{"report_id":"27fea40d-fc95-4b64-ac61-3193245c8bc0","version":6,"status":"done","tags":[],"date":"2026-04-15T02:59:25Z","url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"title":"QFS - Best Digital asset secure system","dom":{"size":43208,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27897)","md5":"229c1fc3417b09f2a909386f30d62136","sha1":"17113a3392045e1c2cd741ce80bf8971b2f66dde","sha256":"1b76c9d3d25bf6e806bdf451c83680289a55eeb5c0e1379208bb1aff53ad7723","sha512":"7ec0ac05811765e9e8174f6ace2452526812f4547c2d00cde6b7dd566bc0f044e839e5c7db35136808c5ab117b98ed3e3d4645d83b68e23cf71cae20cd758267","ssdeep":"768:Xj28FTbfsTO+LDGmPKHs9TvfqaSQXOSqGMWYWf:Xj28FTbfsTO+LDrPKHshqa/XOj6rf","tlshash":"3e1395276780462c9c5392a4f399e54ea32df684ef6359eef7c62410c2d93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T02:59:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/b174a5bb/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":6,"received_data":245778,"sent_data":3270,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.icons8.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2011-10-04","domain_rank":218854,"first_seen":"2017-05-26T09:10:54Z","last_seen":"2026-04-09T15:04:35.040961Z","alert_count":0,"request_count":3,"received_data":7965,"sent_data":1393,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-04-09T06:35:05.195253Z","alert_count":0,"request_count":2,"received_data":30541,"sent_data":897,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"52.29.137.2","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-04-09T06:12:41.731574Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":614,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-04-09T05:25:25.913267Z","alert_count":0,"request_count":1,"received_data":7734,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-04-13T01:43:53.819484Z","alert_count":3,"request_count":24,"received_data":9602820,"sent_data":16690,"comment":"","tags":null,"fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-04-09T05:25:16.838112Z","alert_count":0,"request_count":3,"received_data":324626,"sent_data":1405,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"192.178.25.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-04-13T01:22:49.901812Z","alert_count":0,"request_count":3,"received_data":84609,"sent_data":1359,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.183.175.15","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-04-09T04:03:53.786716Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":10952,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-04-09T04:03:53.715073Z","alert_count":0,"request_count":1,"received_data":18549,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"qfsglobalsecureledger.com","ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":55,"request_count":55,"received_data":17847230,"sent_data":25877,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-12T22:38:35.592234Z","alert_count":0,"request_count":3,"received_data":189612,"sent_data":1365,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-04-13T01:27:31.466415Z","alert_count":0,"request_count":6,"received_data":3607,"sent_data":3555,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f9b1a86615f85e9931a630e225ac5ff0","sha1":"d5c2d4257a7e35a74aaae2912812f4422de98238","sha256":"f81edbdc30066b5eee2f863d01c0c264915802c37172a48a43ef0460538aa839","sha512":"4c2c0dc143934187a5b3d3ac3ebb2726b187f4e244d95350ff001308ac08c87f33c6c8679af988c6f5a6aac82075474eaf66e81ec8bcfeea9e00f53dec66a6ec","ssdeep":"","tlshash":"f0c02bc4b04d0400f3d1901b20364004eb7d1898ec04c988d152a899797330b043cf3a","size":131,"data":"","first_seen":"2026-04-09T14:30:38.825378Z","last_seen":"2026-04-17T06:56:24.188597Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2ba67d6a4d20b3b76a56dbb8968608a","sha1":"03207e969b4f76089ce22be972d5611e43525fce","sha256":"5f5ba24cb103199f2c493cb04282f6c51822a9a3034fd4e53d7bb8a318b0dc70","sha512":"577fc0cabeef8419c313cbb234b8e778c18bb43ce8696b2abc316db709f3e4bedb6335ba7442cf486299ce0cccd241cba5b1b48831227d0072eb5cb2e507ae55","ssdeep":"","tlshash":"ebc02b386e2a606a8384e26c3f67c8c8ccf20f3300f9156c4911e0068938f81008fc80","size":142,"data":"","first_seen":"2026-04-09T14:30:38.66216Z","last_seen":"2026-04-17T06:59:24.455988Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-04-23T11:12:34.367055Z","times_seen":244691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0c609e39c29ff8a3df65f4fa64ad7b75","sha1":"0046724f9e36186c3bdbf0158bf6a9472ac37612","sha256":"da887ab0cfa19e6bccd1d2263ec0ea5b2bf8c87cb32f66dfad3ba714dce01c4b","sha512":"6feefff9dc2c72bf0fd45154cf4cb9f71499fc1df648a04864efb7df6d058a1048f0e70dc0ad06950b40da269f81dcdc3aa4eafc51ca0681270ae79590a8cbbe","ssdeep":"","tlshash":"4fd02e2f99fc2bbca3c2b2880cc3500873e8acb6a61002c980fb6c8091014cbd09e00c","size":256,"data":"","first_seen":"2026-04-09T21:05:22.232758Z","last_seen":"2026-04-17T06:55:51.953128Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-04-23T11:12:34.367055Z","times_seen":244691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-04-23T11:12:34.367055Z","times_seen":244691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b787d22d9cb06342658bf546039117bc","sha1":"a7ce5b0c7e956b8e3c1a5c254c910d57c56e1b57","sha256":"f5fe88ee08735ae259265495a93c8de2b0eacfecf0cd90b5821479be3199fa8c","sha512":"a4f3b3c9e61b838f8cda07cdaa4a403bfec911a3ef199a1cd92d1a2513fa584029e231e927f8506d3397015250c44e1db5e39d557064a6d00c1e50418addef88","ssdeep":"","tlshash":"c710000000000000000000000000300000c000000000000000000000000c0000000000","size":2,"data":"","first_seen":"2023-05-04T03:04:02Z","last_seen":"2026-04-22T02:22:17.318886Z","times_seen":1736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c095292c8628ac99cff091c5cc47182d","sha1":"00b0b91633d7230e3a59d64313f5b5f94bf10865","sha256":"1c9c65999cbada0a8ea7e1a09b8a159cd4f672a6a191a9eb043e847d3b46de30","sha512":"dade53ce8f6dedfce2da7cc61b54184e75b261239190f74a56403a47cee991ffc87a9a952968767b54c2543302b42132ec9819f1d05ea9bdb2db6ecfe9269144","ssdeep":"","tlshash":"f1a012d43a084c4834112053840fb01c2ff2651024055c8e0535966817602c53102c03","size":84,"data":"","first_seen":"2026-04-09T21:05:22.104733Z","last_seen":"2026-04-17T06:59:24.298496Z","times_seen":572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"024281d33459b623c54f3a63e47f0fb8","sha1":"85a3781165dc075a92ab6041d19517b5a6e3fc1b","sha256":"718728d55cfc0f26332c221be939324278c3e38ef9693d45bdabc0496a564d4e","sha512":"e53bce1222885a9b2f80b8a6145bee09c6b32cb00fbf28f3486335b04a4df9e4fd56828fac1a5530b37cb6eb8347a3df1604ebac24351227d68ffe0ca0849e26","ssdeep":"","tlshash":"a2c08cc166dc5939a56e5b3a0aa2b32842a1a4e1ad9b6404a5031c842bb88c2a4728a8","size":160,"data":"","first_seen":"2026-04-09T14:30:38.595387Z","last_seen":"2026-04-17T06:59:24.477513Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd3ecd8a8c3b500b832886406e26a877","sha1":"0b9aa32e07a98f15f1ccdb10a7c7ff5db89ffa11","sha256":"ea898919b965e747df19c2e62f319ebdef610c120e186c096a679d8fb79fe653","sha512":"48911e9f20f0d9182cb666d5a51d2bf38ea707c79b83d90647717f0fcad875b066059e0d21206fbbd0cfb512cba1d2fe4355157300013bedec95aa1649737974","ssdeep":"","tlshash":"67e0f13e3c348055479601f881f7f5283d0a34600440d9138496c87d5cf0fda6d01a94","size":418,"data":"","first_seen":"2026-04-15T02:59:49.499677Z","last_seen":"2026-04-15T03:01:03.477687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f374759f30517a5de5bbe4c07eb079f9","sha1":"74eccb760c00d3ac42813a8fc304543fa0078503","sha256":"d8ba607b3b194cc1463e166f54eda6976656ef23042c9d0b4297d391596d9df0","sha512":"984d28add61e4b53a6ebf26e42728837c4a58a1a975b36df0698986dc1b8b1c86fc9eebff8bd772cd4a0e41756ce7f919ddb90778c8a0f5ac7882d750a11491a","ssdeep":"24576:No+pIPUKIWbouNnyWMhxfJqdePN5r0C3Ze0XVxfq:NBOPUK7bozVhxfJqdePN5De","tlshash":"4e655dd932d2f86143a3e0eb183b0101f57a99497448ca5cbabddeda1da0d07617bfb4","size":1486235,"data":"","first_seen":"2026-04-13T11:27:10.050236Z","last_seen":"2026-04-16T01:05:21.931651Z","times_seen":1080,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-23T11:12:34.374519Z","times_seen":212501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fa9ef35e20b44910545531c7840f5fab","sha1":"6467404d94928ce85891bbbafea843681a4f078a","sha256":"f87a64699c04e68d61cec84a3fb6bb257a9334af69fefbed462a441c8176799d","sha512":"ef52fd6c4b6edd197035c0f420709db78c28b95db83b57ea6946bb7248dbf13d6e6a7db08a7bf7c4a96e04ee7d3c91674f46c2c940eaa133cc54be803c0e5b76","ssdeep":"","tlshash":"f201d0202616223d08e89fbe581331908675b166e65b0c377804eba3d5f545338615b3","size":767,"data":"","first_seen":"2026-04-09T14:30:38.634215Z","last_seen":"2026-04-17T06:59:24.350237Z","times_seen":1299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5f5bd2010ccf9b20960928f3e9a67bf0","sha1":"9b2b995c6809832863d9efbe8ce06400b1e41d57","sha256":"90ca1f1c8b06438ef5781de8a20a182eaa8201497db561b32496fef42335b51f","sha512":"0e1565e499b123e431ad706e4ac429eebb6e4b7cbeabbec04be65040e4a920fde1ba86983bd15901c3ec29a6d8e7e9494d06dfca8f047e1fdf85c8e25e28f809","ssdeep":"","tlshash":"1870000a2c0c280000a33820080b880802220a08000002880020008c0c3002b200280c","size":22,"data":"","first_seen":"2026-04-13T08:50:26.846173Z","last_seen":"2026-04-17T06:59:24.409176Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-04-23T11:12:34.379982Z","times_seen":234483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5206560a306a2e085a437fd258eb57ce","sha1":"c9ee5681d3c59f7541c27a38b67edf46259e187b","sha256":"de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc","sha512":"40422e2733a73dec2f9aac48e2ab48d3b2fdcdc1e3a88bc7ea855227e62c029246da1dd49dd057bb8a8b796b3b2a6f60d9d8a85de53df597e422b2f68c54cfb6","ssdeep":"","tlshash":"c70000000000000cc00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:04:13Z","last_seen":"2026-04-23T02:41:32.366058Z","times_seen":57710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5ac898b7ec02ab628f72b707dfcb4ad","sha1":"dabee9aaaca37094743f1d00156558fb68788c95","sha256":"13f0fc36c5c5a75e2696f85bac745d9ae1d8d225b8462f2d1b586cccf445c650","sha512":"2d209a94d8d9c4128b623cae848d534c92f93ebbcf97a7117df67ece586cda3aab63e9848b8db54529d9db8728b2932496b3bf64ca6fdf1deb36ef3dbf3f738c","ssdeep":"","tlshash":"3ba011cc3fb8082008a322a2800b288c0fb03028a02828cc0028c28a0bb82ba0082003","size":79,"data":"","first_seen":"2026-04-09T14:30:38.602564Z","last_seen":"2026-04-17T06:55:51.915891Z","times_seen":564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ba62893cf44b6171765403103cacece1","sha1":"2399fda4812b27405a8e08be315b855534c6d03e","sha256":"ea79e6e27bb3e883eee9261303fe376f91a1026d2b7a2b71c2a6fcdbcfbffd6b","sha512":"1d67d56c3d0c2ad9bf2d29ff26d4f6e48b4efc8722fa8619676f12b0fbb33c3b244ffd4d1e89ef218d4c3dcebfaa844163ccaf33409e7e13c2f1db8602631c18","ssdeep":"","tlshash":"1411428ff1b66701b8e6a9c014eb4d3ed12175469cb02d0f481bd1b006f06a72162e0f","size":1036,"data":"","first_seen":"2026-04-09T14:30:38.609543Z","last_seen":"2026-04-17T06:56:24.189282Z","times_seen":564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2ecc54065af518ab39939cb8c7edb69","sha1":"7c7c5748b8e19a746bc5f19555f2be49bca6e947","sha256":"cc858e7a5627d6f9ffa6a0dd0bc5dc074507229415429912c13b6f99e1ce7284","sha512":"e984b09ed268990a7e59e1ca60218e34cbbff2b8621203dd5aad730ecbfb67b2d4db2a0c1ceae35e283f1e57ae596dc30a4caf3775e40f0a03dd20755156c0f5","ssdeep":"","tlshash":"13c080dc7b1df869e7013093518f410fafd624149905541c470415995fb05054553c3c","size":166,"data":"","first_seen":"2026-04-09T14:30:38.68409Z","last_seen":"2026-04-17T06:59:24.488151Z","times_seen":1324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"57b8c6ab6aaee23b8b69a3c41d7f46d6","sha1":"e0e7f54ff48ed7e0a89d899703ee11148112a414","sha256":"22d8b9b8387e45537db43fc8eed094e8a18998fb46fe61147f215f88020798a4","sha512":"e5c7bca4a70166538b6b2d0ae290473a133cf3210f604365791e756f3dd73bfd93c610af4bd164476d2f905ecf3d5c5ac20ce45c4ed7dbb87a9b4c11cda4c5cd","ssdeep":"","tlshash":"60a002e82b05581998971892456f803ca7e57230f20eac4c9e6de1dc2b7af97041badb","size":69,"data":"","first_seen":"2026-04-09T14:30:38.917829Z","last_seen":"2026-04-17T06:56:24.101089Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-23T11:12:34.489526Z","times_seen":284357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9b07f27fbeede44b85bcbc12fe7e9742","sha1":"3086a73b27bfe3e8ec3c1f139b32617ac4e6c535","sha256":"ab3cbb81d89e287d0c82449006f49ee25ebf6761bd8d924a37920d7a83dd3673","sha512":"0233627474abc5a002c480bab5444894093d99abb68567d8a77566b008da239a4545082031c3ac1d55244229bd824b860202ef4b91b063cdec95e445365513a2","ssdeep":"","tlshash":"608000283c08200a00823833820b002e22320c00000a0c808ac00a880cf008b3302c0e","size":26,"data":"","first_seen":"2026-04-09T21:05:22.146932Z","last_seen":"2026-04-17T06:56:24.198469Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-04-23T05:43:00.851544Z","times_seen":1025,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d161222836b4b10ba954c1f62fdea532","sha1":"41b8d4744466bd45f0694503fa18b6b6c7188d7f","sha256":"5236b254f6781f55f7eeebd7059e14fb6e6112a851866b3d801b7f9826e2d87d","sha512":"d2c8da9f679ac585b2c42ca6fcf2af223f74780dd46376685ee2e61ce723f4bc2d2312669d7fc1e0010567ce5f6a336fac251537deca89d1574f9561f5419ffa","ssdeep":"","tlshash":"2e70000a2c08282000a23820080b080802220a08002000802000008c0c3082a2002808","size":22,"data":"","first_seen":"2026-04-09T14:30:38.708876Z","last_seen":"2026-04-17T06:59:24.434443Z","times_seen":1302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3700f097e741a7702f7e4ac61ed88c1a","sha1":"98cd3704dd19c3089ee3013ed0e63a6468550540","sha256":"4eeac15ae345b99db2b063be34cfa006fd7d551f5805a296e5f9fc72ff6efcad","sha512":"e4efb4b4173a7e1e48d041cf16a79dea8d8a8885bb53cf028cd6f2b04b7546dbac7eb625dcb0737e4c6d438e00b46c16e489a689561c90491c34ab551bcb6329","ssdeep":"","tlshash":"c71000000000000000000000c000000000000000000000000c00000300000000000003","size":2,"data":"","first_seen":"2023-03-10T09:28:47Z","last_seen":"2026-04-19T17:57:58.643745Z","times_seen":1885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"897717b8b020d65743bc414347b71c56","sha1":"9eebf2fe10eda4623743b2a7d573001b7e7d55c3","sha256":"dc79785ee6a5e6cc7896bb2bc863e941675e95519616daaab59fccf11303404e","sha512":"e3f92bd27a6b2d85e92538c5cc89ca4cfaaff069f24cdd0161b7988129d07dab75d242206faa2fdd9460fd61f832361752afa4de71b222614d48255673966c43","ssdeep":"","tlshash":"8170000a2c08220000a23820080b0a0a02220a08002008800000008c0e3082e202280a","size":22,"data":"","first_seen":"2026-04-09T14:30:38.681354Z","last_seen":"2026-04-17T06:55:51.88213Z","times_seen":538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/owl.carousel.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-04-23T10:08:52.028107Z","times_seen":50926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4fa8a9047f655baae75f32d849a00bf7","sha1":"a2186271442132b9affc0ad9e07b944b8dcaff83","sha256":"213461c0a810643b5af93913753a47380fafee4e91b1b280111d296cfbaa34fe","sha512":"40c3da81fde5c30aedbcea69e6c54431f5a34ac0a0483face88c3c7194b014b2e475e361fc0a42cfb06cdcd1bb00e5442fe692e554683a251ef03dc75ebdb203","ssdeep":"1536:Tmqc0dLzEtDTn1Z2pdkhGX5G4WpM9LMlldDqSIbi:b1LzEtHn1ZcdkhGX5G42RBq9i","tlshash":"725317caf2d6733559e271f2001b910993be782adca8196f7d15e3f51e7098b4027f2a","size":65197,"data":"","first_seen":"2026-04-15T02:59:49.509964Z","last_seen":"2026-04-15T02:59:49.509964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cf0718f692dfc8f934a63412c80eed07","sha1":"8a227144b70c4cb121dbf38ee03e6a929b910c56","sha256":"9a1926854f7c3f6c8de5983cc26c08089cd4c43a454ee9e009488b24d6019b6d","sha512":"d1fd773f3978d45ad5f07c2d8bb8925b7bd1cfd4acf455b3559038b74416cb75c9505fe4c00f397f20be00f64a03f86983f0c4866dac99506abdc8f2e761aee3","ssdeep":"","tlshash":"4dd097f5f5e330486222a68621bdc0041018603abd9a48806399ca8b262260c03cb819","size":231,"data":"","first_seen":"2026-04-09T14:30:38.743033Z","last_seen":"2026-04-17T06:44:31.300263Z","times_seen":555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-23T11:12:34.374519Z","times_seen":212501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1fc378d7a35ac46d0e8dcee217de3147","sha1":"2b4a6c6493bf4748649fc44568f80657a84c6daf","sha256":"3f6eb2b437feb99af5cc9c880deb85d3bbe2ed13c039d5697bc114ff92b4a3fc","sha512":"fd7a615fab8bd87272faaf95e260eaa10e0d7fdd7e58ced2026b800e0f4ebf37ed632c27d026f912fe210ec3b647dcec858b18bab2be9d402427a37aba0cca6e","ssdeep":"","tlshash":"4aa02202282830820282288b303380bcbbf382000000c88c2f38c20c2fb88cb0383c23","size":72,"data":"","first_seen":"2026-04-09T14:30:38.873433Z","last_seen":"2026-04-17T06:59:24.438205Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e34dff622740a5e2d6ed9c41d3c49688","sha1":"fadd56ec452f32494dcac8d1adde33d451bf70c7","sha256":"3f98114b0f77b7da78bca527117c4f3126aafbba8b94b68b0bc3ccd13944258d","sha512":"f711324b51b9640ffb3788c2388375542c59df3dcf4a7c772d5ab609148dcde0e150db258d86a8a11488168374f0fcf95f7ca2831eb7fb12876e2bb9b6f666a4","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000000000000000003","size":2,"data":"","first_seen":"2023-03-10T14:46:11Z","last_seen":"2026-04-21T06:59:19.7313Z","times_seen":3373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"57cec4137b614c87cb4e24a3d003a3e0","sha1":"23eb4d3f4155395a74e9d534f97ff4c1908f5aac","sha256":"18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552","sha512":"4921de1edb2ecc8ca3a22823705194b902cfa471675f2d1ae8bf67d0c7b060a7c192e36ffca9f1a0d90ac2dbbdaf429ee1ec97e160eb00dc80b07000935304f3","ssdeep":"","tlshash