":"2026-07-30T21:45:48.9133Z","times_seen":737,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da05da.js?ver=4.0.2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.447Z","timestamp":1785447419447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da05da.js?ver=4.0.2 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2867\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12198,"size_decoded":3104,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-31T00:40:20.890852Z","times_seen":73786,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/odometer.min459e459e.js?ver=3.0.4","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.448Z","timestamp":1785447419448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/elementskit-lite/widgets/init/assets/js/odometer.min459e459e.js?ver=3.0.4 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3260\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9702,"size_decoded":3497,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9680)","md5":"2adb8c7cf8cfff04c18947e5a30622db","sha1":"243dc868c7f293e0b498e68df30c65dfc5458609","sha256":"36e97e9e660caa53bc8a8d93a1b688ff167853b7757a9bbe670bdc110c5dbf92","sha512":"69a48bbd562cb32345403d85741872d3bbfcf485855f75f9e37730bbeb6f1763cbf42f2658e9e25a9082b347a1669d59909703dfbb578009a58572c136caee97","ssdeep":"192:DbJw+4Hq2qTJEopzrud8ym7LmsMBEZ8SycbvpQzL:vJwXHnqTJpy7LE1g","tlshash":"67129384ff41a638475362a112be0749b7bb596e2401404df37c99debe26c39e11bfb1","first_seen":"2023-03-12T11:43:32Z","last_seen":"2026-07-30T21:45:49.007711Z","times_seen":881,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/young-woman-paying-by-credit-card-4SUMPWG-1024x683.jpg","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.505Z","timestamp":1785447419505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/young-woman-paying-by-credit-card-4SUMPWG-1024x683.jpg HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74366\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74366,"size_decoded":74633,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1024x683, components 3","md5":"418b3c8d75b42a4d313df7c76854af1d","sha1":"d647bdfe6dca7048c61c4704bc88ea492aa2e10d","sha256":"956e5fbb2ee184fa0611eae779ceeb8279657a8f975c70f71e52d302fd77d56b","sha512":"76c02410f90f82b47658f00c731cd4f54facd3955e7014c703e68595544b31b0e7e6724c35d1ea6d091ed9f10146c501cdc823c1573250613d82a9c7c2c41791","ssdeep":"1536:imsie2ciIEWYqtMU5l37UtO1xLxHVFxcKsqgRFl9AXnCEYwL8Zn:wgIrtMU5lUwNZgRFTEYwE","tlshash":"877302026329ac471b6adccef9c52800a7481e35879df2b9f53ab1db47251c88df6d87","first_seen":"2025-07-04T20:26:13.183736Z","last_seen":"2026-07-30T21:45:48.924421Z","times_seen":21,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"askproject.net/deroly/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"askproject.net","domain":"askproject.net","tld":"net"},"ip":{"addr":"103.250.10.252","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.969Z","timestamp":1785447419969,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /deroly/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: askproject.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Thu, 30 Jul 2026 21:37:00 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Length: 277\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T01:31:10.741284Z","times_seen":17625700,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/d4cac80b7b978d91474a3139bd373ac9e68aabb3.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.72.117.175","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:37:06.544Z","timestamp":1785447426544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/d4cac80b7b978d91474a3139bd373ac9e68aabb3.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://qfsworldpatriotledger.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Thu, 30 Jul 2026 21:37:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":null,"data":{"size":57,"size_decoded":370,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-07-31T00:09:22.77657Z","times_seen":3644,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":4,"connect":26,"send":0,"wait":29,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementorb179b179.css?ver=1.6.25","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.202Z","timestamp":1785447419202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementorb179b179.css?ver=1.6.25 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 259\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":776,"size_decoded":567,"mime_type":"text/css","magic":"ASCII