":"c700000000000000c00030300000000000000000000000000000000300000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-23T06:03:50.094647Z","times_seen":32834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"18598cdc0347d2bb117cb6c87835e718","sha1":"7d9b7f7e5dcaa8c0c07763c49f930bf7e4c7571d","sha256":"b4c4188f38b247da8ce9db74e1ae4f56ac9de4ccb9c98388ab232d5471d79ee2","sha512":"8017a3d043fac3073d18b315717eac3868ddd58fb62b1fd51b0df23a53dd3f458724bb51f6a1e1936f2026920990d057c48bd94f6c09a5dd1aee5d9d176a2eda","ssdeep":"","tlshash":"32d02e80670c15092ce031a60486f87803f2104a1d22a80f0130a8fae173ea08dc6a26","size":258,"data":"","first_seen":"2026-04-09T21:05:22.005958Z","last_seen":"2026-04-17T06:56:24.163258Z","times_seen":573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ebd826c0efa50d4a5d7b42b382c7a2e1","sha1":"a43d080173bbdb3c4f7d2797a3bc1c7a013fc3a6","sha256":"13f4749ae26a75e8bc67969b49cd1c1b5003d94b729ac51569e35fd30ce6d0fc","sha512":"544cc2c84587d6603a6148aba7a21b111b356c5fe0eef66b1310671a7fd29a76261753d79097530fd09a9c9b906e83e0cb7fc5c5c3bd205d275bbbbf51b33b46","ssdeep":"","tlshash":"9570000a2c08200000a33820080b080802220a08000080800220008c0c380aa3002a08","size":22,"data":"","first_seen":"2026-04-09T14:30:38.927594Z","last_seen":"2026-04-17T06:59:24.41641Z","times_seen":1306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f38ee76ce06ccd13940482aced1c7391","sha1":"69590b192b270e6205f5adcc15d42b8500bf48e7","sha256":"550a92e330a86fa0a314c5bdde5a76c4168d753b45144d2780cbf2c26aa033dc","sha512":"947c90d8346b5e7d63d5c61af54e2770ddfb44738ebebb3a4937d1d3a70e24b3359f7d9e1388f06e43b7e28da5243b4deac70330a6e98eca03cb99d1febf96e0","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000000000000000000c000000","size":2,"data":"","first_seen":"2023-03-10T08:48:35Z","last_seen":"2026-04-23T11:12:34.397901Z","times_seen":2574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8e1bb4c6b92f11df69d1fdb7ed90f3bc","sha1":"991bd3e6814e763c443fbecc3de82ccf14868d7e","sha256":"b787be5be3ab588aae67971152ce3fdd6a6c918e465050fe93ee3b1eea0fbf6a","sha512":"f08fe8dbd26c211a0d3ffe69fb8b03566322609084a84f05bccb0cde73de439f2caf249eed9b1de35c2b5f7534db56b36d41bfa8c12c598a7d5e68c3b0d5dbea","ssdeep":"","tlshash":"9911428ff1b66701b8e6a9c014eb4d3ed12175069cb02c0f481bd1b006f06a72162e0f","size":1034,"data":"","first_seen":"2026-04-09T14:30:38.715893Z","last_seen":"2026-04-17T06:59:24.449415Z","times_seen":1297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e185d3dc333ab25f68b877d037dbc1ec","sha1":"8acfd520f5aff18fe8594bccbacc7949f018389c","sha256":"04faa458978b6aec77b6d6179420f2bbe07f6e8333d6e2d003fc82fe30c28c65","sha512":"8295185594cb7e58fd827d734b5e80c7be1c75b4e05d1a96c81a2cd1b5b5de317947411f115558c9e07fd7b2bf854bef8c61d0f74ad09a424c465806a72d92a6","ssdeep":"","tlshash":"4ac088e320f0b8c32a232283300a382b202c20eb32020e0c0880c3222200208c22bea2","size":133,"data":"","first_seen":"2026-04-09T14:30:38.666313Z","last_seen":"2026-04-17T06:55:51.870644Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"04cf63667fc721663b5d6dbac6274e24","sha1":"cadffdc91f03286ca4a3fae36d6100146a6114d4","sha256":"46d446c3f35c25237f518cc9455517e621a3b660e8e8cae439bb8b54b6a02b5d","sha512":"f61481099e831a2759ad4b818f99b89c14cb4d8cc6d7ca6adc1ddf6af7a7481d1dbaf76304129fdc7b6c56e9133991aa2ffcf693eb59e7e2114f8b07f4bc1fbb","ssdeep":"","tlshash":"ebd0c2c46206634332e738d9e0535205dd985da3229689cfd54344fe5c108cf89d323c","size":288,"data":"","first_seen":"2026-04-09T21:05:21.997279Z","last_seen":"2026-04-17T06:59:24.45699Z","times_seen":589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d5236c8e67d7d1041d6cf447ac99a6c7","sha1":"1db75602190e7e6dd86954e47e295bfe8e2cc937","sha256":"827b9a5231652cb4f69034392aad552d319a72196d126a000eaee2c3c234abb2","sha512":"f3d7c1715b03eba5f0d13d6a86a23eff864ae827c77f082faa4e04733bc69b5dbf0d068676c4dd544aa6d34e3159bcb01b3d2f10b349c48827b2c30256cfadb4","ssdeep":"","tlshash":"d6e068c0e41617d308e3dcddf01b668037081e21b5bf8f9be501a31288a89c6aad7f9c","size":371,"data":"","first_seen":"2026-04-09T14:30:38.915851Z","last_seen":"2026-04-17T06:59:24.463438Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ce9f074420efe373c711aa7f64062355","sha1":"b9a93b7cdac8af0685ca837e1fb53eb0c429dd2b","sha256":"4545dbdb0a6319599490f4075b82eae6a910b68b65ce15360fa2c1c2539e85ff","sha512":"abd81ee2d5ddb7ad896724d29937f9d40de24f68520d772b8e557c2b95978e39eca0abe5113434eb32814e99ad05a15f2a25c6a811ec9c1bd69584f390874ced","ssdeep":"","tlshash":"09f00e61925c221729201213a02f6038eacf2214feba4a4c0365d314a3293d18123cf7","size":463,"data":"","first_seen":"2026-04-09T14:30:38.693588Z","last_seen":"2026-04-17T06:44:31.249983Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dfcf28d0734569a6a693bc8194de62bf","sha1":"a36a6718f54524d846894fb04b5b885b4e43e63b","sha256":"333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3","sha512":"da637b3f32d7c7e410ab619520e0cf4529169a5c326ecbf4ca7a3bc2330ad49a84fba4d6c8919264eec5dc75ef80137f78cda40e26f3f741b5c9ff259d6efdbf","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000300000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-23T10:52:15.571097Z","times_seen":57400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0b9503d19c4340380b3105a1948bbf0","sha1":"2cb8800360b77cb89c67355ce2d2666f6a2ab280","sha256":"77085d9de83ed4a6dae0417298b1693dcccf0f9fb04203e174185db03761f511","sha512":"092b1b7cafd2725a9c89b24e4b0ef5f967830365b9c8ff933a354f04618bcbc749a3b61cb09d5a379c991994237dc18b99f8d3135106dd97a028c84c7a650c61","ssdeep":"","tlshash":"c710000000000000000000000000000000003000000000003000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:49:28Z","last_seen":"2026-04-17T06:59:24.337098Z","times_seen":1491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-04-23T11:11:55.246688Z","times_seen":134768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-23T11:12:34.489526Z","times_seen":284357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"87358f3325c08cc8107dbf53818275c4","sha1":"f3df8496759482d9f44cba58a4b57500d17eacbf","sha256":"9ce8326737c676d52c36e91b75b24a694292b90e954953d731a1d0626bebc021","sha512":"23b99cca959aa09403a67b3aa58beddc2259e33785bfb94e7e0528435527e5360dc9502bde75bc7fd52c181b161ac12106d0349d098de791ae71f8d574c9f4e7","ssdeep":"","tlshash":"41a0128819002805c4242097c1074014aea063410004940e041dc68c17624930002a73","size":77,"data":"","first_seen":"2026-04-09T14:30:38.638613Z","last_seen":"2026-04-17T06:59:24.431186Z","times_seen":560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2c56ce519be7f3982c7b59284e30fd16","sha1":"d75e447489edc4d3fbd082cf3de15fe5b17295ed","sha256":"2bd0d1597fecb51fdb61707ab11d2c06b9aafe08dccd1b0a131e8c2a7c2e4e33","sha512":"83fcc272a446ac87e5ee02b2349c96ad2f4a35cb11ae130a8908e58bbff76943bc80c9d1fd25b8e6a69827be907a5507e195e395cfda341d1683af02e5a60f0e","ssdeep":"","tlshash":"54a0029f2894981b5131f3a63467e1053569383af11f0e1d057fca9145a47d431277ae","size":66,"data":"","first_seen":"2026-04-09T21:05:22.030197Z","last_seen":"2026-04-17T06:55:51.882647Z","times_seen":577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/popper.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"abf6eaa0dafabdfc480d7691f9777995","sha1":"5f7e392213cdf5e71614118fb26f9520ef80df97","sha256":"4efa894b85e3c9b1d30d13ed6c3ee0f5320af9f1a3d20ec2838467e464c4f5a7","sha512":"066334fc1425aa1d36c2e2b91b3f72adb7bb572215c0ecc3d68e34ca2d48b138eb897fcd185dfb3725c77e6173225326a122015e0a83886d55354ea40797416c","ssdeep":"384:PMFHekJviNIGYAjvOg/+f3+l/m5HfxoILuw/VoNnuGb/f/MgHknmjNzWN6j3Q1:EBsjvZ/+AsR6w9oNnuSf/MgEnmjNzWNb","tlshash":"d882b6cc7694f4a5166753b6807b551fb333a920218ef500b254d6da2c74eaba32bc3e","size":18453,"data":"","first_seen":"2023-03-07T13:17:05Z","last_seen":"2026-04-23T11:22:12.244818Z","times_seen":534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30fe6ec1f1b70381d266314a0376f7b7","sha1":"6990206a91d8e07ebc35718e8ca07e759c6c8c20","sha256":"487ce253bb111a0d9404c0b85255fa0c8fa6230846c3a4ae18e015bbefba69d1","sha512":"75aa11bec72c30dd57237cb7521a605242727c3e06e3d92fdb27536b4829f02953edf5f1ead33cdf6151fe67ec267388882195184de478044488d9ddb3cb2911","ssdeep":"","tlshash":"43119438752882138ae7128a8e2ef15e7007b97da3af1db1b1ccc1c12034c2412e632a","size":1000,"data":"","first_seen":"2026-04-09T20:50:11.973172Z","last_seen":"2026-04-16T17:47:45.50428Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3cf4eac2f79fc1596aa36d062649217a","sha1":"f28064d46add3ebd4b82e81ba5203daea8131d26","sha256":"4e3ef4bb3568ec11e0058c57f1fe5ac07b119834d614e554b8b1bc0d90da9ce2","sha512":"bc6d312a3c51ba9a69dae5f94f0870f868ddea5ea6477b2eda01d44edb8457bfa4be80e842d62d0c42de35e81936924c443c4d32a61b10155d07b4001d208d8c","ssdeep":"","tlshash":"70a012cc3a68042004e321914007144c0bb43128a45458cc4014c24807b02750041003","size":79,"data":"","first_seen":"2026-04-09T14:30:38.941738Z","last_seen":"2026-04-17T06:59:24.323718Z","times_seen":1300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"630d66cfdff7bd52dd19abd0ca5b5558","sha1":"ad82d1a160a855a302eda7224cc0cb7a5473c949","sha256":"4683cea81996cd2a8f30db0ef4820c286603da70d5b275840942ecbdc84daf83","sha512":"531ff10feaa134c81281d167ba0cc6ba93ced16f4b1b02127946461636791125ec3a4701519e644fe0eac7a6f362efc92674de5e28c7f05c174c5a0a332126ff","ssdeep":"","tlshash":"e3b02bc0b04c0400f3d1901b20364004e77d1894ec04c984d152a899697330b043cf2a","size":129,"data":"","first_seen":"2026-04-09T14:30:38.885234Z","last_seen":"2026-04-17T06:59:24.499191Z","times_seen":1298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-04-23T11:11:55.326728Z","times_seen":135609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30fe6ec1f1b70381d266314a0376f7b7","sha1":"6990206a91d8e07ebc35718e8ca07e759c6c8c20","sha256":"487ce253bb111a0d9404c0b85255fa0c8fa6230846c3a4ae18e015bbefba69d1","sha512":"75aa11bec72c30dd57237cb7521a605242727c3e06e3d92fdb27536b4829f02953edf5f1ead33cdf6151fe67ec267388882195184de478044488d9ddb3cb2911","ssdeep":"","tlshash":"43119438752882138ae7128a8e2ef15e7007b97da3af1db1b1ccc1c12034c2412e632a","size":1000,"data":"","first_seen":"2026-04-09T20:50:11.973172Z","last_seen":"2026-04-16T17:47:45.50428Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","size":510435,"data":"","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DKnwhA04.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"04d0691ef560adb488e4b6f4644c5265","sha1":"703691dce49d4244b1c58dc10ab8a285e19b2942","sha256":"b1f432b4a9c8585760646aeb5a5e9686154ca139027818dd7ad9744e290ac647","sha512":"af80daf0b9be2e06be01828c6be6eda731cd8f1ab5f767eec9359f247367758117387dd844c0e725415cde1ef33f7e62cd579a1d9cb6d0fdd569bebf417073cc","ssdeep":"6144:QsJU8SN+jtxVR/ZgQu2W/rLEPhCWVcq9kNE:QwU8SNr2W/rLgjV3uE","tlshash":"b0544ad47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283592,"data":"","first_seen":"2026-03-26T09:27:08.846862Z","last_seen":"2026-04-23T05:43:00.852938Z","times_seen":1023,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c9e3b8100f4081b870ddba2e6626f9fb","sha1":"8477b1d9ef878a46aefdfb3682ff56782250031d","sha256":"36ea3b8e817c13e195d998438a0c8b5b30f6482c027f95b622bab7344e38e5be","sha512":"89dd696891c5226628c02b76791f7d9c03fd2b50e1969e92ad17b19db4d2018c612fbb56597aa8f3aa1b764e2a13ab4c436ddd5757e89638e5e094f3ae84e0d8","ssdeep":"","tlshash":"978004545d4414c47037753d4407c40d40f111101500404d0105d07c0c341450043715","size":35,"data":"","first_seen":"2026-04-09T14:30:38.842136Z","last_seen":"2026-04-17T06:56:24.193411Z","times_seen":579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96dbc3cb25d74cc6b9a4dd2fe99b6fde","sha1":"051b8a2e57c40aded9a57bd7ebad3b6180e2afce","sha256":"b05155c4157fc50c57769ac6eb0abd676322ee414c86557a9ced67a03fdb8b64","sha512":"1eddff130c41bded1569e11149ca33a98cf968f0529f4d9cec3b4593804b4b7dcae352f592213f53974527802d9c8324c56e4df6126619ccf5a86dced3a7f836","ssdeep":"","tlshash":"c710000000000000000000000300000000000000000000000000000000000c00030030","size":2,"data":"","first_seen":"2023-03-10T10:20:25Z","last_seen":"2026-04-17T06:59:24.319787Z","times_seen":2115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"92c3c9e1c6b9603ba4294da0b4d4b87d","sha1":"6c5fc05d7b947821cd0bd5a040de6bdd30474797","sha256":"faffd4c577f66d2cf1c80608b20639fbf4aa32e06998b5de847184e716046feb","sha512":"d86119cfea6e95b28efb88eca022971ef00e30887f4868f77eff23309efb97e111d4afb0624038780ee4efb7fef24d437ef97f008bb348908a59955585189568","ssdeep":"","tlshash":"c7100000000c0000000000000000003000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T08:08:46Z","last_seen":"2026-04-17T06:59:24.420678Z","times_seen":3047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3700f097e741a7702f7e4ac61ed88c1a","sha1":"98cd3704dd19c3089ee3013ed0e63a6468550540","sha256":"4eeac15ae345b99db2b063be34cfa006fd7d551f5805a296e5f9fc72ff6efcad","sha512":"e4efb4b4173a7e1e48d041cf16a79dea8d8a8885bb53cf028cd6f2b04b7546dbac7eb625dcb0737e4c6d438e00b46c16e489a689561c90491c34ab551bcb6329","ssdeep":"","tlshash":"c71000000000000000000000c000000000000000000000000c00000300000000000003","size":2,"data":"","first_seen":"2023-03-10T09:28:47Z","last_seen":"2026-04-19T17:57:58.643745Z","times_seen":1885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d407e7c2d36b926dcd1c47fb9f24b47","sha1":"a6fdb68f84493bdd98976e6d64b86857f40897fd","sha256":"5247243a7246d4ab929f1f13da7cb69d4bfddf398a61c5e58ca3d5ea98e0f0f4","sha512":"a5b49f1b36fb6f043acbfa53dcfaa1b9c1a2d7a5b77e451348a07b6ecee84a38cd66690675d50477500652dcdc2b9de2d3a4b445e37f815e11f3395c436c79a5","ssdeep":"","tlshash":"16b012852a462d14202512120423dc9c1f906f20ac23e8cd8214cb1e1fb238702438eb","size":96,"data":"","first_seen":"2026-04-09T21:05:22.074862Z","last_seen":"2026-04-17T06:56:24.169464Z","times_seen":543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b73b9b0c8bf42e5c16237e145226a467","sha1":"c1a6e395838fc58252b9e8788c96aedd59433c48","sha256":"9ee4e18e195b2307910a24f5ddf1c176342b462bab186043a2997f254006e03e","sha512":"94e730a6999a70e0e7a69443a4569a73b626d8b426db3e8846c689c7c8196ea1a1741d9cc1c5e3dcf91089db9c04985545994e2f36a7a2152a7c631bb2b8bd02","ssdeep":"","tlshash":"7df00e8e73c5070008b6e6e30983500c4231f0258cd231ef2e4c3f4890b17cf5184a26","size":494,"data":"","first_seen":"2026-04-09T14:30:38.798724Z","last_seen":"2026-04-17T06:56:24.140877Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-04-23T11:12:34.373702Z","times_seen":217486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-04-23T11:11:55.326728Z","times_seen":135609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5a0a9da899fc98b05b3f0ab937331bd7","sha1":"c0380ec6b4d4685dad89c20bc653477a564f0ea9","sha256":"ff2cb12fa8d973524c4e2ba19ecbe6dd0156c2f490bd42739b896817724f8628","sha512":"427a696d1e74668dd950628ee9c8fec79d49bc74cc2639db77d8b29781640d16964519fa94ea74bb305b30c5eee81ec3dc81bc79bcb8cdad7423a61836c6559a","ssdeep":"","tlshash":"8aa011ec3aa8082008a322a2800b288c0bb0b028a02828ce0028c2880bb02ba0082003","size":79,"data":"","first_seen":"2026-04-09T14:30:38.926404Z","last_seen":"2026-04-17T06:59:24.320555Z","times_seen":1297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2ecc54065af518ab39939cb8c7edb69","sha1":"7c7c5748b8e19a746bc5f19555f2be49bca6e947","sha256":"cc858e7a5627d6f9ffa6a0dd0bc5dc074507229415429912c13b6f99e1ce7284","sha512":"e984b09ed268990a7e59e1ca60218e34cbbff2b8621203dd5aad730ecbfb67b2d4db2a0c1ceae35e283f1e57ae596dc30a4caf3775e40f0a03dd20755156c0f5","ssdeep":"","tlshash":"13c080dc7b1df869e7013093518f410fafd624149905541c470415995fb05054553c3c","size":166,"data":"","first_seen":"2026-04-09T14:30:38.68409Z","last_seen":"2026-04-17T06:59:24.488151Z","times_seen":1324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"73bebce395b6f1efedcf6842fbdb4d76","sha1":"42a0d3068dfe7945d084813fd66eb69745020815","sha256":"a898df22bfc74a1ae298c73211ab3b319e5b8da7543d6cd002a8dc4f8723be43","sha512":"ae747c3e0ee4f2e3f9ee5ea12badfba3309cdbaf779c150111a5dd773db27343bbab108d83a9593a9481210ac446f74cc296f345286b96d39a4794197cbdd3a9","ssdeep":"","tlshash":"c71000000000000000000000030000000000c000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:07:29Z","last_seen":"2026-04-17T06:59:24.315465Z","times_seen":3132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c8c6af3b18e549ea7ee288aad7be7e2","sha1":"8e9c3c9aea692184d46224369c6cca6e86792a92","sha256":"4d338456cd8d5a5a450fbe28f5ab88a03d88469fa1395723c727901e58f7452e","sha512":"8f4d478d3075c7cb2e1184cd27a6e7e287f98f92e1d1335ec0bc48c42cad09dcf2ebb60eba80e82e4864fbf0d1ba88fce037528897d170f9d31774b74a3a9e2b","ssdeep":"","tlshash":"ded0a7c2706db45117237c18099b7819a57a759a761e232c851280f71b6184b802bb1d","size":224,"data":"","first_seen":"2026-04-09T14:30:38.822465Z","last_seen":"2026-04-17T06:59:24.443605Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-04-23T11:11:55.246688Z","times_seen":134768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"10db8021dffc13d3d0a71f94fbd60491","sha1":"fe476cca239bc61cb08a492b78f5caa33d338a44","sha256":"c0d4267dfa256bef05bcb91672723edad5cb4b1291986f582ee3d75159e225f1","sha512":"f34c08c9a9caad5762745c7cd8d843649809e77291fcb87b65c47bb3202399587f621b3684fa3bb055cb40cf7c26da045c27c31c7663bae7a3b140be86ec02a1","ssdeep":"","tlshash":"f0d0a7c2706db45117237c18099b7819a57a759a761e132c851280f71b6184b802bb1d","size":222,"data":"","first_seen":"2026-04-09T14:30:38.939343Z","last_seen":"2026-04-17T06:59:24.4297Z","times_seen":1292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"978251915c807c1a9e86800de2d32a6a","sha1":"9eee27207621a18a15817b50c991ae3f611bb30d","sha256":"551e9e2739aa5dff81b73fb7272846d1f903ae9612ad0fdae19ba59450144669","sha512":"5cfd534f4d50355b2c2b52b1857c2839f35dc7094a9c9de55aea2b6a8fa0131f23525ed0117cbd0fb6ce673c32806cfccffbf303dc57cd60cf49d77f47bf60e0","ssdeep":"","tlshash":"72a0129819402805c4241097c11740146ea073410004944e041dc68c17724920002a73","size":76,"data":"","first_seen":"2026-04-09T14:30:38.734887Z","last_seen":"2026-04-17T06:59:24.305329Z","times_seen":1288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8e1bb4c6b92f11df69d1fdb7ed90f3bc","sha1":"991bd3e6814e763c443fbecc3de82ccf14868d7e","sha256":"b787be5be3ab588aae67971152ce3fdd6a6c918e465050fe93ee3b1eea0fbf6a","sha512":"f08fe8dbd26c211a0d3ffe69fb8b03566322609084a84f05bccb0cde73de439f2caf249eed9b1de35c2b5f7534db56b36d41bfa8c12c598a7d5e68c3b0d5dbea","ssdeep":"","tlshash":"9911428ff1b66701b8e6a9c014eb4d3ed12175069cb02c0f481bd1b006f06a72162e0f","size":1034,"data":"","first_seen":"2026-04-09T14:30:38.715893Z","last_seen":"2026-04-17T06:59:24.449415Z","times_seen":1297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b883138df5277229e515a48a0eed7c9d","sha1":"5ae73092ebc6c2843f85e18eba3844cccacbe986","sha256":"f705ce1107a8dccc32dee073562daa90d6501ccbc43be9d0c922caac3af027e8","sha512":"55920f7fd6410191f11034c0deda5591e362d9cfe7f2e131703dcb4e62e1f2e816f128c0ba0eff4d53886cd07d6d884de3af4035b4c88bb80731790708c5f365","ssdeep":"","tlshash":"08a012045e0019100c510112410e497815da0090605a091c042e46a81d3ec8b00d2005","size":82,"data":"","first_seen":"2026-04-09T14:30:38.929713Z","last_seen":"2026-04-17T06:56:24.194003Z","times_seen":574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"17ca55adc158c654127f6906595dc37b","sha1":"ab95093f3e9e09402ab5aee8ba87438a2ae87ed2","sha256":"c0cab75a287570633ab267aadf9f4aeb5bc7e0c11bbfcb041a71bf46935937e0","sha512":"05f784f40815b6e5a52901513fc0648eab2c00e5546b15e735fba82948806da7913d7242c30047bb479b4ab1e4b085b9b99363fdba6b1eb46496e18c7ed2850c","ssdeep":"","tlshash":"f5900206385da9a4912f31e954ab501915b155c1135c8c0e0546d19cd9315c7a112875","size":57,"data":"","first_seen":"2026-04-09T21:05:22.233759Z","last_seen":"2026-04-17T06:59:24.451885Z","times_seen":577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cd957338498985e538753ea8d071e0f9","sha1":"b840ebf240f19d160e8d0c3b90b5eff17293f607","sha256":"0fbc26485e232f572b1a21f1c9e05f832c54fbba1ef95a67cbbb0102d1774cbe","sha512":"e8f3caec3f7e52f6bc4ecb8398d22e1994d974eae79aca3ddcbc91152b5743d12932dfbeb98bcf61e003474177d412333e7dbc886e1f68c220de3c3d8af96677","ssdeep":"","tlshash":"c710000000c000000000000000000000000000000003000000000000000c0000000000","size":2,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-04-17T06:59:24.322981Z","times_seen":2189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2eb17d23bd2fc3c2214db05c280669b","sha1":"42bc8fa73176b494796c9a7d0836a0c623ae3c66","sha256":"d1fc0ab2e06246c380633117045110e0b7f6da75c5466a9a484b1ff999a76817","sha512":"a28ea15da09b873903adcb696781f94ff296e979648d2fee6831ee8d0b7c9117754db2d7d63201bc728a0ddd9442f60b9d192e252fda7711985cad0abae4c6b5","ssdeep":"","tlshash":"62f0e1d946c6439148953ced59dba41c46e4bb3c2e972b1e3b8052ea19bc8e738cad00","size":588,"data":"","first_seen":"2026-04-09T21:05:22.153886Z","last_seen":"2026-04-17T06:59:24.351223Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fbade9e36a3f36d3d676c1b808451dd7","sha1":"395df8f7c51f007019cb30201c49e884b46b92fa","sha256":"594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06","sha512":"5ae625665f3e0bd0a065ed07a41989e4025b79d13930a2a8c57d6b4325226707d956a082d1e91b4d96a793562df98fd03c9dcf743c9c7b4e3055d4f9f09ba015","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000300000000300000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-23T10:24:30.608578Z","times_seen":48327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2f4a327329377ccfdb84b4c2f8994c85","sha1":"506410462a9f8d9ea8ea4fd04c8ed98bb859f9df","sha256":"cc4219a2b2c2a9d94b2bcc96eac6a87a040db596ac1d453f0fefbb338697d2e9","sha512":"efe4497895a0c643df62208c889126f267421ffbcd991fdd54017bc27c70d45279f6b1c799f7e44fd68b612426ef704e02c9c1ee4d744118def2579bd5090850","ssdeep":"","tlshash":"c7100000c000000000000c00000c000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T23:41:36Z","last_seen":"2026-04-17T06:59:24.427858Z","times_seen":1723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2a5dbfd249d091c1886dddef461d1b7c","sha1":"d441ad79bf41005f096d8d6434b85a900c5f7d6a","sha256":"31a2f2e45183d66497142175c93c11e0272d73b265213433acef155ad0170fae","sha512":"5926be6034bea804605ae79bf64089c14528acef26410f1f55afa4b5160f489f0e414ca8a79622fdaae3c73ce44f50ce25a14275514f21de92958ab90596ea07","ssdeep":"","tlshash":"dfd023d92d65c091708920d9d45a895913f5d415cc757d08573700c51d5060329e7f76","size":213,"data":"","first_seen":"2026-04-09T14:30:38.730467Z","last_seen":"2026-04-17T06:59:24.327014Z","times_seen":1312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"12d8a0d8d19187af87f2b61983608b96","sha1":"a260ba9a42ad0aeecb1ce8e738cc1409830c6b0a","sha256":"f4d9e62458fc60304da9e596c38760f83b17f39c9da073b736b391b56993ea00","sha512":"6a79bc1966435128f9f99cebb93339bc8f62abecb0facceb11eff5a0ce961531c5d5bf8e309bf6f01f0f5be2c3e298644fbe5ec2e582c2a46576b835f7430296","ssdeep":"768:WsahGD4FdWHwfGDf9vfzJEqO7J7mq9d8yo4Nu822vahvMKeNW83bdsWdC:tEuzO7oyxNt20ahVuC","tlshash":"df7365240868a876c8939447deb5ff3e9cf816790bc8996ebcb7975c01ec6610e9f413","size":74114,"data":"","first_seen":"2026-04-15T02:59:49.534147Z","last_seen":"2026-04-15T02:59:49.534147Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2f547b466c1fddb29e277760fc0dbe6","sha1":"a08414355baac881b57c6704cc9817b963ee6736","sha256":"d8ebf479ab43ce6ca5da3df5149b5c029fb8a3c053ccc3727b5f28bcdfabe355","sha512":"82d98cccd4ad81ae834ee8858f00c733ea142e6e4ba5d000da4f017f6a174c36150f6553ae190d4600d4b932a5c2dd035a402427fe6fee5a9f035116b9c5221b","ssdeep":"","tlshash":"a98000282c08200220823823820b002e222a0c20000a2e8002c00a8c0cb00ab3082c08","size":26,"data":"","first_seen":"2026-04-09T14:30:38.943749Z","last_seen":"2026-04-17T06:59:24.301452Z","times_seen":1367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8277e0910d750195b448797616e091ad","sha1":"3c363836cf4e16666669a25da280a1865c2d2874","sha256":"18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4","sha512":"48fb10b15f3d44a09dc82d02b06581e0c0c69478c9fd2cf8f9093659019a1687baecdbb38c9e72b12169dc4148690f87467f9154f5931c5df665c6496cbfd5f5","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-04-23T10:32:51.669086Z","times_seen":49873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8277e0910d750195b448797616e091ad","sha1":"3c363836cf4e16666669a25da280a1865c2d2874","sha256":"18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4","sha512":"48fb10b15f3d44a09dc82d02b06581e0c0c69478c9fd2cf8f9093659019a1687baecdbb38c9e72b12169dc4148690f87467f9154f5931c5df665c6496cbfd5f5","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-04-23T10:32:51.669086Z","times_seen":49873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96ef36e736a8b0748aaf6fa927874af6","sha1":"370d5bb27c2c10cfad937ced1ac0615efef0eff6","sha256":"c97e30c9091a369e38ecdefac9ac1499f1edc5562b4ef33a2b25124348a60a89","sha512":"8bc88db614735267c4eb354ea3fca5c99d479222730cdc4c96ac9c40d922065449c1b4c269a90a67e560fb24dbd91d9261eef14a220655acb67114ca8e5b300a","ssdeep":"","tlshash":"1be02da30b3318a3f3b7208060061c8ef7b84d97ac3e386e891070609da0ec3885d5c0","size":321,"data":"","first_seen":"2026-04-09T14:30:38.737466Z","last_seen":"2026-04-17T06:59:24.413247Z","times_seen":1172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96ef36e736a8b0748aaf6fa927874af6","sha1":"370d5bb27c2c10cfad937ced1ac0615efef0eff6","sha256":"c97e30c9091a369e38ecdefac9ac1499f1edc5562b4ef33a2b25124348a60a89","sha512":"8bc88db614735267c4eb354ea3fca5c99d479222730cdc4c96ac9c40d922065449c1b4c269a90a67e560fb24dbd91d9261eef14a220655acb67114ca8e5b300a","ssdeep":"","tlshash":"1be02da30b3318a3f3b7208060061c8ef7b84d97ac3e386e891070609da0ec3885d5c0","size":321,"data":"","first_seen":"2026-04-09T14:30:38.737466Z","last_seen":"2026-04-17T06:59:24.413247Z","times_seen":1172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.nice-select.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-04-23T05:44:09.540989Z","times_seen":7752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dbb3b8631e37f34ea6fe63ee9b4ce97a","sha1":"0e7d7587db07947fdb251af96fe65c654c3564c3","sha256":"772f6870467a4f642b7b00edd95041e74792de881892295cf775529b99c80293","sha512":"345c3351da8b1b6a8384939db67a35b12b88b7fd2ee2ca032bf7da402fdaba61c500bc5391629ab055d32569571c15c9bdcad82dec76408ad4fdc53f833ff7da","ssdeep":"","tlshash":"1b7000082c08280002ea3823000b000880a20a0000000808020800880c3828e2002808","size":22,"data":"","first_seen":"2026-04-09T14:30:38.720054Z","last_seen":"2026-04-17T06:56:24.077006Z","times_seen":555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2860b307d383aee35e17fc8bfc46b670","sha1":"b6893dac2cf0fdff672e86f0e198766cff2ee1fd","sha256":"3d9dd81cfd4303f2fb00f15ad55cffd5830571b88ffc4216d15b8b937c1b3729","sha512":"e2549c78e8d902cb3aae994c96564ba1b90a03b914412b1a44af5ab4d684860d61c0ed323eedb6257ce6bb82b9133bf64d8c1c7d549e5aa335347fb58a49bea0","ssdeep":"","tlshash":"15f002ca2bf857c14caa74ca509f3d3e84c022343dd698ae1965b2e505a4ed730a6f44","size":613,"data":"","first_seen":"2026-04-09T14:30:38.60118Z","last_seen":"2026-04-17T06:56:24.122154Z","times_seen":551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/bootstrap.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"86c66103329d2d376c5ec84117058497","sha1":"d65c1eda71a436de34a324b73708421225785f59","sha256":"83ce8dec787fb3ceacaf7a5b61f36475a8a8ec525717aabd73dd6e25522d28b8","sha512":"ecf10c6a81c9350a04aa9c6090ab24a17a448258a81272a57c231c6159a697cc898e6046eedc1a0669c8f8f2d4d1c353c36556862cc96141b59264b3443a35b7","ssdeep":"768:w/gB79Mr3uDTVayu8Of8rm7MT5ZFcHUbw8gpQCYewiTlAx17j0FhlG8KktWyh6c:wWYY28meG+zgA8Oc","tlshash":"2953924ab254787206cf7475817f060fb33a6899a446813cb96ad8de1b7cc897173fb8","size":61768,"data":"","first_seen":"2023-03-07T12:05:17Z","last_seen":"2026-04-23T09:10:12.440476Z","times_seen":920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-23T11:12:34.374519Z","times_seen":212501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6984e64250b12e9cb2a122e5bf0f76c9","sha1":"4634af473d047237e8fd11103ddfc5adebe87863","sha256":"7219eb9c822d2773d3c6315860d236975e0c87a824d9441d5487824452353e9e","sha512":"7f435aa5bfeaab87b7502c7b93eba916a397d51922ea7412f432e246890ed57d5dedb1d012ecc3f553d47c7623fc00e9cae0ba643fba84ef29288d7b8f6ff7fe","ssdeep":"","tlshash":"b5b012852e462d14201511164433989c1f916f20e823e48d4614c71e1fb238f12478e3","size":95,"data":"","first_seen":"2026-04-09T14:30:38.928756Z","last_seen":"2026-04-17T06:59:24.339541Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"10174562c7be5ce6a1f49646c84e4d92","sha1":"9c778b075d5a98485603ef80e0bd6f962a144fb5","sha256":"a44ece8547f1bd4dea4a8e2dde0159922b4495c78553b1096352f394f3ed2492","sha512":"a8ed4380b113d741c4a18b401fd69260c00a266f5573e1315f25baeba07a4d1b8d045021e7a4383b5ef11f7cf1bcc287e62eeb8597ca2470250f068af6bd7789","ssdeep":"","tlshash":"c190028421536050027ea09001371059e6793948a51c1d59544001412a5445ea115618","size":49,"data":"","first_seen":"2026-04-09T14:30:38.935925Z","last_seen":"2026-04-17T06:59:24.433498Z","times_seen":1295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ef1cb6e72d149b184cc241037203f60b","sha1":"cacdf0823fa0a658842237b801fd60d5112a61f1","sha256":"5bddbdea794b5ac1ebd76c5987e666ec03cc3f70f07276253550ba7bb8876cc0","sha512":"6aa7238dae3b76f3b26ef053488a47a36d1b91aa3bc5ad9fbfca1137bdfd6f04d9b1324af8d14966d48c449dbcba5f8bfb007a9ed67eb7c1771d955f6e5d3ece","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000c000000000000000000c00000000","size":2,"data":"","first_seen":"2023-03-08T05:16:31Z","last_seen":"2026-04-17T06:59:24.410779Z","times_seen":2331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b35f820c81c88e0f043e34f204d7552","sha1":"ee6bd74d5bba621d6f9b22fb69d8f5d6d7520b36","sha256":"be053145b5579f0623c7abecdc5b76fe68bcdc8cf9a236a3b1b37bbd8fd38e73","sha512":"657714f1a1a77315df540cbdcdb00ef7516116828d7255261a7209217635cda852fb0bffbc85843f7e3e388e1ce03c8d4f757eba2e49e4476ca829e19ca42114","ssdeep":"","tlshash":"87c012d8760c59a543241c2ea966c4e812d2c1848ca54864074b015f0bb5d12dec9e2c","size":181,"data":"","first_seen":"2026-04-09T21:05:22.052956Z","last_seen":"2026-04-17T06:44:31.294985Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1fc378d7a35ac46d0e8dcee217de3147","sha1":"2b4a6c6493bf4748649fc44568f80657a84c6daf","sha256":"3f6eb2b437feb99af5cc9c880deb85d3bbe2ed13c039d5697bc114ff92b4a3fc","sha512":"fd7a615fab8bd87272faaf95e260eaa10e0d7fdd7e58ced2026b800e0f4ebf37ed632c27d026f912fe210ec3b647dcec858b18bab2be9d402427a37aba0cca6e","ssdeep":"","tlshash":"4aa02202282830820282288b303380bcbbf382000000c88c2f38c20c2fb88cb0383c23","size":72,"data":"","first_seen":"2026-04-09T14:30:38.873433Z","last_seen":"2026-04-17T06:59:24.438205Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"39d0601d6a1eeda483f887b180c8b2e0","sha1":"1369910be3f1f9de3ac663c79065c96f45b6fe8e","sha256":"d47420aa77df2b239f2cfd603fc7ec84f132415b903951adadfcadb1b9a8abe8","sha512":"7b63dc6fcc1fbb2d1af29ddf9da0f199e88899e77ca2c96abb2eb3acef2fdd437ead60f27e8458872fdf1580d2dcabbd3453358be76064cfc16b9aec1f26c88b","ssdeep":"","tlshash":"7dc0c080c7101361034641401103714f104021bf37d453380371d0c3ca542cc0066cfa","size":166,"data":"","first_seen":"2026-04-09T21:05:22.175979Z","last_seen":"2026-04-17T06:44:31.343993Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","size":23033,"data":"","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-04-23T10:31:09.789311Z","times_seen":2864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"10db8021dffc13d3d0a71f94fbd60491","sha1":"fe476cca239bc61cb08a492b78f5caa33d338a44","sha256":"c0d4267dfa256bef05bcb91672723edad5cb4b1291986f582ee3d75159e225f1","sha512":"f34c08c9a9caad5762745c7cd8d843649809e77291fcb87b65c47bb3202399587f621b3684fa3bb055cb40cf7c26da045c27c31c7663bae7a3b140be86ec02a1","ssdeep":"","tlshash":"f0d0a7c2706db45117237c18099b7819a57a759a761e132c851280f71b6184b802bb1d","size":222,"data":"","first_seen":"2026-04-09T14:30:38.939343Z","last_seen":"2026-04-17T06:59:24.4297Z","times_seen":1292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"06ccd3eaca84c7130f610bb19e943760","sha1":"2343e311e315ae123b8ae2d7422f8642dc20604e","sha256":"bf35c7f6dfe199dc06f3c872defd6114e89b1cf2e54e2e312b3ff9939bcd53be","sha512":"04355bd8f30312b9e4ffcb3e062e0d7005d2f95ecf9e9af7774ffd1cb10e1f5a53bcb4851839aa886610b313c961c6ecc432fbd8b93f9acd7551530bcc43c092","ssdeep":"","tlshash":"19e0c0f117c9823579fc0a6ccc732101a1b8b1f393a98ca62484c19590b6458131eda9","size":348,"data":"","first_seen":"2026-04-09T14:30:38.828249Z","last_seen":"2026-04-17T06:59:24.472355Z","times_seen":550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-04-23T11:12:34.379982Z","times_seen":234483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bd63cda5e59ddb168ec03847f26b831b","sha1":"6edf35ef2232832ac3773615d43febc79f5a3826","sha256":"c08f008b22fde28129086d85bf15a301d653a9d1932b35e6bd0c8e97f9a9deca","sha512":"588f0a9db8e300cc21e03dfd77eab3a5c210b5a41a66addf5429beac69868d43545fa048669a4430e92591cefb730cc7ba7d90073e1e65ba72bf09ca41108bfd","ssdeep":"","tlshash":"c710000000000000000000000000000000000000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-04-17T06:59:24.295445Z","times_seen":2280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b86dfe09a8f8fe2d2d8ffa1844bda05c","sha1":"64dcb193d1a766cfe70a5faa6389dff38959f7e8","sha256":"440799c9b176e7ba762d6f464125ded5fa4ede8c1302f647c7b5dc206e830888","sha512":"56d31f2026e5361a02043f02f707a19e5cbb0f1c92b791697ac989d7efa9a412897e50c7d08f5843b64e771ea41b534e0d169df16e8402c4e8f91f3c71d25788","ssdeep":"","tlshash":"419002072e042958522a7426469bc52ca5f24a152400541d0636d34d1b711874007959","size":56,"data":"","first_seen":"2026-04-09T21:05:22.174347Z","last_seen":"2026-04-17T06:59:24.325384Z","times_seen":549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cf3e3b2a4906e332d5f9a1f4993d972","sha1":"44eed5afc34038e5c490e8392aa92f5496d9109d","sha256":"12cac94cb78b8f62ebee9b93820de42e5dd1b6d711e8bfa50870e142ee45a86e","sha512":"1b3e6b8261b6184281766fc1772607591e451751fb49fba220b53e697f27389ad6e48504d08f242045418f8926656d186b2d7c8e8bacd218cae4087b2d5fe7b6","ssdeep":"","tlshash":"e4c08c8c1926002614c0d8208fbbce08c30d602644290e0d4161b4c60d80e101973482","size":131,"data":"","first_seen":"2026-04-09T21:05:22.221652Z","last_seen":"2026-04-17T06:59:24.296333Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6abe33f215bcc63cbd8f92c19e7cd537","sha1":"edb1529a1829b390f3060008f2c609a109472f43","sha256":"c70d6cef7d4fc20aecb20ae557e7e26c84ad39d97ce91f386f34114cabaffff7","sha512":"95c914d92d2e70981be0f0acbf2a36670c8406a07ada88d0df71c0249c930368020594790435db2734aa7228833551a4d5d4d300e3d92ed23122e13071a183d8","ssdeep":"","tlshash":"c71000000000000c000000000000000000000000000000c00000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T14:13:33Z","last_seen":"2026-04-17T06:59:24.464339Z","times_seen":2811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"41f598e6dcd36b3c751272d11bac0d5a","sha1":"1cc1cbc38136337e90a150c8918057a8b8891819","sha256":"5d8d2e37d26c3db3345eb7595fef365b59ee5ca477323a5745621a0f1c73da3e","sha512":"30efa9c7380852f30d017dc1bc9048ba610e3bfc601875e32b92b016074f0b989245436568d0ac27cfc39f32062aaac7931b45272dd0262eb8c0cd5c44a37c6d","ssdeep":"","tlshash":"85b08c8c1926002614c098208fbbce08c30d602644290e0d4161b4c60d80e101973482","size":129,"data":"","first_seen":"2026-04-09T14:30:38.623395Z","last_seen":"2026-04-17T06:59:24.304507Z","times_seen":1297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/odometer.