text","md5":"a5bf64d5859ee94a3e8e93d592d6d2a0","sha1":"049eb63b42dbb820b06870a430f523bf06880721","sha256":"25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08","sha512":"22c9c7ad86ad2b45124c5ff6b0a41e271ee176cfe0249c973877e51a1895f6d25c8f69b1c4eb565f5fe5e2befe2f4b80d4a89dcea57eeac43b3ae8e020469809","ssdeep":"","tlshash":"fe019024b14eb96412318c28f561857cb1be81075b05997275ecd19bfbde740c02e2c4","first_seen":"2023-04-05T05:47:47Z","last_seen":"2026-07-31T00:32:15.953063Z","times_seen":39729,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16530510156","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.415Z","timestamp":1785447419415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtag/js?id=AW-16530510156 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nexpires: Thu, 30 Jul 2026 21:36:59 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 30 Jul 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156280\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":451852,"size_decoded":156930,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5390)","md5":"c6241a23ae8a3886df7e1891e58cd194","sha1":"b0d9eae5b3a7e6190e2bec48843e0a80ac21a0ba","sha256":"8644ed5d58107f32a25e17638e85d9a5db2a15711a881373c03389229fef94e5","sha512":"e177380cb3d9c5bc930ec8f566630298f4564eeb3d6c5b048b25a5e8dc6e7c82bf35757621acb344585a453a2b7f660a352e95b1ba2d83c07b16fba898feb721","ssdeep":"6144:MfvZKEi5HT8qPcyVunyhczJGfEjQ3dpLF5Cy6NJs+4r:MfvZsTQyh5oJV4r","tlshash":"4ca409cdb3d674629392f478903f018ba57a69e2b44cc899f189dce02e7465a4237f7c","first_seen":"2026-07-30T21:37:34.854416Z","last_seen":"2026-07-30T21:37:37.3163Z","times_seen":2,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":43,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/mediaelement/wp-mediaelement.min84fc84fc.css?ver=6.4.3","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.425Z","timestamp":1785447419425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-includes/js/mediaelement/wp-mediaelement.min84fc84fc.css?ver=6.4.3 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 982\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4186,"size_decoded":1290,"mime_type":"text/css","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-07-31T01:51:33.494885Z","times_seen":91545,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-includes/js/mediaelement/mediaelement-and-player.min1f611f61.js?ver=4.2.17","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.443Z","timestamp":1785447419443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-includes/js/mediaelement/mediaelement-and-player.min1f611f61.js?ver=4.2.17 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 07:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 36433\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":158005,"size_decoded":36671,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65266)","md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-07-31T00:14:12.842295Z","times_seen":55822,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/mobile-banking-and-shopping-online-panoramic-image-5RDNDHM-1024x683.jpg","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.509Z","timestamp":1785447419509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/mobile-banking-and-shopping-online-panoramic-image-5RDNDHM-1024x683.jpg HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 56788\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56788,"size_decoded":57055,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1024x683, components 3","md5":"807585ea424ee8e5e3818d6d80fa3223","sha1":"a976290c33ef4099da7116a9f4eeb673498263a5","sha256":"46c95b1ecff1c8cec6b9af0c73f77f59be67b910e6989c643d54013bfc4af535","sha512":"15c8778c031a15b11eab60885059bbbd4899e25c035f9cbbc26b76d95aad08f76dcd3bd9a308b2eac4db3fa823f80d97f58ca69580fe0e9633962de0ad54bc36","ssdeep":"1536:iwZPXmH1Rk8vmwj8LA0z21oaqv6O5/VeSHrVPsuwaKb/O:xXmHTxIrgb8/VeaxwaKrO","tlshash":"4043f1332444c7977f249aa96c634e0e7d423f22e5f05d6fa3b79b8a3a151c6c98d01e","first_seen":"2025-07-04T20:26:13.208385Z","last_seen":"2026-07-30T21:45:48.925308Z","times_seen":20,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/2022/12/linebg2.png","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.681Z","timestamp":1785447419681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/uploads/sites/119/2022/12/linebg2.png HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/qfspro/wp-content/uploads/sites/119/elementor/css/post-47741e741e.css?ver=1707565078\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 07:34:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 