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d928a13757dbaa0d5755c6252a4d2fdb","sha1":"e1ebff681214e87f52fe88602a309c94924ca17b","sha256":"0490e46e0015407d9aa0ad0854635b87b7be7befc7345b25afe85d0d21ec2c6a","sha512":"1916eefc9c258e1830174b228774ac1de84bbbe764b7e1348d36163562cc09c6206ed0fa2a72ebf3656fc270ef8a6acb383d1aec3ad9dfb1ac6c8fb45799731d","ssdeep":"192:HABz7vQK8QecCHAOcu2a+OdI5s/GMb8XuulT:gBXv18QecCxVxz+7dlT","tlshash":"e6228580ba11a735835371e151bf0609b7bb99aea404401df67c9dd9be29c38e12bf74","size":10262,"data":"","first_seen":"2023-03-10T13:51:16Z","last_seen":"2026-04-20T06:03:17.113758Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e185d3dc333ab25f68b877d037dbc1ec","sha1":"8acfd520f5aff18fe8594bccbacc7949f018389c","sha256":"04faa458978b6aec77b6d6179420f2bbe07f6e8333d6e2d003fc82fe30c28c65","sha512":"8295185594cb7e58fd827d734b5e80c7be1c75b4e05d1a96c81a2cd1b5b5de317947411f115558c9e07fd7b2bf854bef8c61d0f74ad09a424c465806a72d92a6","ssdeep":"","tlshash":"4ac088e320f0b8c32a232283300a382b202c20eb32020e0c0880c3222200208c22bea2","size":133,"data":"","first_seen":"2026-04-09T14:30:38.666313Z","last_seen":"2026-04-17T06:55:51.870644Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-04-23T11:12:34.476972Z","times_seen":132079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5854246b025dfc6a7cc64db2e78ab0a1","sha1":"c99d9cc9debbea7e8a0f6a9ebf0977bbc430b00e","sha256":"dd5dd66346e86f2c57896094de4b32ed1ca12bde3c3abc1cab6889e6a211c24c","sha512":"4be19b11199806750604a8ebff51e0c5f6bf92da1d0ea225695e9bb9dcd8978607e0d1727c4dd497bef9dbf6c380f5aff3d12f62efb3124dcc90e3d65eee5f9a","ssdeep":"","tlshash":"cf51dc3cef61946bc4f9e47ab4831b43f32852478415981fbd6e089c5f4e8a4e69a738","size":2895,"data":"","first_seen":"2025-07-12T07:10:36.200304Z","last_seen":"2026-04-15T03:01:03.512165Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bd63cda5e59ddb168ec03847f26b831b","sha1":"6edf35ef2232832ac3773615d43febc79f5a3826","sha256":"c08f008b22fde28129086d85bf15a301d653a9d1932b35e6bd0c8e97f9a9deca","sha512":"588f0a9db8e300cc21e03dfd77eab3a5c210b5a41a66addf5429beac69868d43545fa048669a4430e92591cefb730cc7ba7d90073e1e65ba72bf09ca41108bfd","ssdeep":"","tlshash":"c710000000000000000000000000000000000000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-04-17T06:59:24.295445Z","times_seen":2280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d6ff1ddccaf97e074ac78d7d1749a658","sha1":"82ad3da0ddfd300d797c6ecb6684ffd871709181","sha256":"3ea1dbea78e232d2444e39d273b098d8c4a367e61b45c33f1f4303cb1eeb734d","sha512":"48ee2a1c5d6cf7d615a2aed8f7c13bec4a1047a6d5a1b47ca503f31772f59cd1017f0915f80e994559553e44b520ecde6808fc5d4ca68701b21bbd8e0dcbc8e5","ssdeep":"","tlshash":"c710000000c000000000000000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-09-06T10:27:18Z","last_seen":"2026-04-23T10:38:24.19354Z","times_seen":2681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e34dff622740a5e2d6ed9c41d3c49688","sha1":"fadd56ec452f32494dcac8d1adde33d451bf70c7","sha256":"3f98114b0f77b7da78bca527117c4f3126aafbba8b94b68b0bc3ccd13944258d","sha512":"f711324b51b9640ffb3788c2388375542c59df3dcf4a7c772d5ab609148dcde0e150db258d86a8a11488168374f0fcf95f7ca2831eb7fb12876e2bb9b6f666a4","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000000000000000003","size":2,"data":"","first_seen":"2023-03-10T14:46:11Z","last_seen":"2026-04-21T06:59:19.7313Z","times_seen":3373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"73bebce395b6f1efedcf6842fbdb4d76","sha1":"42a0d3068dfe7945d084813fd66eb69745020815","sha256":"a898df22bfc74a1ae298c73211ab3b319e5b8da7543d6cd002a8dc4f8723be43","sha512":"ae747c3e0ee4f2e3f9ee5ea12badfba3309cdbaf779c150111a5dd773db27343bbab108d83a9593a9481210ac446f74cc296f345286b96d39a4794197cbdd3a9","ssdeep":"","tlshash":"c71000000000000000000000030000000000c000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:07:29Z","last_seen":"2026-04-17T06:59:24.315465Z","times_seen":3132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/wow.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"21fe90eedcbaafb4ed529d78418d30bd","sha1":"a16375b80220d315151f57bab2d4ee03c9fe1d20","sha256":"7852a22b72ead62cfc4a1b1ca32874b3e222f232a991a6d1432313572f534135","sha512":"30be63048c2b41ea7953dbc137b4c9047704196430cdf1995334092a41fe8c6336f1f109c195c5b47c857ee92838e4ff8d255d7ca8b8280793bc012d35b7fcdf","ssdeep":"192:tmEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:EEE/Amu6qUxVBxGkAI///IR","tlshash":"99f1baa5374a70718e9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","size":8155,"data":"","first_seen":"2023-03-07T01:37:53Z","last_seen":"2026-04-23T11:09:30.651505Z","times_seen":4918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","size":62371,"data":"","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5206560a306a2e085a437fd258eb57ce","sha1":"c9ee5681d3c59f7541c27a38b67edf46259e187b","sha256":"de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc","sha512":"40422e2733a73dec2f9aac48e2ab48d3b2fdcdc1e3a88bc7ea855227e62c029246da1dd49dd057bb8a8b796b3b2a6f60d9d8a85de53df597e422b2f68c54cfb6","ssdeep":"","tlshash":"c70000000000000cc00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:04:13Z","last_seen":"2026-04-23T02:41:32.366058Z","times_seen":57710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4eec229016c6db9d74615d9228cfaa6e","sha1":"b528d8284279db91d827702caad2bc340fb7e071","sha256":"d34cce1d2a5670fa051bd45d555dcf97369a15d780d608b0c954629975cb4dd6","sha512":"e160a2849e1b4ee5e516633506a3590e959fac82d10a53051fba8ec09423071bc89041cb0751939816c87c76bf924d2ee9abf3e9253bc079084c492df3bebee1","ssdeep":"","tlshash":"8ac080c6a159882483d144574132124cd1581cd5d4484511c251f45575b17055134697","size":154,"data":"","first_seen":"2026-04-09T14:30:38.855112Z","last_seen":"2026-04-17T06:59:24.45859Z","times_seen":1291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"81ea5c4b9ee1de3fdb0a78c4d4c0d02b","sha1":"a4769f237720272c190120d078948ac1915db749","sha256":"30fff9f1b2c73f73d90cd7fdc237a4e83542bf284db30c026048b5251210f4ea","sha512":"a81a5e61733f8d2f53cae15b6182307aedd1607beaa356077897ef9366a9550c272be1841b858e74b3e935b1ede342b34b3f26a7e75778cf3e0dd92d4a9a30eb","ssdeep":"","tlshash":"a6e02bd0d41617d308d2dcd9f01a668037045e21a5be4f5bd501531294649c699d7e5c","size":373,"data":"","first_seen":"2026-04-09T14:30:38.615462Z","last_seen":"2026-04-17T06:56:24.221899Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d7e298dc8cd5e3399467caed16a9af09","sha1":"0e96bc6321af6918ee7983b22fe6202861280dc3","sha256":"c0fe94eff7f8dd0f13b0e74370c7ca39fa619fbba927d95bebe016f52a1d01b9","sha512":"888fe707a0b93026e0573cd5e514cd92dddd195a7028f2085ab14fb5314793cc7dc69553a32790d1e673a5c36ebb86a5eb87447ecaf9e7362d2988695ea4acd7","ssdeep":"","tlshash":"e5e05c80c54a17d10cd6dda9f01b628036591931a0bf8f5fe822d303d97a942eac7f9d","size":437,"data":"","first_seen":"2026-04-09T14:30:38.868435Z","last_seen":"2026-04-17T06:56:24.112726Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-04-23T11:12:34.379982Z","times_seen":234483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","size":510435,"data":"","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ca7b4fbd18ef840c4db69864b6a7a19e","sha1":"a97c923285d0395d240a5fa868a16180c95b2e27","sha256":"448ac88f02b27cf55175b18fef45ad1cfc4ddfe5cb4fba3d30a0283bd5332942","sha512":"855da600a2346821dc9dd45144965f30ee1ff4d90ad5a9887675eb1e2d153f7c8f82535eddc985a0be0e4ba4a562a91f09741180d4b63c99758c7e9b27ec22b4","ssdeep":"","tlshash":"05b012dc376e4c2004b7708e1023701403d0310054164c8e587ed54c1bf01c10441c23","size":90,"data":"","first_seen":"2026-04-09T21:05:22.209644Z","last_seen":"2026-04-17T06:59:24.331204Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f3f1fecfadf51e00f22badaa27cc906","sha1":"7c5ba31de4260ad40825a29ea7285fa10cb47fe3","sha256":"40cc5e42b26bd2aaa89d1dd60c5bd1e0c3d222d2bdf0ec34c61075912133a666","sha512":"c625ed3dcd6e23c9379295fb4052b01ea82197da45188e3cc7c11abcdacde1699f9177e6558678f611922e7ad488e719d02584ef4af8354b9dfe0a540f7587dc","ssdeep":"","tlshash":"f3e0c0c52e12084b000600104013b32b63e0541055177adc522da4ec1ef1c4a420dd2e","size":334,"data":"","first_seen":"2026-04-09T21:05:22.138518Z","last_seen":"2026-04-17T06:56:24.212008Z","times_seen":571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fcfa44d0466a6d608dd60248e814f4f1","sha1":"f26cac45c18befa69373abd59c39e721f490cdd4","sha256":"73c55558a6783e940e2e822d9268074a6c0fe84a4e8a861d174286e3cbd640be","sha512":"7edf0e0811df3e26f647204bd45347e4ac556c8db37e4f1920be85ea2b4b34967760743639645587311e24a3a290cb4235e063b429cf95271e0b043213e6af11","ssdeep":"","tlshash":"71c022fa286886bf403302900cf78d8900ea309fa9a50b482934a241089404863b2a43","size":190,"data":"","first_seen":"2026-04-09T21:05:22.102625Z","last_seen":"2026-04-17T06:55:51.901528Z","times_seen":573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f374759f30517a5de5bbe4c07eb079f9","sha1":"74eccb760c00d3ac42813a8fc304543fa0078503","sha256":"d8ba607b3b194cc1463e166f54eda6976656ef23042c9d0b4297d391596d9df0","sha512":"984d28add61e4b53a6ebf26e42728837c4a58a1a975b36df0698986dc1b8b1c86fc9eebff8bd772cd4a0e41756ce7f919ddb90778c8a0f5ac7882d750a11491a","ssdeep":"24576:No+pIPUKIWbouNnyWMhxfJqdePN5r0C3Ze0XVxfq:NBOPUK7bozVhxfJqdePN5De","tlshash":"4e655dd932d2f86143a3e0eb183b0101f57a99497448ca5cbabddeda1da0d07617bfb4","size":1486235,"data":"","first_seen":"2026-04-13T11:27:10.050236Z","last_seen":"2026-04-16T01:05:21.931651Z","times_seen":1080,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2f547b466c1fddb29e277760fc0dbe6","sha1":"a08414355baac881b57c6704cc9817b963ee6736","sha256":"d8ebf479ab43ce6ca5da3df5149b5c029fb8a3c053ccc3727b5f28bcdfabe355","sha512":"82d98cccd4ad81ae834ee8858f00c733ea142e6e4ba5d000da4f017f6a174c36150f6553ae190d4600d4b932a5c2dd035a402427fe6fee5a9f035116b9c5221b","ssdeep":"","tlshash":"a98000282c08200220823823820b002e222a0c20000a2e8002c00a8c0cb00ab3082c08","size":26,"data":"","first_seen":"2026-04-09T14:30:38.943749Z","last_seen":"2026-04-17T06:59:24.301452Z","times_seen":1367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"43fed148b92abbec9687af1356c7e347","sha1":"2bf8f41cb838b29ccecca244812738379bf6e57d","sha256":"eb074cd8374ba297218e47323e01f47212c25e4129582cb9f77072841386bda3","sha512":"d42e80fa6d2d14679a0d72f25cb95d148f1a4b750368ed95d829c079dc33671d2da1e5531ec6f734c9758f93f2eca8574ed7f27bc9c15ba4e9efdf08982ddfc0","ssdeep":"","tlshash":"c71000000c00000c000000000000000000000000000000000000000000000000000030","size":2,"data":"","first_seen":"2023-03-10T18:32:14Z","last_seen":"2026-04-17T06:59:24.447038Z","times_seen":3604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c90b440e841a6b82e1f9b3299164296b","sha1":"5ef8766de935324424b563aa3eb0c7466b293c94","sha256":"94091dd64a21ffe94214bc6d17deeb43873a5cf2f0a71b4b5caa9a5c81b6967d","sha512":"131e9c4698b461db40dc8b4a28f2ab88e6e07e0b9e2bafd183cb0a426b6b70006ca425f1a8336126f063b557f538571928d7af23161e4aea869cc515377fa8bd","ssdeep":"","tlshash":"c7100000000000000000003000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-12T21:10:46Z","last_seen":"2026-04-17T06:59:24.316424Z","times_seen":2455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f9b1a86615f85e9931a630e225ac5ff0","sha1":"d5c2d4257a7e35a74aaae2912812f4422de98238","sha256":"f81edbdc30066b5eee2f863d01c0c264915802c37172a48a43ef0460538aa839","sha512":"4c2c0dc143934187a5b3d3ac3ebb2726b187f4e244d95350ff001308ac08c87f33c6c8679af988c6f5a6aac82075474eaf66e81ec8bcfeea9e00f53dec66a6ec","ssdeep":"","tlshash":"f0c02bc4b04d0400f3d1901b20364004eb7d1898ec04c988d152a899797330b043cf3a","size":131,"data":"","first_seen":"2026-04-09T14:30:38.825378Z","last_seen":"2026-04-17T06:56:24.188597Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"897717b8b020d65743bc414347b71c56","sha1":"9eebf2fe10eda4623743b2a7d573001b7e7d55c3","sha256":"dc79785ee6a5e6cc7896bb2bc863e941675e95519616daaab59fccf11303404e","sha512":"e3f92bd27a6b2d85e92538c5cc89ca4cfaaff069f24cdd0161b7988129d07dab75d242206faa2fdd9460fd61f832361752afa4de71b222614d48255673966c43","ssdeep":"","tlshash":"8170000a2c08220000a23820080b0a0a02220a08002008800000008c0e3082e202280a","size":22,"data":"","first_seen":"2026-04-09T14:30:38.681354Z","last_seen":"2026-04-17T06:55:51.88213Z","times_seen":538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"045ecde05e9b3e47ac3ead00a28a8d85","sha1":"6d93cb1962c4320f7a732f5920adbda4ef39e969","sha256":"70a392e112d1d45a7e8ed6c51e994f5e7e168a5e22b2a81a619cb1150e1b674f","sha512":"c1e4591c6cc0343a88f507b1bb5612b686f9884328798507c6dc39b041dc3610b95f612077e385399a129cc9d28310fac0ca65ddf289bddb58954c232f1bf1c4","ssdeep":"768:JsmhGD4FdWHwfGDmvBwJ8yO5JCmq2Sflov1Mxu822cahfTzNWrcq0EVc:Go1sO58lAMxt2vahwc","tlshash":"547364640868a876d8939407deb5ff3e9cf406390bc99aadbcb7975c01ec6610e9f413","size":74256,"data":"","first_seen":"2026-04-15T02:59:49.551755Z","last_seen":"2026-04-15T02:59:49.551755Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"680f3e24c7ea2843075fc5fee7d9ab21","sha1":"bf023983547f014f78dc1c3881b4e9e4e6db4264","sha256":"23508cb67135a1b8c8ad99938c2a065934348c0db2ee5a1b78b9244c29285c50","sha512":"2c55f44a0f9686eebd3fd1de4046c74c86f2e441ebe29579e8a5b640812f8d780808eebae23da63d44708e4526ce7d3341de9c905ce829c39d7867b6819a5998","ssdeep":"","tlshash":"a601d0302616223d08e89fbe581331908675b166e65b0c377804eba3d5f545338615b3","size":769,"data":"","first_seen":"2026-04-09T14:30:38.649545Z","last_seen":"2026-04-17T06:56:24.125428Z","times_seen":568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2ba67d6a4d20b3b76a56dbb8968608a","sha1":"03207e969b4f76089ce22be972d5611e43525fce","sha256":"5f5ba24cb103199f2c493cb04282f6c51822a9a3034fd4e53d7bb8a318b0dc70","sha512":"577fc0cabeef8419c313cbb234b8e778c18bb43ce8696b2abc316db709f3e4bedb6335ba7442cf486299ce0cccd241cba5b1b48831227d0072eb5cb2e507ae55","ssdeep":"","tlshash":"ebc02b386e2a606a8384e26c3f67c8c8ccf20f3300f9156c4911e0068938f81008fc80","size":142,"data":"","first_seen":"2026-04-09T14:30:38.66216Z","last_seen":"2026-04-17T06:59:24.455988Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cf2d753c03f8760a7603fa34ab0ef518","sha1":"f328760fd241677c38b823a0882cc89eb7d14078","sha256":"1888911de168ad3ece7cd5207512a7f06ada52b368fbcaa2da30e59d1f79ce84","sha512":"e107d688390b515855f2e2df3c536a40e482bd5b06af60cd6287e84b8ddd95d4bcaeeb1bd3de543f798a177318777c21bd2786a4ae18bd8b3d82a5963cecbb9f","ssdeep":"","tlshash":"0dd097f5f5e330086222a68621bdc0041018603abc9a48806399ca8b262220c03cb819","size":229,"data":"","first_seen":"2026-04-09T14:30:38.790161Z","last_seen":"2026-04-17T06:59:24.408308Z","times_seen":1293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1458757494dece69a3262c2326c7f2eb","sha1":"ad7d6e1bd6e49ff9dc7188af0661ef831ff2702e","sha256":"f3c8034a412f3e9d8872238e696e92c73e54641b5a65a0bb22f8b55eb9bf08a1","sha512":"f5609eb78cfbf3ca545dc3796214a3c0e3faa7c64e77b7026642f13715666b82d8ec465d44a0445cb31062f757d17ebf874ede2ca830f17f052e0e1b13788937","ssdeep":"","tlshash":"d37000082c08280802a23823000b000800a22e0000002a08020000880c38a2e2002c08","size":22,"data":"","first_seen":"2026-04-09T14:30:38.677564Z","last_seen":"2026-04-17T06:59:24.450265Z","times_seen":1293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.magnific-popup.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-23T11:10:45.450594Z","times_seen":57213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"34d38829ff0ed301cff519eedeae0005","sha1":"7cfb15cffd38535335b4c8a1a30cdcaf99852d8a","sha256":"0f648848e9f556aaf97c67cf5ddb3c63c7d6cdbe011379a5d759e9418c816537","sha512":"51549bc0c293062cee01b8ecf4fb59cdd83db7a2bd349d6a269dad032c9b530bbca62d93eff013c408f370302fe55c3fd6c2e25d9515027b971e0b701adff71e","ssdeep":"768:5smhGD4FdWHwfGDkOpeJO0OGJ7mq9d8yo4Nu822nahaMW8Nrn8hxkFL:2oC2OGoyxNt2yahgSL","tlshash":"047366240868a876c893a407ddb5ff3e9cf416790bc9966ebcb7975c01ec6610eaf413","size":73583,"data":"","first_seen":"2026-04-15T02:59:49.554778Z","last_seen":"2026-04-15T02:59:49.554778Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b787d22d9cb06342658bf546039117bc","sha1":"a7ce5b0c7e956b8e3c1a5c254c910d57c56e1b57","sha256":"f5fe88ee08735ae259265495a93c8de2b0eacfecf0cd90b5821479be3199fa8c","sha512":"a4f3b3c9e61b838f8cda07cdaa4a403bfec911a3ef199a1cd92d1a2513fa584029e231e927f8506d3397015250c44e1db5e39d557064a6d00c1e50418addef88","ssdeep":"","tlshash":"c710000000000000000000000000300000c000000000000000000000000c0000000000","size":2,"data":"","first_seen":"2023-05-04T03:04:02Z","last_seen":"2026-04-22T02:22:17.318886Z","times_seen":1736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b34cab55d3c63f2423425c354cf90756","sha1":"24aa05536e683c08a81c5932191936aef825259b","sha256":"fb2c7d8dd35f85951b7c92b4b4c3b7332d67bb93c82a2b3303eb2106251bc75c","sha512":"cce7cbb016833d7a790332258363fd73a7d1da763f9cf5fed6eb77c57f0da7553ee594658f00b433b3616d19c5cce68760066652e5a02c9f2056975522955cc0","ssdeep":"","tlshash":"c710000000000000000000000000000000000003000000000c00000000000000000000","size":2,"data":"","first_seen":"2023-03-14T16:29:28Z","last_seen":"2026-04-17T06:59:24.324536Z","times_seen":2634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0b9503d19c4340380b3105a1948bbf0","sha1":"2cb8800360b77cb89c67355ce2d2666f6a2ab280","sha256":"77085d9de83ed4a6dae0417298b1693dcccf0f9fb04203e174185db03761f511","sha512":"092b1b7cafd2725a9c89b24e4b0ef5f967830365b9c8ff933a354f04618bcbc749a3b61cb09d5a379c991994237dc18b99f8d3135106dd97a028c84c7a650c61","ssdeep":"","tlshash":"c710000000000000000000000000000000003000000000003000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:49:28Z","last_seen":"2026-04-17T06:59:24.337098Z","times_seen":1491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/b174a5bb/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c79935b96ee2b6e58e19a93d2fbb79f8","sha1":"3aa92149b79de1fae41285c14446083d7790d08b","sha256":"1d85f69390db9520c158b35dbbf3af7535861ea913cc9c3cd1391fd2a1342d67","sha512":"97744f3ec55c8c2484e0a93d69711873b655aee7d58ebd4c2719908379f622c8468d10f74bbef4af6e65738e3a84a66239e38fea0cf02819ddb00a15ad15ec92","ssdeep":"24576:kJyXLT0hs5nGxdgDX0jESOFNI3rB0Kn7nxGLtW:kJyXLT0hz+DEjESOFNI3rALw","tlshash":"f6653a993292b42643e2e0e9582f0102fa7a5c44f44cc55dff3adeea2d65d06613bfb4","size":1486862,"data":"","first_seen":"2026-04-14T10:33:28.175497Z","last_seen":"2026-04-17T00:31:51.856252Z","times_seen":862,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/b174a5bb/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5439ca79b206d9b807f9448aadfec5b1","sha1":"0c5f27c191a5ea5fc685f8b714be567d17e6bf42","sha256":"889f5a5434bb54931851a9a93114fa76c327c13f48f0e4f6fddd8e5d2a707edd","sha512":"f1f7264158397f579947a1e5b787a4ecc5484360dcd094dc54834179534da64669c060f18b84b3086a0d1a003c03d9ce490e41abf670f60c780c3b5dfb5d4fd9","ssdeep":"","tlshash":"36d0a7e713859e489239a52e15a6d26c86a019088c39684d4e610da886a0a26866aa92","size":232,"data":"","first_seen":"2026-04-09T14:30:38.809324Z","last_seen":"2026-04-17T06:59:24.299947Z","times_seen":1328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/custom.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c26a785c8d563dae861e970c6444189","sha1":"e65ba95e755885ef80d20a27055d24e882d2d777","sha256":"29ec1b8f57a1fe87ef14d3097960338658f8d62839f0b850c0a07288ff237fc3","sha512":"9e5df2561dc71589171275727cd9bb925a482d3d794597021b66079e423ec6a00ba887cabfad3e13d24cb1c8fe19cb2a4a6e25a4c988011533dda8739504d588","ssdeep":"192:GSVffzK6zBOIdsObuitTzB5PCP1YE0Y95M5U5cPP/l:GofzK6zBNdsObuitTzBZ+119auWfl","tlshash":"8ae14546f77c10a059bb71a98abe91c2573e2103f80765a7f0fd05285fc967e30b6947","size":7085,"data":"","first_seen":"2025-03-20T21:52:11.231494Z","last_seen":"2026-04-20T06:03:17.152231Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6984e64250b12e9cb2a122e5bf0f76c9","sha1":"4634af473d047237e8fd11103ddfc5adebe87863","sha256":"7219eb9c822d2773d3c6315860d236975e0c87a824d9441d5487824452353e9e","sha512":"7f435aa5bfeaab87b7502c7b93eba916a397d51922ea7412f432e246890ed57d5dedb1d012ecc3f553d47c7623fc00e9cae0ba643fba84ef29288d7b8f6ff7fe","ssdeep":"","tlshash":"b5b012852e462d14201511164433989c1f916f20e823e48d4614c71e1fb238f12478e3","size":95,"data":"","first_seen":"2026-04-09T14:30:38.928756Z","last_seen":"2026-04-17T06:59:24.339541Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"62cdaede29242a62b3f85c145c19b6b9","sha1":"bb21c4b5dca53d0c117d86201a62af7f6de8195a","sha256":"2ae02170c0b05fc9e477c6cd01c09d9a635bd001d45e0c13dd1ea7661c1ac639","sha512":"f9523946fed9b2ffb4364ec642c042a1f40cd50ce457869dee39b495515af1d07b01d12cd227a2ca79544d5c9112c19cc5068b3fd1f7b86cc9e59d5f5079e678","ssdeep":"","tlshash":"93e0c0e117c9823579fc0a6ccc732101a1b8b1f393a98ca62484c19580b6454131ad99","size":346,"data":"","first_seen":"2026-04-09T14:30:38.619809Z","last_seen":"2026-04-17T06:59:24.326185Z","times_seen":1295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1fc378d7a35ac46d0e8dcee217de3147","sha1":"2b4a6c6493bf4748649fc44568f80657a84c6daf","sha256":"3f6eb2b437feb99af5cc9c880deb85d3bbe2ed13c039d5697bc114ff92b4a3fc","sha512":"fd7a615fab8bd87272faaf95e260eaa10e0d7fdd7e58ced2026b800e0f4ebf37ed632c27d026f912fe210ec3b647dcec858b18bab2be9d402427a37aba0cca6e","ssdeep":"","tlshash":"4aa02202282830820282288b303380bcbbf382000000c88c2f38c20c2fb88cb0383c23","size":72,"data":"","first_seen":"2026-04-09T14:30:38.873433Z","last_seen":"2026-04-17T06:59:24.438205Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c90b440e841a6b82e1f9b3299164296b","sha1":"5ef8766de935324424b563aa3eb0c7466b293c94","sha256":"94091dd64a21ffe94214bc6d17deeb43873a5cf2f0a71b4b5caa9a5c81b6967d","sha512":"131e9c4698b461db40dc8b4a28f2ab88e6e07e0b9e2bafd183cb0a426b6b70006ca425f1a8336126f063b557f538571928d7af23161e4aea869cc515377fa8bd","ssdeep":"","tlshash":"c7100000000000000000003000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-12T21:10:46Z","last_seen":"2026-04-17T06:59:24.316424Z","times_seen":2455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bc4b25d7abe5c9208ea866048151de25","sha1":"add03133cd5c2609ed6cc78ded74dc9f7259c0b9","sha256":"1f6523339cc6797e225df7674fac1d473db97a7c8e221f46c52a07a790982d96","sha512":"a4bf500e2695c575bbb708561493ac84c89372db4d1a6b75e967aeb2d1f21b967d61b4ab2db1f5d39f1d7a0f3d41e410e0b40e003ef698d3a9bdb5b33defd2c9","ssdeep":"","tlshash":"b590028421536050027ea09012371059e67d3948a51c1d59554005412a5445ee215618","size":51,"data":"","first_seen":"2026-04-09T14:30:38.877039Z","last_seen":"2026-04-17T06:56:24.200641Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"13b3774aa2175feab8d28b6169351c42","sha1":"6dac5333bd317992efe5560cff5a3527966c8cc6","sha256":"be9d8c49535dff2290a0a85c93ed6c41ece862e3f4b4cc524a4bbbca96bde28b","sha512":"12f76c76c37260e901bde4ff7b49c7f6b21de2b9f3a6603081919fa4b09a23beed998b3db503b9a993d701dcae4c0f578434bb039a1d29c94a876cf3e6d577eb","ssdeep":"","tlshash":"d3b012c92b241dd004775186021604cc1ba25350960deedc6b1997482fb0ad22152407","size":97,"data":"","first_seen":"2026-04-13T08:50:26.851179Z","last_seen":"2026-04-17T06:59:24.371975Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"57c09d45e0dad3fed14b85f1780c69fe","sha1":"f74b47a4c0657e42905b9ace97738c7f3dac7b6c","sha256":"a129286bb6f1c8457ba8b5a1ef1ab5a3fe60cdc8ca696c6e5f4068bf26d52b96","sha512":"57c964819eddcc091022a82832b28a862a01119c38a823bc16f3293d9e0072d8ecff0d7ecdc4d1a844c42aef543f426d84f02659ff1d5561269bc9b15c49fa0e","ssdeep":"","tlshash":"18c022c640a060aa2861e5136b4f8c18700a28f7ac5b823a8804c3020a2098802054a3","size":172,"data":"","first_seen":"2026-04-09T21:05:22.063885Z","last_seen":"2026-04-17T06:59:24.370929Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ca7b4fbd18ef840c4db69864b6a7a19e","sha1":"a97c923285d0395d240a5fa868a16180c95b2e27","sha256":"448ac88f02b27cf55175b18fef45ad1cfc4ddfe5cb4fba3d30a0283bd5332942","sha512":"855da600a2346821dc9dd45144965f30ee1ff4d90ad5a9887675eb1e2d153f7c8f82535eddc985a0be0e4ba4a562a91f09741180d4b63c99758c7e9b27ec22b4","ssdeep":"","tlshash":"05b012dc376e4c2004b7708e1023701403d0310054164c8e587ed54c1bf01c10441c23","size":90,"data":"","first_seen":"2026-04-09T21:05:22.209644Z","last_seen":"2026-04-17T06:59:24.331204Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c90b440e841a6b82e1f9b3299164296b","sha1":"5ef8766de935324424b563aa3eb0c7466b293c94","sha256":"94091dd64a21ffe94214bc6d17deeb43873a5cf2f0a71b4b5caa9a5c81b6967d","sha512":"131e9c4698b461db40dc8b4a28f2ab88e6e07e0b9e2bafd183cb0a426b6b70006ca425f1a8336126f063b557f538571928d7af23161e4aea869cc515377fa8bd","ssdeep":"","tlshash":"c7100000000000000000003000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-12T21:10:46Z","last_seen":"2026-04-17T06:59:24.316424Z","times_seen":2455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","size":62371,"data":"","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1d54ba673ae065cb716686ba1c4a9048","sha1":"a7397fd2a10b4e3bd4b1c966c539dc09e649d517","sha256":"4a382cf34a82b5b5bf191b57e4dbf585666f3d9e56d39fb474204164421c8f01","sha512":"2b41a2ec56d8b574477c6582c60346628441f22775047e4db3118a2785c72aa1b7001fcf9df0c5c6709f01c4c36e97571f21d3cfc21a00266b9a194b5f4bb171","ssdeep":"","tlshash":"aae068a2123a85f0628388e2b6971c8c484535ba5541286ca760a1c16072cf40666c0a","size":347,"data":"","first_seen":"2026-04-09T21:05:22.012277Z","last_seen":"2026-04-17T06:59:24.3777Z","times_seen":542,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","size":510435,"data":"","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"10174562c7be5ce6a1f49646c84e4d92","sha1":"9c778b075d5a98485603ef80e0bd6f962a144fb5","sha256":"a44ece8547f1bd4dea4a8e2dde0159922b4495c78553b1096352f394f3ed2492","sha512":"a8ed4380b113d741c4a18b401fd69260c00a266f5573e1315f25baeba07a4d1b8d045021e7a4383b5ef11f7cf1bcc287e62eeb8597ca2470250f068af6bd7789","ssdeep":"","tlshash":"c190028421536050027ea09001371059e6793948a51c1d59544001412a5445ea115618","size":49,"data":"","first_seen":"2026-04-09T14:30:38.935925Z","last_seen":"2026-04-17T06:59:24.433498Z","times_seen":1295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1d4edfa8d24b1d05cda7b756270ffb5","sha1":"9e255449e2e83589ce21a6430d663af7733e3e8b","sha256":"c33443f0235aeed58bfc3f1f52a1908a942bd547fb1b26fcfc9d1e8b4ca49a7b","sha512":"19743dda5cbc11d2497e0d7df576a319abbff382118718562a6bfccea687a1d800b65e1f89412882a4162a6fc248c96d805027733b2af0095f0a0d39dabd9cad","ssdeep":"","tlshash":"18700000b0030c222032008e02020000200208022220800020a000880a008882220088","size":19,"data":"","first_seen":"2023-03-07T12:38:54Z","last_seen":"2026-04-23T09:08:07.873712Z","times_seen":309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ac2aa58ad9605fbf57e82446e5bf3570","sha1":"96eb39a62e2f21f597bc173cc1f6abe5700971c2","sha256":"168ea8908819a3561be2b0ba3ab945565982d9bfcfa6def5998419bdacafa814","sha512":"56535015a60edb418e446c04f36dfd4ea1aa135a15d723ace38fad75f49462315debe9e703503ae56e627ad5d68a730e0b43765851ebf21b9aec7f0c6a498428","ssdeep":"","tlshash":"47d02bd0d40084416e31b79341a3e0345bd83990ad75b41c1d1fc7497631282016e463","size":263,"data":"","first_seen":"2026-04-09T21:05:22.148582Z","last_seen":"2026-04-17T06:55:51.944602Z","times_seen":568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6984e64250b12e9cb2a122e5bf0f76c9","sha1":"4634af473d047237e8fd11103ddfc5adebe87863","sha256":"7219eb9c822d2773d3c6315860d236975e0c87a824d9441d5487824452353e9e","sha512":"7f435aa5bfeaab87b7502c7b93eba916a397d51922ea7412f432e246890ed57d5dedb1d012ecc3f553d47c7623fc00e9cae0ba643fba84ef29288d7b8f6ff7fe","ssdeep":"","tlshash":"b5b012852e462d14201511164433989c1f916f20e823e48d4614c71e1fb238f12478e3","size":95,"data":"","first_seen":"2026-04-09T14:30:38.928756Z","last_seen":"2026-04-17T06:59:24.339541Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec453ccd34b371daa0a05ad06e2adbd7","sha1":"cc3af89f640c944238a2648c2bb6e7b223c90e47","sha256":"c2eb425f5db2905a49e235b6baf2478f439ee86f9036316efe55ff003bb5270d","sha512":"5e8dcf11431936336865ead212cbdcbffbe0f745f85064eb53c7bf89697b41f3a474e6c2086cfd8827b23db88cb4d1158d4f6054904adc3db56f03479eef8560","ssdeep":"","tlshash":"5dd02bd068498428c550c77a10171180c935bb35dd1c0cb2d912fa57f83234b2ca7293","size":246,"data":"","first_seen":"2026-04-09T14:30:38.91164Z","last_seen":"2026-04-17T06:59:24.427014Z","times_seen":572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"44c29edb103a2872f519ad0c9a0fdaaa","sha1":"511993d3c99719e38a6779073019dacd7178ddb9","sha256":"5c62e091b8c0565f1bafad0dad5934276143ae2ccef7a5381e8ada5b1a8d26d2","sha512":"ebecf27f9d01a31e1b7fde7d28befe992491ca5678e5c1faf59d688171ff0dc120e75c888213ce340cf8d3bae4c431fbfb6992719a4372b51b9dd88b81547f01","ssdeep":"","tlshash":"c700003000000000c0000030000000000000000000000000c000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-04-20T05:12:52.6181Z","times_seen":53990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b34cab55d3c63f2423425c354cf90756","sha1":"24aa05536e683c08a81c5932191936aef825259b","sha256":"fb2c7d8dd35f85951b7c92b4b4c3b7332d67bb93c82a2b3303eb2106251bc75c","sha512":"cce7cbb016833d7a790332258363fd73a7d1da763f9cf5fed6eb77c57f0da7553ee594658f00b433b3616d19c5cce68760066652e5a02c9f2056975522955cc0","ssdeep":"","tlshash":"c710000000000000000000000000000000000003000000000c00000000000000000000","size":2,"data":"","first_seen":"2023-03-14T16:29:28Z","last_seen":"2026-04-17T06:59:24.324536Z","times_seen":2634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dc50446c6dbfa9479fc43c8e436cb27e","sha1":"04761c4112241807c70a29a5d17336c04526d966","sha256":"2eebb843d15b2f22e468a9c24f8ac76c9190e0544d0be6517e19114f8cdbbb43","sha512":"2a0b8bd743b1431ad4b70e782dd12901e961b60c8a1d042765457f2e03defb9822d1280194db7775e626ee09653decf1c215fbecf023e47eaffb41b9553a0064","ssdeep":"","tlshash":"79d02bc068498428c550c77a10171140c935bb31dd1c0cb1d912fa57f83234b2ca7293","size":244,"data":"","first_seen":"2026-04-09T14:30:38.627687Z","last_seen":"2026-04-17T06:59:24.359749Z","times_seen":1294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-04-23T11:12:34.399749Z","times_seen":61138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.appear.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad1f16b6a13daf29169bf73cf29206d0","sha1":"990aaf5e09871660d3cda1f13367e2ae3425782f","sha256":"6eff971a28cb7a683daa4437b7b29832d3c78b8a35e3a4f42dbf5181e0942f05","sha512":"775f3aaef476b3be2930be2ccd81d7fbde95207fcf902f9bbfe4a0ead6aca314da1a7102015328f34416fb251106f72ab3e5c60f6e2f787745ff5f2ac1f98c68","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyM:X3/skfRwbDOrdfFjg/2cmVflyM","tlshash":"bb910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","size":4227,"data":"","first_seen":"2023-03-07T12:10:28Z","last_seen":"2026-04-20T06:03:17.087629Z","times_seen":591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b395b5ce6f6b3a6c4adb571e56e20b7","sha1":"ec4aa670132eacec331486fd91e37137fc197539","sha256":"20215980471facd5394d574039badee743ed340e0991fac63ff5f15d35b33a74","sha512":"d32506eea914a1276cfec3305aeb8d66bf37beeaba225e0c3e537226f73ddf01e5c48b6fcb5b56c048cac25b5eb2fd0476b025c0f362d0d06c7ab6c71a0301af","ssdeep":"","tlshash":"53c04c195026a8bd231d61189ad13e91643944f552716e14a39785154b475464359147","size":150,"data":"","first_seen":"2025-03-27T19:53:17.060558Z","last_seen":"2026-04-23T05:42:04.666407Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dfcf28d0734569a6a693bc8194de62bf","sha1":"a36a6718f54524d846894fb04b5b885b4e43e63b","sha256":"333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3","sha512":"da637b3f32d7c7e410ab619520e0cf4529169a5c326ecbf4ca7a3bc2330ad49a84fba4d6c8919264eec5dc75ef80137f78cda40e26f3f741b5c9ff259d6efdbf","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000300000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-23T10:52:15.571097Z","times_seen":57400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.meanmenu.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e766f83bd6115e8c5ef3d95c07a9126","sha1":"22ef6499abd142d66363299a0b138f0ba1582e76","sha256":"114817c3d63b010fca17c5d431c6e38ce4220ea9e316532bbddba933ffeba2a7","sha512":"d06659002ceb6a9f3bad307632270866bde2978f507e98b05d1028515951058d4e739722a9e03834d87e8dbd9639ccdbf1f38295e035ebb6ca354df80d07ca2f","ssdeep":"96:n771uMXsA2XNnaToz99t56txMsLcCMoGIh7b6eFSEvU:77QMXsTP6VQCMlIhKAvU","tlshash":"0dc1ee6bb5b044f8a0bb7855b93eb23030f3640bf949e90032ad65262f1997515b2ffd","size":5931,"data":"","first_seen":"2023-03-07T22:42:44Z","last_seen":"2026-04-20T06:03:17.165077Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"92c3c9e1c6b9603ba4294da0b4d4b87d","sha1":"6c5fc05d7b947821cd0bd5a040de6bdd30474797","sha256":"faffd4c577f66d2cf1c80608b20639fbf4aa32e06998b5de847184e716046feb","sha512":"d86119cfea6e95b28efb88eca022971ef00e30887f4868f77eff23309efb97e111d4afb0624038780ee4efb7fef24d437ef97f008bb348908a59955585189568","ssdeep":"","tlshash":"c7100000000c0000000000000000003000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T08:08:46Z","last_seen":"2026-04-17T06:59:24.420678Z","times_seen":3047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b2b6ee3754ad6d61ed4909c98453043e","sha1":"91ef6cf78a9b2bf83f97792cf49d9f8e7f8ba011","sha256":"23f4cab0d406c8965bccb10ea471c31cfa8ef17809349ccd86ec1c977610a6a3","sha512":"7cdc6ca1ec85b4cf1bcee15d4b5fefad14508cc3d7fad1d7358c32feebe2940a55410ea9322edb756ec2a56e5026ae281d539ae16ae915fc1196f6ccb41a16ac","ssdeep":"","tlshash":"d0a011cc3aa8082008a322a2800b288c0bb03028a02828cc0028c2880bb02ba0082003","size":79,"data":"","first_seen":"2026-04-09T14:30:38.765058Z","last_seen":"2026-04-17T06:59:24.445319Z","times_seen":1290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2ecc54065af518ab39939cb8c7edb69","sha1":"7c7c5748b8e19a746bc5f19555f2be49bca6e947","sha256":"cc858e7a5627d6f9ffa6a0dd0bc5dc074507229415429912c13b6f99e1ce7284","sha512":"e984b09ed268990a7e59e1ca60218e34cbbff2b8621203dd5aad730ecbfb67b2d4db2a0c1ceae35e283f1e57ae596dc30a4caf3775e40f0a03dd20755156c0f5","ssdeep":"","tlshash":"13c080dc7b1df869e7013093518f410fafd624149905541c470415995fb05054553c3c","size":166,"data":"","first_seen":"2026-04-09T14:30:38.68409Z","last_seen":"2026-04-17T06:59:24.488151Z","times_seen":1324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2f4a327329377ccfdb84b4c2f8994c85","sha1":"506410462a9f8d9ea8ea4fd04c8ed98bb859f9df","sha256":"cc4219a2b2c2a9d94b2bcc96eac6a87a040db596ac1d453f0fefbb338697d2e9","sha512":"efe4497895a0c643df62208c889126f267421ffbcd991fdd54017bc27c70d45279f6b1c799f7e44fd68b612426ef704e02c9c1ee4d744118def2579bd5090850","ssdeep":"","tlshash":"c7100000c000000000000c00000c000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T23:41:36Z","last_seen":"2026-04-17T06:59:24.427858Z","times_seen":1723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