177003\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":177003,"size_decoded":177270,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"1cc14d564130eefc013233c260aefd23","sha1":"2ec3386030c1a60fa4bfc8cdb441d085e5385f64","sha256":"65cfe411445c803f4a054c80bef209ad3ded6cc65825d0b947f525ae0fb1a3a1","sha512":"c2b7fe57a87be64cf7ed1a4d81bf0953443cd0565f49c7b35397f1ffcea1f384e7e6a147ecd10fe204ead1c5b80900c6a22d45a3d1f59d969d57c9ff1f1108ed","ssdeep":"3072:0j2w9JgS1YLYMg2VKGgOsFUWpbZtDBp5MLxVCqgW4u+BOApIL:0SwXYcOsDDDBrMVVCqYucE","tlshash":"0904e054ba53aea8cece26b6f40c3ad37e691915359153f35b60a40e2c6b92d3c0778c","first_seen":"2025-10-03T14:17:00.910097Z","last_seen":"2026-07-30T21:45:48.967504Z","times_seen":23,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/deroly/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.737Z","timestamp":1785447419737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/deroly/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/qfspro/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d552d5.css?ver=5.15.3\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 23 Apr 2025 09:00:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":78463,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-07-31T01:29:01.178182Z","times_seen":163026,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"askproject.net/deroly/wp-content/plugins/elementor/assets/js/counter.02cef29c589e742d4c8c.bundle.min.js","fqdn":"askproject.net","domain":"askproject.net","tld":"net"},"ip":{"addr":"103.250.10.252","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.987Z","timestamp":1785447419987,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"askproject.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 22:28:16 GMT","end":"Fri, 31 Jul 2026 22:28:15 GMT"},"fingerprint":{"sha1":"D0:4B:39:71:70:AD:29:E5:44:39:A2:38:2A:B2:0B:93:84:34:72:CE","sha256":"39:44:55:4A:89:E4:50:1F:49:33:B4:A2:58:54:65:22:D7:9F:E3:8F:0D:C4:7B:ED:64:D3:BB:87:78:F2:A0:44"}}},"request":{"raw":"GET /deroly/wp-content/plugins/elementor/assets/js/counter.02cef29c589e742d4c8c.bundle.min.js HTTP/1.1\r\nHost: askproject.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Thu, 30 Jul 2026 21:37:00 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Length: 277\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T01:31:10.741284Z","times_seen":17625700,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsworldpatriotledger.xyz/qfspro/wp-content/themes/hello-elementor/style.min41fe41fe.css?ver=3.0.1","fqdn":"qfsworldpatriotledger.xyz","domain":"qfsworldpatriotledger.xyz","tld":"xyz"},"ip":{"addr":"5.182.208.206","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsworldpatriotledger.xyz/","date":"2026-07-30T21:36:59.219Z","timestamp":1785447419219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.qfsworldpatriotledger.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:02:17 GMT","end":"Fri, 16 Oct 2026 22:02:16 GMT"},"fingerprint":{"sha1":"7A:8C:28:7C:F5:53:3F:88:06:E1:04:DE:DF:AD:F8:22:29:F2:76:63","sha256":"E0:C8:CA:E7:A1:66:B9:72:09:0F:F1:33:B8:27:0A:EE:52:0E:06:3B:00:8E:7B:95:03:FD:8B:DF:6E:B1:07:A2"}}},"request":{"raw":"GET /qfspro/wp-content/themes/hello-elementor/style.min41fe41fe.css?ver=3.0.1 HTTP/1.1\r\nHost: qfsworldpatriotledger.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qfsworldpatriotledger.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZVYUoxVEN1c0NTdmtSRG9tSmtDS1E9PSIsInZhbHVlIjoiVDF1UjJOTHlpc3lQVzBTdm9kTDB1SjFrK2JXWld1dkJpRTRQNnRzOXMwY2tLL1NEaklqNzhUeVJWU2JqYjhrTFVkdUo1TVZYOFlXL2dKRkR1a0lObkRldS9MRThjZEcvbTNlRE56NHNTNTY5L0cvdkNGTnAzdzNYb0xhNlVKT0EiLCJtYWMiOiIyNGExZjdlNmZkNjdkMjgwNDI3NmE4ZDJmMGZkMDI1NjhkOTVkMGQ4N2FjMjBkN2M4OTdmOWMyMmFiN2MyMDEzIiwidGFnIjoiIn0%3D; qfsreset_session=eyJpdiI6Imd5bjZMQzNFeEJiK1p4MksvdEFxK0E9PSIsInZhbHVlIjoieU1SdWxkWml6YWZxaEJwWitWbjZkZTRIblVjdGRHRXJ1MS9UOW4xRVFDUUVsUFFjMng3TExReU05K2JVcUV2L2d0eWlTdy9MMmw2UGxPVlBwR2F4UVRWdVMrR0dXaGp4NjdHWUh4RUxTT2dxaHVUWERZUGRMWXl2TVNwc3ZMRU0iLCJtYWMiOiJhYjQzMzk4YTg3OWIxNWI1ZGMwOWExY2UwZDhkNTliMWU3ZmI0MTZiYTk5NTcxOWQ3OWM1MTk4MTJlY2Q1NzRjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:36:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 07:34:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1649\r\ndate: Thu, 30 Jul 2026 21:36:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5756,"size_decoded":1958,"mime_type":"text/css","magic":"ASCII text, with very long lines (5756), with no line terminators","md5":"5be56bc9e617084e1cbb84c994912fc3","sha1":"a3adca593d4ec4afb41e32d073405610ae37eef7","sha256":"3c3c0ebe37e4fd4187131a0a8d039064a9014215c4b83199d909e7e0b2d7f450","sha512":"091a8004a7773d77faebd736d6626e5bc68609a366dc8377163b5bb96a87a8ea7b5c25a8eff9cabb17664a1e313769393429b9e6cb7ad3e0e58a810b94b2ef7f","ssdeep":"96:vSpsvXYXqXXXNjSa1I4pIG3PCZBG9Hzkoe3wuFeQWe0O4HClZ6wB2t8lj:v4sfoyHNe66sKZBG9HO3wEXYodtj","tlshash":"39c16363971031497673c8393ad17e943a216211c8336af4f426d9fccbce4675a29bae","first_seen":"2023-10-26T02:25:18Z","last_seen":"2026-07-30T21:45:48.997659Z","times_seen":7607,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"qfsworldpatriotledger.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}