8b8f7b7a97d8720fc9dce8be36ae14e0","sha1":"8a26c1e349580fba29736e01114a3ef21d7fd84e","sha256":"74c7847916db4b354ca9892c4fd51e36368010301be29554d1d7380e556ee52a","sha512":"0f80a0b4a5716823c92de14a8935a61a2b1a656a062c117329a540b26921d0e1f6c3a770721bcc2b6e704867d3dcc274faf2c66d4e1bbff77b253e53e1034679","ssdeep":"","tlshash":"87c08cc51b80380aa22667224051600c9be54831ac84d6ac9e08e36abba02aa3046c1a","size":165,"data":"","first_seen":"2026-04-09T14:30:38.635937Z","last_seen":"2026-04-17T06:56:24.109536Z","times_seen":571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c01aae91992f17c3062d7d42cbb67748","sha1":"d1a1fa611a494a5cda7d51d6b833a666bd629950","sha256":"40bca5c660206bed3450a5bf3a3673bac071779962db0987aaf12ee522519732","sha512":"3c4f74dbc9f3c37000b229bb370bcf500d849cf56b7a8055d41e88f562d7bb77f2cc8451d684fcd637eb3b3016ac9001b8cdaf722d034b2a190c9ef0c48e0118","ssdeep":"","tlshash":"9bb012447b846c4840173768141b0c6c27a513009162c48cd51cc30c3f3d286000118b","size":98,"data":"","first_seen":"2026-04-09T14:30:38.892011Z","last_seen":"2026-04-17T06:56:24.161855Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c9d5f057aeda302c0f560dac42082f2e","sha1":"856d089938749667fdac05f9af8346898afe6cdf","sha256":"be4af8fbd6fa30636b06c04e509714abb864c72f53eb1d9715f218738daff071","sha512":"980f4af26bec1c760f2d3643e561ecd5daf4a7dfb9b38f32fee078e19b18bb6fd26424d34d0b3b4dcbae46bcab71c3ca6f140df26b87d371c45a8c6bcd00b921","ssdeep":"","tlshash":"fef0e1d44911e8fcc58134a235be327895bd7cf3b156b01a715982878624f4a814b426","size":585,"data":"","first_seen":"2026-04-09T14:30:38.779189Z","last_seen":"2026-04-17T06:59:24.340311Z","times_seen":554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30fe6ec1f1b70381d266314a0376f7b7","sha1":"6990206a91d8e07ebc35718e8ca07e759c6c8c20","sha256":"487ce253bb111a0d9404c0b85255fa0c8fa6230846c3a4ae18e015bbefba69d1","sha512":"75aa11bec72c30dd57237cb7521a605242727c3e06e3d92fdb27536b4829f02953edf5f1ead33cdf6151fe67ec267388882195184de478044488d9ddb3cb2911","ssdeep":"","tlshash":"43119438752882138ae7128a8e2ef15e7007b97da3af1db1b1ccc1c12034c2412e632a","size":1000,"data":"","first_seen":"2026-04-09T20:50:11.973172Z","last_seen":"2026-04-16T17:47:45.50428Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"92eb5ffee6ae2fec3ad71c777531578f","sha1":"e9d71f5ee7c92d6dc9e92ffdad17b8bd49418f98","sha256":"3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d","sha512":"5267768822ee624d48fce15ec5ca79cbd602cb7f4c2157a516556991f22ef8c7b5ef7b18d1ff41c59370efb0858651d44a936c11b7b144c48fe04df3c6a3e8da","ssdeep":"","tlshash":"c700000000000003c00000300000000000000000000000000003000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-04-23T10:52:15.618876Z","times_seen":71879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"57b8c6ab6aaee23b8b69a3c41d7f46d6","sha1":"e0e7f54ff48ed7e0a89d899703ee11148112a414","sha256":"22d8b9b8387e45537db43fc8eed094e8a18998fb46fe61147f215f88020798a4","sha512":"e5c7bca4a70166538b6b2d0ae290473a133cf3210f604365791e756f3dd73bfd93c610af4bd164476d2f905ecf3d5c5ac20ce45c4ed7dbb87a9b4c11cda4c5cd","ssdeep":"","tlshash":"60a002e82b05581998971892456f803ca7e57230f20eac4c9e6de1dc2b7af97041badb","size":69,"data":"","first_seen":"2026-04-09T14:30:38.917829Z","last_seen":"2026-04-17T06:56:24.101089Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-04-23T11:12:34.399749Z","times_seen":61138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d6ff1ddccaf97e074ac78d7d1749a658","sha1":"82ad3da0ddfd300d797c6ecb6684ffd871709181","sha256":"3ea1dbea78e232d2444e39d273b098d8c4a367e61b45c33f1f4303cb1eeb734d","sha512":"48ee2a1c5d6cf7d615a2aed8f7c13bec4a1047a6d5a1b47ca503f31772f59cd1017f0915f80e994559553e44b520ecde6808fc5d4ca68701b21bbd8e0dcbc8e5","ssdeep":"","tlshash":"c710000000c000000000000000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-09-06T10:27:18Z","last_seen":"2026-04-23T10:38:24.19354Z","times_seen":2681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2ba67d6a4d20b3b76a56dbb8968608a","sha1":"03207e969b4f76089ce22be972d5611e43525fce","sha256":"5f5ba24cb103199f2c493cb04282f6c51822a9a3034fd4e53d7bb8a318b0dc70","sha512":"577fc0cabeef8419c313cbb234b8e778c18bb43ce8696b2abc316db709f3e4bedb6335ba7442cf486299ce0cccd241cba5b1b48831227d0072eb5cb2e507ae55","ssdeep":"","tlshash":"ebc02b386e2a606a8384e26c3f67c8c8ccf20f3300f9156c4911e0068938f81008fc80","size":142,"data":"","first_seen":"2026-04-09T14:30:38.66216Z","last_seen":"2026-04-17T06:59:24.455988Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d9c307cb7f3c4a32822a51922d1ceaa","sha1":"b51a60734da64be0e618bacbea2865a8a7dcd669","sha256":"8ce86a6ae65d3692e7305e2c58ac62eebd97d3d943e093f577da25c36988246b","sha512":"6b3b006aa3a86286c359a6d243d62a61e46f0c5f7d1db587faa26fbe72718eaee33f774af164e3ba790d4ae4136a25dc993d3246f7be6691fa7346d0be0f1a71","ssdeep":"","tlshash":"c700000000000000c000c0300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-23T07:00:41.981734Z","times_seen":51806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bcf5513856efc4018cf79bdd0bffab84","sha1":"8ccb19bc3b1fb982993ee5c502c3b7888cefb39c","sha256":"39b5a0be6054bf870cc96da5d763c4c4f46dc3aed60e3241a45d450e656aac78","sha512":"c5deb52c83b1481906cf2fb602b9a3c4f7060af3872490ba2e3456597a31d83b16bf52d7831d4aafbbb747909b249ef69b9abf0985e1b7cc3b624afefcd13806","ssdeep":"1536:zmqc0dLzEtDTn1Z2pdkhGX5G4WpM9LMlldDqSIbi:71LzEtHn1ZcdkhGX5G42RBq9i","tlshash":"e45317caf2d6733559e271f2001b910993be782adca8196f7d15e3f51e7098b4027f2a","size":61913,"data":"","first_seen":"2026-04-15T02:59:49.569462Z","last_seen":"2026-04-15T02:59:49.569462Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f5385d9967baccbd9fb9bd5cc23f1ed3","sha1":"76c5de13fab6ae15cc9e76bfa87a6aa188860e0f","sha256":"00da03e8433c010a3a24f3605504983813d3c7eb24e596d0720057ff7f8d2af9","sha512":"1ba0c7b8a425591c17fb763de18f433fa0415f7f334bf7b19989374fbb483a770c169334b08462c9bd1049a2c276ab2ab3e747762a6142713a6e0117da5de352","ssdeep":"1536:Lmqc0dLzEtDTn1Z2pdkhGX5G4WpM9LMlldDqSIbi:D1LzEtHn1ZcdkhGX5G42RBq9i","tlshash":"8f5317caf2d6733559e271f2001b910993be782adca8196f7d15e3f51e7098b4027f2a","size":62638,"data":"","first_seen":"2026-04-15T02:59:49.573312Z","last_seen":"2026-04-15T02:59:49.573312Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fde758c3f4539dd4a2013ad9c875547","sha1":"a748c80378af1a062b593f003c4aebb151e16d9a","sha256":"59a234703f2c3a4a99e738577791baf041d3b16e55013fae262962b8a015bebc","sha512":"98be438ffd6651938784cdf2fa3a40d3508658249ff13d2a2df12404c609a63c2fe70be3df68953f29791a36d712a2ccda914260d5e5ce12f7ff71f7933cd984","ssdeep":"","tlshash":"927000282c082000008a3823820b000ea222020c08080c8082c022a80cb30ca2022c08","size":25,"data":"","first_seen":"2026-04-09T14:30:38.862658Z","last_seen":"2026-04-17T06:59:24.297761Z","times_seen":1364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fde758c3f4539dd4a2013ad9c875547","sha1":"a748c80378af1a062b593f003c4aebb151e16d9a","sha256":"59a234703f2c3a4a99e738577791baf041d3b16e55013fae262962b8a015bebc","sha512":"98be438ffd6651938784cdf2fa3a40d3508658249ff13d2a2df12404c609a63c2fe70be3df68953f29791a36d712a2ccda914260d5e5ce12f7ff71f7933cd984","ssdeep":"","tlshash":"927000282c082000008a3823820b000ea222020c08080c8082c022a80cb30ca2022c08","size":25,"data":"","first_seen":"2026-04-09T14:30:38.862658Z","last_seen":"2026-04-17T06:59:24.297761Z","times_seen":1364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b5caeb09a5da9ca133f2e924742c8d00","sha1":"bf48fe950ed43d191d4d64cfb5837e91b5ca8069","sha256":"19b1f501a79aa77fecd5e91aba0d3a747b7e1c25d359fd350ff0496b7134d6df","sha512":"779e65c3f7a8938e6d3495687028369e99ec1926bb2af42bbfdd289cded143d65e0ca407588e758a0d03721c532ca15181ff979820dc18d46d323cc0b56ced56","ssdeep":"","tlshash":"37b092c6e28424a25109d09a947bb618e1e429a73502347ee2b2ec1bb96460e82be122","size":118,"data":"","first_seen":"2026-04-09T14:30:38.698177Z","last_seen":"2026-04-17T06:56:24.197269Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-04-23T11:12:34.407198Z","times_seen":211588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e4a66a03412c1d6d7a5b9e1438f963ef","sha1":"8fe17f21cee870900e01c4fd8b870654b69715b0","sha256":"2a967008904b1e05dee17a15acb64eb33993c5877aa90097f5331196a2344480","sha512":"afb826020ad87920162905bcd6de285f11814cbd77a6ce09e45644629af6b3b0760d1256697ae4ee84f0b8d22a78fc9dfc8b5043f5f0f6b6c4ffde81b9a54b5f","ssdeep":"","tlshash":"c6b012e66e2805d82454daf4027ea21c40bb6d775de23a056d11e2863033f091437b2f","size":107,"data":"","first_seen":"2026-04-13T08:50:27.054449Z","last_seen":"2026-04-17T06:59:24.41719Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2f3f489a00553e7a01d369c103c7251","sha1":"a0509b7780628bd9d9abc7eb8a2163477341053a","sha256":"23794d91c53ae875c8e247d72561e35d9d06ee07c70c9e0dbcc977a6d161504a","sha512":"0f446282a46dfefa3995e9e78443c907aca544aff495badfcb632b9df2457f8491babf852d8ebbe7ecc9392461b559e9e242960f13e624e79dbcfca44a6e5de1","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000003300000000000000000300000000","size":2,"data":"","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-04-23T09:55:35.528142Z","times_seen":6918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-04-23T11:11:55.326728Z","times_seen":135609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"630d66cfdff7bd52dd19abd0ca5b5558","sha1":"ad82d1a160a855a302eda7224cc0cb7a5473c949","sha256":"4683cea81996cd2a8f30db0ef4820c286603da70d5b275840942ecbdc84daf83","sha512":"531ff10feaa134c81281d167ba0cc6ba93ced16f4b1b02127946461636791125ec3a4701519e644fe0eac7a6f362efc92674de5e28c7f05c174c5a0a332126ff","ssdeep":"","tlshash":"e3b02bc0b04c0400f3d1901b20364004e77d1894ec04c984d152a899697330b043cf2a","size":129,"data":"","first_seen":"2026-04-09T14:30:38.885234Z","last_seen":"2026-04-17T06:59:24.499191Z","times_seen":1298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fac166dcd2811ce169e58cb5ca85d4e0","sha1":"26cb34c6a8931cfd683cec577f5204df5dfbf427","sha256":"5cf67e2d728e5794eda9ec59e10dcf186aff044dcb8a01215ef5753ad1480da9","sha512":"bad75f997761fc47f786be109f5ff70a40077fc02feba82de564c0f737a7bce30c1a0740dfc4fe16f6949ebfc118f2540865db917c8a8f67632eea0dbf608dd3","ssdeep":"","tlshash":"bcd0a7d45619dd059e28195b065b5578c1717c18592c2c4f99806dc899701d28666603","size":222,"data":"","first_seen":"2026-04-09T14:30:38.833634Z","last_seen":"2026-04-17T06:59:24.40161Z","times_seen":1323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"00554202aae00e1ecfefcc6b67ac0aee","sha1":"fb9d9e2173042c4cd417548f6037ed0a628e22f1","sha256":"866754c99f0498b183aa13dea6ed28d124f1be757d7a286fbb8695207342b414","sha512":"a60fe8fa5dd4ee949f565f44e52e0ff48c3e665c4bc4194bc6eee98afd6f5bf59fdc74e7bb497a59160979ed762221c88c8d25069c12a30c4662c2b5f522c588","ssdeep":"","tlshash":"2dc080c6a159882483d1445b4132124cd1581cd5d4484515c251f45575b170551346a7","size":156,"data":"","first_seen":"2026-04-09T14:30:38.593431Z","last_seen":"2026-04-17T06:59:24.41405Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f23ed85a69f25259f02eed1e45166d83","sha1":"106475d74fd9d0229839217648e2397ccf1862a9","sha256":"c548d6ef8cd93bac374ce07ace5b258be18c6bfc60118bc3bea9e0fe82d0ec19","sha512":"2092740deecd31278599c32a28719466d39ceb362dfcacbdd22eb75f0c27205f8e7f75b9a21044e20a56c592d1081dc9d9d030309e10bf30abba72d4a95edccc","ssdeep":"","tlshash":"a5e068a2123a85f0628388e2b6971c8c484535ba5541282ca760a1c16072cf40666c0a","size":345,"data":"","first_seen":"2026-04-09T14:30:38.69121Z","last_seen":"2026-04-17T06:59:24.396734Z","times_seen":1288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery-3.5.1.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-23T11:13:17.280472Z","times_seen":225989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-04-23T11:12:34.399749Z","times_seen":61138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-23T11:12:34.489526Z","times_seen":284357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6943130dba69694584f43322ec8c964f","sha1":"8465676eb0101e1352683678403caa4ce0cd6f84","sha256":"cde9fd846618af6a67c42378b7ef0de58a6e6264f304ba734a24ab71be7d88cd","sha512":"3abedb6a6091a724255b3ff9866f9a529aff248fa44c0e1e9ae426e43bfc772b40769ad99ac8d5fcb4ddabef8c833427084388478bfe22e1352983dd3c19774d","ssdeep":"","tlshash":"e8e072b09929fadfa202235d903ad04d37dcce40ac2c3aae840200ecde0cb80218e93c","size":296,"data":"","first_seen":"2026-04-09T21:05:22.205806Z","last_seen":"2026-04-17T06:55:51.949415Z","times_seen":533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5a828c16cfcd165f5178aee432e46ff5","sha1":"e60f666b5c646f4a496a7e9e6c6b991a4df05371","sha256":"bf0f55267382a59da0970f63acce218fcfa3ad279d248b2e1d0bf8d913f8d76b","sha512":"c538791e1a8f60276997bfa00617a9046fb077487f50c98854da50033114768c6218f5db79e1c91b40289dfbefca783335ee7cd9cf11eb06ec1ca1b5c2e2fd50","ssdeep":"","tlshash":"5af002637a831100ba6a3d31b0165d02ac58b1710679402855d0a1f241f1be72d9df2d","size":613,"data":"","first_seen":"2026-04-09T14:30:38.740338Z","last_seen":"2026-04-17T06:44:31.247891Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9fd3bd752a6ec5fc32221dc0d3285c2f","sha1":"16a2292f29171ae6ca794fea648b683869fcd800","sha256":"b5d683621eda374240e44da81acb9c4f2f6cb6aca9fcfd04760d9a5c5da4f2b9","sha512":"1a0f7faf7e7b2d8a66d7a9378b42f01a3428d0f1f7cf91fd1c69fd075b59c5857668e9a79944978b9a8b474e65feb3dd298a1d81f43688dd2456711f616d630b","ssdeep":"","tlshash":"98d02b85710807952e7930c30653c11c5362e12c6e1434ad00163ad19759c860068f82","size":269,"data":"","first_seen":"2026-04-09T21:05:22.091671Z","last_seen":"2026-04-17T06:56:24.071372Z","times_seen":550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.ajaxchimp.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"36d1b0e5a3a7397b267e704beb2f7272","sha1":"86df23e41520d19dd0c6928e4a5de89c1ae172a2","sha256":"2dcc9f6916671ee0ee4c5f7c7b6f13c519189b65d371a39309c0d95b79050c28","sha512":"e728f97a563dbba72519ef7ff7b6e3de3265c3cf8ef574affed6e67bc9bf2d1f1c2a79d3e7ead1f2a1d6fd4610fcca332e0ddcbd31de608a4ce64464b404926e","ssdeep":"","tlshash":"4741444025101bc2418b21f2e4c7bbe370e7d5958824f558e668e0e30ee4dcdae27a9e","size":2381,"data":"","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-04-23T09:35:59.147395Z","times_seen":4343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fde758c3f4539dd4a2013ad9c875547","sha1":"a748c80378af1a062b593f003c4aebb151e16d9a","sha256":"59a234703f2c3a4a99e738577791baf041d3b16e55013fae262962b8a015bebc","sha512":"98be438ffd6651938784cdf2fa3a40d3508658249ff13d2a2df12404c609a63c2fe70be3df68953f29791a36d712a2ccda914260d5e5ce12f7ff71f7933cd984","ssdeep":"","tlshash":"927000282c082000008a3823820b000ea222020c08080c8082c022a80cb30ca2022c08","size":25,"data":"","first_seen":"2026-04-09T14:30:38.862658Z","last_seen":"2026-04-17T06:59:24.297761Z","times_seen":1364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22c1e9948c752f93cfb38c06c06b5025","sha1":"2b79ccb97f9f635ff36262bf0f25f39da2618034","sha256":"9334723e41de1c421f2f108cf9efabaac0c4f82bce9f1b30489be03412b67fdd","sha512":"cb5c3c9d39af8421c9946c2dbc0fb5f3cb947f1b6dcac716238b21b25fa318cb670ff1808108b57ad573fa993c8c4f02506d7406cfc111f1482d46ef7308706d","ssdeep":"","tlshash":"3c7000082c0828080ab23833000b000800a20a0000000808020003880c3820e220280a","size":22,"data":"","first_seen":"2026-04-09T14:30:38.777379Z","last_seen":"2026-04-17T06:55:51.94043Z","times_seen":596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","size":62371,"data":"","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d45ed5f9c12e3c57cfb7dd1d4945d033","sha1":"89c602bbc0e7f8f823e23cb3f743cbc0dc566bd9","sha256":"4ed114b271c2c70f3b9c9fead22ba0c70b5ea99b2d8f86567e999513c4a355a5","sha512":"cf9e6eb0febc7bdd79bbf4f0857238487b1c3e2295908c0b51ac85163f2379f40a746954c3230cd56e43778f5772d5966419872267140f418ab03a68b28417c8","ssdeep":"","tlshash":"b6e07d9097f68c349ca5319b706bd22867b80314d56a454c1c0c56801e70d9d031090b","size":305,"data":"","first_seen":"2026-04-09T21:05:22.071884Z","last_seen":"2026-04-17T06:59:24.409981Z","times_seen":553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2f547b466c1fddb29e277760fc0dbe6","sha1":"a08414355baac881b57c6704cc9817b963ee6736","sha256":"d8ebf479ab43ce6ca5da3df5149b5c029fb8a3c053ccc3727b5f28bcdfabe355","sha512":"82d98cccd4ad81ae834ee8858f00c733ea142e6e4ba5d000da4f017f6a174c36150f6553ae190d4600d4b932a5c2dd035a402427fe6fee5a9f035116b9c5221b","ssdeep":"","tlshash":"a98000282c08200220823823820b002e222a0c20000a2e8002c00a8c0cb00ab3082c08","size":26,"data":"","first_seen":"2026-04-09T14:30:38.943749Z","last_seen":"2026-04-17T06:59:24.301452Z","times_seen":1367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22770fbdd1177351a869401a0e1427bc","sha1":"a84fdb0f561ba218a613da03931e2c27f3feb715","sha256":"501bdc4f8cb2ded40f4a8bdd4c452602322c7bae5db48131dbe17124c5bf769c","sha512":"23cc87b54b8e0775621dd20e5f69cb509c703fc95528381abc7a2e414faeaa1c4fa097c3a7c108abc55d6b14d8454a66890b9a03d91768ad48d0d494d9264f06","ssdeep":"","tlshash":"c710000000000000000000030000000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-26T05:45:08Z","last_seen":"2026-04-17T06:59:24.314486Z","times_seen":3876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2a5dbfd249d091c1886dddef461d1b7c","sha1":"d441ad79bf41005f096d8d6434b85a900c5f7d6a","sha256":"31a2f2e45183d66497142175c93c11e0272d73b265213433acef155ad0170fae","sha512":"5926be6034bea804605ae79bf64089c14528acef26410f1f55afa4b5160f489f0e414ca8a79622fdaae3c73ce44f50ce25a14275514f21de92958ab90596ea07","ssdeep":"","tlshash":"dfd023d92d65c091708920d9d45a895913f5d415cc757d08573700c51d5060329e7f76","size":213,"data":"","first_seen":"2026-04-09T14:30:38.730467Z","last_seen":"2026-04-17T06:59:24.327014Z","times_seen":1312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"db5de2176b4ae9afb8a6741981aedd6d","sha1":"674bd348e5f0a0aea03b865868720353c340de3b","sha256":"026850eac7b8410a8f363d4afadf8b906892b7ab12daf73a9d71f629db5ac57b","sha512":"0f4003fd2a71a1f67d28fb932d7d522c655270c8a6a5d4ce6e2ffd8d7bacf857799828f321396637d997fbc5d0db9bffe48efc1a137b801c111018da122f7695","ssdeep":"","tlshash":"92d097b12b0c428442707ad3021bc85c02e077402d104c5fab3c43c2feeeb0450f074a","size":241,"data":"","first_seen":"2026-04-09T21:05:22.04443Z","last_seen":"2026-04-17T06:59:24.495708Z","times_seen":598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ed70b57d5025bafd77dbe52bd8e88885","sha1":"9b8453aa0328147873c0247cf9f13d7e4102e572","sha256":"45f3ebd2611510d0b46a962af03af8cf1c8497612ee6635927e827286dc51008","sha512":"af303601233be75ab01fb365d9bb97585e6f8bbd0b91199cec1ece3f9ea3099fedf00d792f23a1e3d4e0ec05c5fbd1bd49572338cc4c2c708404d2ad01da41a6","ssdeep":"","tlshash":"1f1121e3724e9574d0a73143701acb1148fee2067cc0518c196ae1d82be44756addf82","size":1013,"data":"","first_seen":"2026-04-09T14:30:38.866871Z","last_seen":"2026-04-17T06:55:51.8787Z","times_seen":553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.appear.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery.appear.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 4227\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4227,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ad1f16b6a13daf29169bf73cf29206d0","sha1":"990aaf5e09871660d3cda1f13367e2ae3425782f","sha256":"6eff971a28cb7a683daa4437b7b29832d3c78b8a35e3a4f42dbf5181e0942f05","sha512":"775f3aaef476b3be2930be2ccd81d7fbde95207fcf902f9bbfe4a0ead6aca314da1a7102015328f34416fb251106f72ab3e5c60f6e2f787745ff5f2ac1f98c68","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyM:X3/skfRwbDOrdfFjg/2cmVflyM","tlshash":"bb910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","first_seen":"2023-03-07T12:10:28Z","last_seen":"2026-04-20T06:03:17.087629Z","times_seen":591,"resource_available":true,"data":null}},"time_used":853,"timings":{"blocked":748,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/footer-bg.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:01.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/footer-bg.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:01 GMT\r\nContent-Type: image/png\r\nContent-Length: 55027\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55027,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 699, 4-bit colormap, non-interlaced","md5":"aaf76c5bf1b40967cdfe043e1c5bb95c","sha1":"d4cb322ff34c2fbbf00136b5605e45f4e99e0c7b","sha256":"3f355dd1156f3290f87b5e4a2271f8225058a6c6eb6c89268af4cd5df2b8d4d2","sha512":"a7396f6d5580ad65f981a4f7608e3b75e0389b022f70acac1e2918e835072c30ed83f6821335288cb28643fff72411e2796382ef770a13e52e831338893ff0c6","ssdeep":"1536:Fhtz+0qTZu834XApnLl0gSeZrN/xTvnSVgDyMGxCJz:d6IXApLl0g93/Ft2xCJz","tlshash":"4d33f2e0453ef432adddd27123036296f9c964ac49b354763bab170d112acb42e27e29","first_seen":"2025-03-19T10:36:51.047204Z","last_seen":"2026-04-20T06:03:17.162644Z","times_seen":43,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:02.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 146487\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:42 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51021\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":510435,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2293)","md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"resource_available":true,"data":null}},"time_used":1146,"timings":{"blocked":1020,"dns":0,"connect":0,"send":0,"wait":34,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/wow.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/wow.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 8155\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:06 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8155,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8099)","md5":"21fe90eedcbaafb4ed529d78418d30bd","sha1":"a16375b80220d315151f57bab2d4ee03c9fe1d20","sha256":"7852a22b72ead62cfc4a1b1ca32874b3e222f232a991a6d1432313572f534135","sha512":"30be63048c2b41ea7953dbc137b4c9047704196430cdf1995334092a41fe8c6336f1f109c195c5b47c857ee92838e4ff8d255d7ca8b8280793bc012d35b7fcdf","ssdeep":"192:tmEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:EEE/Amu6qUxVBxGkAI///IR","tlshash":"99f1baa5374a70718e9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","first_seen":"2023-03-07T01:37:53Z","last_seen":"2026-04-23T11:09:30.651505Z","times_seen":4918,"resource_available":true,"data":null}},"time_used":851,"timings":{"blocked":742,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/banner/banner-bg2.jpg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/banner/banner-bg2.jpg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10558446\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10558446,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, description=Group of a young business people discussing business plan at modern startup office building, manufacturer=Canon, model=Canon EOS 5D Mark III, xresolution=254, yresolution=262, resolutionunit=2, software=Adobe Photoshop Lightroom 6.9 (Windows), datetime=2017:08:07 14:20:36], baseline, precision 8, 5568x3712, components 3","md5":"2d13a97eb75806971b30121c1446ddb3","sha1":"b59c55f5ac927723148d475f01ef67ad0a9b6a3a","sha256":"270f73559a477556304700a09aff8d4917b3c311a42fdc27920bf64486d81ace","sha512":"d1786dbfc57cc46dd511957680c855fe25f799f26b91c12a3f78ec5144b8bf96aebf40ce77be1e3997b606aebb69609d98f282e4a0fad52db91a1866ab523d36","ssdeep":"24576:1bQa2FgJY7lkSzGmMBujlGXqtw7ggIu64uX:11cgJYBD6BujlQqtwbPuX","tlshash":"67252325acd614ac8a764d76e8ecb5dd85b39b8599c6d99734cdcd0c2f2680a0fcb0c3","first_seen":"2025-08-11T22:38:38.363666Z","last_seen":"2026-04-15T03:01:03.435909Z","times_seen":9,"resource_available":false,"data":null}},"time_used":3045,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":229,"receive":2804,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/fonts/boxicons.woff2","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/fonts/boxicons.woff2 HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/boxicons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:01 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 89924\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 89924, version 1.0","md5":"aeaf4ee6e2c712532f982c8a4dd68b16","sha1":"34678774d31a23d9fc6a96db5d1984810b50e560","sha256":"1ac6dc813de3dfdf87051562c40a4332c5c80e1854137b0eb8eb4297d8eda2d1","sha512":"467be6b80cb96627b7ff5c9e69cd5da58cdb44e32a1422cbb15e58c78c4d09eab85102a141c33bee2b6b842b8d1b3e98804d84518dfe6f47c48e3f3b0b2ac941","ssdeep":"1536:0BXCWSSxXzYq5qp0NoyUR+8tugJfrF643K5YHjsUXmRm:0BXCNSxXW//RrtJDF643qYDhWRm","tlshash":"c39312f8afa0e0a8e430d237973f58a843d0b755b67d9ea645abfd0352993d58352303","first_seen":"2023-04-14T08:39:51Z","last_seen":"2026-04-23T05:50:52.71006Z","times_seen":455,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":102,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/banner/banner-bg1.jpg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:01.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/banner/banner-bg1.jpg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:01 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1078757\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1078757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=3712, bps=206, PhotometricInterpretation=RGB, description=Group of a young business people discussing business plan at modern startup office building, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, width=5568], progressive, precision 8, 5568x3712, components 3","md5":"56b45ecb69244bc69a8bc7ec19f611f4","sha1":"68699cd54ad7c6438f0ae5e2cb864fd2e49e9685","sha256":"3982eb8a164ca22146702d787e5f4940507d6d537bebfba6273a86cd6e797d5e","sha512":"0907370a704e29819f47ad6f6ecd48d0fa759f96e125a36625bebb2944d64366d4d10a9576c4fbfd7d3f6a5918d2ae04c12d1ae3c6a3e27cbdf5acd81df26b30","ssdeep":"24576:LKoqbIkxLiUwYGixwxpExPE4diQyabbf7Q0h:GoqbL//im5diQyiLc0h","tlshash":"922512ed5ef41ec3c1c833b8c5ed7643a6e600809adf978f787d051a4ba5a04ace5897","first_seen":"2025-08-11T22:54:48.937306Z","last_seen":"2026-04-15T03:01:03.452037Z","times_seen":9,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:03.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:39:53 GMT","end":"Mon, 15 Jun 2026 08:39:52 GMT"},"fingerprint":{"sha1":"84:73:AD:21:D7:99:85:74:5C:48:5A:0D:AC:D6:69:F6:B8:C0:F7:92","sha256":"E0:8F:67:97:65:DF:94:C4:50:AD:BB:CB:88:9B:3D:53:89:9B:60:FF:F3:D8:C7:40:94:0F:14:65:BC:FB:C3:B8"}}},"request":{"raw":"GET /js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23855\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Apr 2026 05:15:38 GMT\r\nexpires: Thu, 08 Apr 2027 05:15:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Apr 2026 17:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 596606\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61131)","md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"resource_available":true,"data":null}},"time_used":1181,"timings":{"blocked":871,"dns":2,"connect":8,"send":0,"wait":9,"receive":7,"ssl":278},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:03.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:39:53 GMT","end":"Mon, 15 Jun 2026 08:39:52 GMT"},"fingerprint":{"sha1":"84:73:AD:21:D7:99:85:74:5C:48:5A:0D:AC:D6:69:F6:B8:C0:F7:92","sha256":"E0:8F:67:97:65:DF:94:C4:50:AD:BB:CB:88:9B:3D:53:89:9B:60:FF:F3:D8:C7:40:94:0F:14:65:BC:FB:C3:B8"}}},"request":{"raw":"GET /js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23855\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Apr 2026 05:15:38 GMT\r\nexpires: Thu, 08 Apr 2027 05:15:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Apr 2026 17:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 596606\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61131)","md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"resource_available":true,"data":null}},"time_used":1002,"timings":{"blocked":689,"dns":2,"connect":21,"send":0,"wait":12,"receive":3,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/channel.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/channel.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 724782\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":724782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 985 x 616, 8-bit/color RGBA, non-interlaced","md5":"b220298c52ebd75bfeac4380a9d40d9a","sha1":"11a4349a8708a2a49a54ef04e29bf42a522df092","sha256":"561957f068ae0393d1df2c4ad3df47256e48aab40ce08472552283d317fe1cf5","sha512":"d3d7b7b19f3561abda31f8179f3e72f3042b38b87185aaffbd5eae417c0d2521d7d6ef9f287f63b694a806379c1e50c8fb7c251e9ff988922e2d00e795fed962","ssdeep":"12288:sjdGYQ9kICdMSd9DW9RVuvqA4jm71uiaLxQ14SkoNm8ajskIG3Xnz6O2gLhBR5+:qe3CdMu9y9RQNR7xYvFotaCGNPBy","tlshash":"c3f423455230f07592ba0cfa9cea073adda71422473f4267482fc52ae67be35e51b42f","first_seen":"2025-07-12T07:10:36.11146Z","last_seen":"2026-04-15T03:01:03.439674Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1534,"timings":{"blocked":1086,"dns":0,"connect":0,"send":0,"wait":110,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.magnific-popup.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 20216\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-23T11:10:45.450594Z","times_seen":57213,"resource_available":true,"data":null}},"time_used":952,"timings":{"blocked":834,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:01.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/player/ee507a59/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 444430\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Apr 2026 07:51:21 GMT\r\nexpires: Tue, 13 Apr 2027 07:51:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Apr 2026 04:24:51 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 155260\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1486235,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (848)","md5":"a3f45afee6e0dc137cbfe33a74403f17","sha1":"06e9a62a5ca6154d4bf626f69580681b8f219d59","sha256":"cfa795e622f49f92d0a65a88d1851ee5db708b70f2a757154cc4c852e999d295","sha512":"337f572ff593bf42ef43e2a20ec657cdd82b57cf0273a92ca0574e24d54c70850d9f4bcce84ddd38cb6089f71b7e840ab94c60439635a78b2cbdfa9d69aae66c","ssdeep":"12288:NWJ+YoIPR+umUIWbouNnsuydXdJAXFMhxfBbqdH+PcFK59iMm:No+pIPUKIWbouNnyWMhxfJqdePN5m","tlshash":"14254cd932d2b8a243a3f0a7043f0105f17e89197548c99cfae9dae92c7194751bbf78","first_seen":"2026-04-13T11:27:09.96925Z","last_seen":"2026-04-16T01:05:21.413432Z","times_seen":1082,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":87,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:05.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/sop.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /sop.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 1251\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:04:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-23T11:09:30.510592Z","times_seen":120561,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":182,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/fonts/Flaticon.woff2","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/fonts/Flaticon.woff2 HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/fonts/flaticon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:01 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 9112\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9112,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9112, version 1.0","md5":"8efd11f011a4ca21415609cb252f3be7","sha1":"fdad89e462bc4d0527c69746de087abbcd52b0fc","sha256":"7932fd720bef35bfa1ee01bead85ea36dc978f1bc2b80b65106d6367c4bb525a","sha512":"86265d96c6a065efc0a017f10285e21dd58e015bee26cda8e8105861149c26ade0602225bc47cf3b61351250b34cdaa8729b1588dfe4558cb4dbe980d14f46ab","ssdeep":"192:vEuXc8treTr7NPIjM2MZOEqjLwtjziyLBJB6ZM37TprNJOEB0:vEgc8tyTrhPqMQEqjLqj+0JB6ZMLT3FK","tlshash":"e812bfcc5861241ab2085a7f08391e2d82528b7db5da0a0974bbf66c6c8e5b08311bbe","first_seen":"2025-03-20T21:52:11.19411Z","last_seen":"2026-04-20T06:03:17.117958Z","times_seen":42,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.ppNUcIloFls.L.F4.O/am=AAAAAQ/d=0/br=1/rs=AGKMywGMXfaCTT1v7ihDFNZ-2D0-O1_ZiA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:01.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.ppNUcIloFls.L.F4.O/am=AAAAAQ/d=0/br=1/rs=AGKMywGMXfaCTT1v7ihDFNZ-2D0-O1_ZiA HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 42293\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 13:16:37 GMT\r\nexpires: Wed, 14 Apr 2027 13:16:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 05:11:23 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 49344\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":349372,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (32709)","md5":"889eb0c5cec5a40491c00f804ecf3e67","sha1":"136f105c73f7ab88111c504419551bf5c14b1f88","sha256":"d2f69a9fc01824485b33a1f90be3988fa578d7d2d92b705bf9db10c3853b5792","sha512":"9582dc1080abd3b7cd60f034b0228a62c7baa7eb569a7a86cbc3bfe0d13fbf92373f5df81e8e3693db99c8d42c8c98db3afab26e78841cbb3220d8cdafa6a27e","ssdeep":"6144:QCZcNY2o5P8NhojpnGsQDoAoSCgpe4cyvocH8nOodDOoaX+xbJnc2pTteQW/EHWv:NZcNY2o5P8NhojpnGsQDoAoSCgpe4cy9","tlshash":"fd74c8735622132ce127c765e6e1fe0ab226c913c35637aff442be2c85cf6d2192664d","first_seen":"2026-04-14T14:26:58.138204Z","last_seen":"2026-04-15T17:30:11.976129Z","times_seen":797,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":80,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:08.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1776221948753\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgthNkRyZEhqZm94RSj1_fvOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgLQ%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260414.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 899390650\r\nX-YouTube-Page-Label: youtube.embeds.web_20260414_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1776221942336\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C250%2C250\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 3420\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3420,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260414.01.00\",\"configInfo\":{\"appInstallData\":\"CPX9-84GEMPegBMQmY2xBRDa984cEJfVgBMQh6zOHBC8pNAcEMKJ0RwQprbQHBC-hNEcELjkzhwQrtbPHBDI988cEN68zhwQgc3OHBCUg9AcEMzfrgUQrPXQHBD8ss4cEMGP0BwQv5TRHBDGxs8cEJT-sAUQntCwBRC9tq4FEPG00BwQpojRHBD-jdEcEImwzhwQ1YW4IhC9irAFEPv20BwQ9quwBRCUttAcELW1gBMQ_v_QHBD724ATENOf0RwQvZmwBRCL988cEMz50BwQsP7QHBCfz4ATELTEgBMQ14W4IhDy3oATKkhDQU1TTWhVcC1acS1ETGlVRXBRQ25BNzVGYjBHV2VRRWg3WHdDektnckFRRHpmOEZ5N2NHLXlhMjVBYWZpUTNxLVFiMEhSMEgwAA%3D%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://qfsglobalsecureledger.com/\"}},\"events\":[{\"eventTimeMs\":1776221945746,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIFA==\"},\"context\":{\"lastActivityMs\":\"2750\"}},{\"eventTimeMs\":1776221945750,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"2754\"}},{\"eventTimeMs\":1776221945882,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"2886\"}},{\"eventTimeMs\":1776221945882,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"2886\"}},{\"eventTimeMs\":1776221945884,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"2887\"}},{\"eventTimeMs\":1776221946751,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAGCaQA==\"},\"context\":{\"lastActivityMs\":\"3755\"}},{\"eventTimeMs\":1776221946751,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"3755\"}},{\"eventTimeMs\":1776221946752,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAADZAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgFvCgYKBGFHSWYSCREAAAAAAKikQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAPA/\"},\"context\":{\"lastActivityMs\":\"3756\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"9f7eaYjyA52ejNgP-YOZUQ\",\"clientCounter\":\"11226\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 02:59:08 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-04-23T11:12:34.310496Z","times_seen":236480,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/sop.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /sop.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 1251\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:04:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-23T11:09:30.510592Z","times_seen":120561,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":530,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery-3.5.1.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery-3.5.1.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 89476\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-23T11:13:17.280472Z","times_seen":225989,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":617,"dns":0,"connect":0,"send":0,"wait":118,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/popper.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/popper.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 18453\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18453,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18365)","md5":"abf6eaa0dafabdfc480d7691f9777995","sha1":"5f7e392213cdf5e71614118fb26f9520ef80df97","sha256":"4efa894b85e3c9b1d30d13ed6c3ee0f5320af9f1a3d20ec2838467e464c4f5a7","sha512":"066334fc1425aa1d36c2e2b91b3f72adb7bb572215c0ecc3d68e34ca2d48b138eb897fcd185dfb3725c77e6173225326a122015e0a83886d55354ea40797416c","ssdeep":"384:PMFHekJviNIGYAjvOg/+f3+l/m5HfxoILuw/VoNnuGb/f/MgHknmjNzWN6j3Q1:EBsjvZ/+AsR6w9oNnuSf/MgEnmjNzWNb","tlshash":"d882b6cc7694f4a5166753b6807b551fb333a920218ef500b254d6da2c74eaba32bc3e","first_seen":"2023-03-07T13:17:05Z","last_seen":"2026-04-23T11:22:12.244818Z","times_seen":534,"resource_available":true,"data":null}},"time_used":746,"timings":{"blocked":631,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /embed/sFX1d7Si3mA HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, base-uri 'self';object-src 'none';script-src 'nonce-ACR-fljkm7UO2mzPxlAtbw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 15 Apr 2026 02:59:01 GMT\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-BUCKET=CN4C; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nYSC=onzE0OpQtOU; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Thu, 20-Jul-2023 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=2QxSRfkqsi4; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgEA%3D%3D; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CIuOmfTt5PDxjQEQ4ebZru7ukwMY4ebZru7ukwM%3D; Domain=youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137286,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52117)","md5":"36e501ecda7c874871ade3fa5ade51bc","sha1":"e745fbb9958517c16cd4b8de408822002ac134c5","sha256":"3fe56b36c063d9fd22556d849888ffd3291f15a873dbbe25d1aa724abdb7e1ad","sha512":"96a5b3b3f0f3eb2badd83004fcaa405b87f135a10b0dcc34bde1f635e9c5a13723cdb04427e16544863747889dd9fc72c72e83b5cabad1a81832ce9a97335e8d","ssdeep":"1536:xo1sO58lAMxt2vahwwd4jU2wg6q+iR4gbeA55xYv7fNUly4SigRb:w6l5wwv2wg6qft5xYKy4u1","tlshash":"2dd31a254868a8b5c5939807edbaff3e6cf8023907c495adbcbb975c01dc6610eaf417","first_seen":"2026-04-15T02:59:49.439Z","last_seen":"2026-04-15T02:59:49.439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":71,"dns":1,"connect":21,"send":0,"wait":83,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:01.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290686\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-23T11:10:21.517787Z","times_seen":756306,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":185,"dns":20,"connect":10,"send":0,"wait":10,"receive":2,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/aboutbackground.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/aboutbackground.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 1229\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1229,"size_decoded":0,"mime_type":"image/png","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"836004c8a38e0896f13e0e3684e7b042","sha1":"a8b35765b1909aa611fee787e551eca2874310bc","sha256":"1e7fda8475d2ba9e1f174715db67d3f7d0514b9172b6c405f2868a97b4afe8d7","sha512":"4f3cb4116bffedd39e7b556c7cd53d9eaf1a113c94bed86c9c28532b71043f6e2b85d17c933ab6d0eadc5089a08167963a999e7be1b47e12ff2306a7ff2e7864","ssdeep":"","tlshash":"3d21843ac1c4150ae0235258fb81f78836168251d2870fa17b9e7567facd0f756a37dc","first_seen":"2023-04-05T10:23:25Z","last_seen":"2026-04-19T19:54:39.462865Z","times_seen":647,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:05.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1724\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1724,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$ngE5AWVRAAaFLtUppS7enaB5h0Ntt3inAEABEArZ1KXcOUY73HgdajdotCTMAIuvtHI96B8P0MPro0SgNRkhN4X9uVc6XL4hlkdFptWc9IOj1qaF6MDW-EqgngAAA3jOAAAAFPQBB-IAUgBXklGnEGrxKsM2XSZD6oSPRHfRhvB0ySDY03HrimCWJna9C38K4q7nGMZVBHNCH95Bja21h7OMgGrR_9BVjeOk0uUeexEJNgAqFXc4LItb4iEFBDlV0Xle3rWdxMSsCs8itMlyBwz9k95S-y2ivUpYLS7oVXUzgg3usQB82LZ8KQsE8hbgHFgB3BRvD2zO-3VXzDFNZm478WvEcGhqIuVTYxsplvcpcyg8MYH0ycHerKFO-rmsjuaOjyR_MffClfiEexGNGuPW_b7OnCTiRHlnG0KAgvPa5_eE0QN3eQt7ItJD7wJYKIR41ChT0KLB1fMSx6zr1NFjyIUEOp4s53AVqBS8CqMAqx_LF99YR7v3IuLbGQcA1fk8wmLFgNhqLus5P1fmBKnVqaQLImq_GykUexiu3rljZmCDgi49ViWHyCf6WTmXdXvr6HzCbAmobU0zZngyh19G6g04ZKOG64LMl7Mlovff8YgnrYajzdy0rYjx555FrDbhhuSsFgi2SQkTlvPZccPeHbN92lz6waA60nIivvVfalcs1j2l_4L8eVfFWO60aXZJTW29pqU08FKKKP4_8V-zAkrdxZSVRLKklg4kEYs9qAhY2ucVZEa4uSHy4ZIp6OtCU0mFHLtCFRWdNL0K6KG0Q2BK-1FiQ_sjpbDICZRRtzSyJ87HRlyPzUqzyonTgEEMZbWDsTYZfqnyYiTb78QRZxnMUyX0Mi1RX_BehHoO50oeIavyLLJF0j8wlN6gBXmr44cW6pUVuOxxOR6t9PWTq5tzUyagmYwMbNlcfNh5OPUDErlFUMdtwHdIr6EMOVs8r-ecUgFx1T1eWomkWxzhhbOhIRZu-EGLEPmbkF2RZt8CY4YHmGkji8M2rk-8dF6EYaOJzXwUjle2JEhIUK_KPMsUzE5GpFRABbFgVijXsW8KAJGhsqFCMmNiN6LSpagmc8MvGnoYv5eVuo5o_pT7ySymxH8s-1kJvW9LpM8IdMKhTmJE53tbHvnHdqk4x9aiZMJSrHGDY0B2Y8OFNRoK06Jx5N-sob5pY5r8TZMiITXhBQP7xrf8nmumBXcOL1CYCj1EI945-Zf3E4qAYBuMqK11f_mJVLtTlescgOYpmHTwypcIxUi157m5M5tQJuMBo_2DZAIqmR0TyqdZQQM3az_Zym0dezaE7Rglo9xZNvaKctzu-Vs_4xEHEHiifA3zPx-7mqwJQiNkFHO-djOjoKEJgYDnjtGj73Ot3Axp4NbEj7zY_DS5vrE351Q1ht2vzMrIpDEmvNqCAW8oKfGLWpt213lTcy303jvl8P6BBk4uJsv0X9D-XT_krpokvWnnCRBHqGkDF2B8lBki_21pQ30zjAV-lwDexyP4xGt_MPaYwAtQV7p-6zgfTvbWAtt8xaiOApUi-ZUV-XC0Pef0D0IxSzi05tfua42p_ruh7Rac8DrH1AgvgiUG4f-c4nVdq9M0ou_5ssygyWP0NxFEfWh6nxVn_U1EmmZM2oglZCTW6SGF45f8JAU5AXKBAiWlpv79B2iyF8YqbUs4KLzTD6nQ-Byl\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\nserver: ESF\r\ncontent-length: 122\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"bd98dd07abcf3989c01ca8846f080a16","sha1":"42c7dca055166af52e0447b5d0d160ee79ae8561","sha256":"9fca64886c3d40fee80659da1f4377a5fe08f37da16ee39d85c0ca5005acc0ca","sha512":"37853be5973e3f3f39afa745887a1592fb46bbb6b238fe33484bc033cdf171bcffb7efe68e88882b2fd371940b07c576be6ea08e15d1231215f55dcde8763840","ssdeep":"","tlshash":"b4b012d78368ac9412367c915f469f1e01105ea19842de482c551c75cad0241b8121ba","first_seen":"2026-04-15T02:59:49.441456Z","last_seen":"2026-04-15T02:59:49.441456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/?size=96\u0026id=23279\u0026format=png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 10:28:54 GMT","end":"Mon, 15 Jun 2026 10:28:53 GMT"},"fingerprint":{"sha1":"FB:64:A2:47:3E:78:7C:2B:08:A4:67:CE:63:64:D8:05:DB:13:E1:97","sha256":"C1:67:9B:EC:6A:3F:76:AE:75:5D:0E:0F:46:34:13:71:3C:89:7C:17:5F:88:7D:0A:92:61:16:3F:C9:67:77:54"}}},"request":{"raw":"GET /?size=96\u0026id=23279\u0026format=png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 02:58:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 2215\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 23279\r\nicon-size: 96\r\nicon-format: png\r\nlast-modified: Sun, 12 Apr 2026 05:53:08\r\nversion: 0.0.29\r\nfrom-mongo-cache: true\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: k7QXmYZtfcCEXWLsYVR1TfyUL1QCHxDzLK86axNrI1ftFjGX4z0g4IyQOY1Nl/xBAw\r\nx-77-nzt-ray: fdb541231a2c304ff3fede69129c9833\r\nx-77-cache: HIT\r\nx-77-age: 241342\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"4371ebf64b1ba1a356e7011a90be638f","sha1":"94240e6bfe1325b17f0daec489efef6b41a8ba2a","sha256":"ed001648ce2fe5899557f69e66813f97c0a2149552c163d607094a270da84a05","sha512":"abfe9feaa81017ebbb896b1e5601c0982c9d2a2b08e69528385a6607a863e2e55ec8be7f268d9cc01c12c6d7f59f31a1d7c2b8b85b7673a5f8938f38af8ac218","ssdeep":"","tlshash":"3d413c9567e04e6a8ae7f337486d1075d3b3b628b5454414b9284861ed532aad438742","first_seen":"2025-08-01T07:42:48.570702Z","last_seen":"2026-04-15T03:01:03.434499Z","times_seen":15,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:08.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1776221948819\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgsxWFVsTHEyRWlXVSj1_fvOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYQ%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260414.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 899390650\r\nX-YouTube-Page-Label: youtube.embeds.web_20260414_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1776221942399\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C250%2C250\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 3444\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3444,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260414.01.00\",\"configInfo\":{\"appInstallData\":\"CPX9-84GEPCcsAUQ1YW4IhCu1s8cEJmNsQUQpojRHBCUttAcEPzbgBMQgc3OHBCs9dAcEMz50BwQwonRHBCHrM4cEP7_0BwQv5TRHBDxtNAcEL2ZsAUQzN-uBRD79tAcEJfVgBMQ3rzOHBC9tq4FEJSD0BwQuOTOHBCL988cEMGP0BwQvKTQHBD2q7AFEImwzhwQprbQHBD8ss4cEJ3QsAUQn8-AExDI988cEL6KsAUQlP6wBRD-jdEcENr3zhwQw96AExDTn9EcEMbGzxwQsZHRHBDildAcEIqH0RwQhuzQHCpMQ0FNU05SVTItWnEtRE1lVUVwVUNuQTc1RmIwR1dPVUVoN1h3Q3pLZ3JBUUR6ZjhGeTdjRy15YTI1QWJVOFFfRGtBYnEtUWIwSFIwSDAA\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://qfsglobalsecureledger.com/\"}},\"events\":[{\"eventTimeMs\":1776221945813,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIFQ==\"},\"context\":{\"lastActivityMs\":\"2691\"}},{\"eventTimeMs\":1776221945817,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"2695\"}},{\"eventTimeMs\":1776221945891,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"2768\"}},{\"eventTimeMs\":1776221945891,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"2769\"}},{\"eventTimeMs\":1776221945894,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"2770\"}},{\"eventTimeMs\":1776221946818,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAISaQA==\"},\"context\":{\"lastActivityMs\":\"3695\"}},{\"eventTimeMs\":1776221946819,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"3695\"}},{\"eventTimeMs\":1776221946820,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAADVAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgFvCgYKBGFHSWYSCREAAAAAAHijQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAPA/\"},\"context\":{\"lastActivityMs\":\"3696\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"9f7eafaIBYOQjNgPj5acwA4\",\"clientCounter\":\"6509\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 02:59:08 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-04-23T11:12:34.310496Z","times_seen":236480,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/21.37.56.jpeg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /21.37.56.jpeg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 79773\r\nConnection: keep-alive\r\nLast-Modified: Sat, 14 Mar 2026 00:54:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79773,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"fee54bf92676c42ccf6e3cfe3da5d025","sha1":"558503f601bbb72dc8e904ba499926b68cb5b1b1","sha256":"1c8d2c44d81cb3146e9e3854a07f7017f826ce4bee8a78f6bef9688d27709e69","sha512":"5bc40b3dc9ff45557e8b0ef60a3a7e3afd1b515ba3690df48c3908913118dc036a9bc5759b5151ac7ab4e59b5e7a955020f985a953fff6f2110c7bc1ad4e426f","ssdeep":"1536:WKp1nSmfxvqfBamAyx0Fyt/P6TCyf3PFQB2FaT18EsKafXRuvBLywHZtGb4Uo:amfxKamZxfJ6TdYTmEspXsZHHZB","tlshash":"ce73f1d2769bd72beb106bb949b787f13f324c4fef56920d4050bbb5282017829e588d","first_seen":"2026-04-15T02:59:49.44386Z","last_seen":"2026-04-15T03:01:03.418616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1087,"timings":{"blocked":980,"dns":0,"connect":0,"send":0,"wait":102,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/?size=96\u0026id=63760\u0026format=png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 10:28:54 GMT","end":"Mon, 15 Jun 2026 10:28:53 GMT"},"fingerprint":{"sha1":"FB:64:A2:47:3E:78:7C:2B:08:A4:67:CE:63:64:D8:05:DB:13:E1:97","sha256":"C1:67:9B:EC:6A:3F:76:AE:75:5D:0E:0F:46:34:13:71:3C:89:7C:17:5F:88:7D:0A:92:61:16:3F:C9:67:77:54"}}},"request":{"raw":"GET /?size=96\u0026id=63760\u0026format=png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 02:58:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 1773\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 63760\r\nicon-size: 96\r\nicon-format: png\r\nlast-modified: Sat, 11 Apr 2026 18:13:03\r\nversion: 0.0.29\r\nfrom-mongo-cache: true\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: kyCC/UXPQd4QxKvwB5ipPuViRov0qjsNa1ayYbSZ57sISQt/72i5eu6SM76GyM4G7w\r\nx-77-nzt-ray: fdb541231a2c304ff3fede693c6e9033\r\nx-77-cache: HIT\r\nx-77-age: 288269\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"fc5a550f42b305228c83696ff776cd05","sha1":"039968cb10244db3f1a653011e85488fa86651fa","sha256":"1200cd3e0698f5da29cb7d9c4a805dc57a25cbac9ac907c34dfb58555fcdc7d3","sha512":"4b34623af3bce01c05fb93a33afb11188e1f5b999d4935f471537f06d33a1429408e10ecc1925b2c84c610f0b16bf30a0110e9b3f595133de72368aef436fa0e","ssdeep":"","tlshash":"a3312b875088573d9439552c8ed8416832ea9ffc673cf32c43099abba42dbe546537b2","first_seen":"2025-08-01T07:42:48.592728Z","last_seen":"2026-04-15T03:01:03.427443Z","times_seen":15,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/odometer.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/odometer.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10262\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10262,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10240)","md5":"d928a13757dbaa0d5755c6252a4d2fdb","sha1":"e1ebff681214e87f52fe88602a309c94924ca17b","sha256":"0490e46e0015407d9aa0ad0854635b87b7be7befc7345b25afe85d0d21ec2c6a","sha512":"1916eefc9c258e1830174b228774ac1de84bbbe764b7e1348d36163562cc09c6206ed0fa2a72ebf3656fc270ef8a6acb383d1aec3ad9dfb1ac6c8fb45799731d","ssdeep":"192:HABz7vQK8QecCHAOcu2a+OdI5s/GMb8XuulT:gBXv18QecCxVxz+7dlT","tlshash":"e6228580ba11a735835371e151bf0609b7bb99aea404401df67c9dd9be29c38e12bf74","first_seen":"2023-03-10T13:51:16Z","last_seen":"2026-04-20T06:03:17.113758Z","times_seen":76,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":742,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/magnific-popup.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/magnific-popup.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 5259\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5259), with no line terminators","md5":"64912a79884a20761ab19de42f85218c","sha1":"8d29cea8f84afdcaa69c0594e37263f7374dc8a6","sha256":"3d92e113ac3031b838001ddddf965d045f470ff748ff2e116b30378910eeaecb","sha512":"f84a0fc3e162c21e9e49e44aef3c08286d8c03c8b7ad5fc319aded76db501a05b26ad1bf4a49dc4f9dca1d0692e4987d30d393ddd9852f41634d8d3c02777f0b","ssdeep":"96:VuKSCO7EWP9UrJjIjZQX8ZO9d5Zkxudls5/Dm5Mk9nCWh3:VSCO7EWP9UrpIjZQMZO9d5pd+qMk9CWB","tlshash":"43b175f3a941313ac633da16d5c39f9c3227a227f663569fcf82a419c6ce89c0525384","first_seen":"2023-04-05T08:30:27Z","last_seen":"2026-04-23T07:03:15.995296Z","times_seen":3969,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":293,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/b174a5bb/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:01.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/player/b174a5bb/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 57938\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 07:40:09 GMT\r\nexpires: Wed, 14 Apr 2027 07:40:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 04:29:08 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 69532\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":526884,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"75bc21c4a4c6440debd73fe708492634","sha1":"6f56b35d6a8640cc6e6b20ef3f4ba3c2f675c29c","sha256":"aa68e0e1ccb88e0e7e5b0e712acaefd700bc1fddffe47833b9f357c139ef7839","sha512":"35493527cdfb09137e106572e216ce51a279ca2723c940bb1e85dee60d5b7c78988f36de98f1a040a3e5c865aeea0c415d3c795fa80a1ab77f388ca0cfc93277","ssdeep":"6144:q8d5Fe/qoMOg7U9Bfbo4M5Ulv5P+oYo97:pYxMOg7U9FoR5Ulv5P+oYo9","tlshash":"ecb4ea72f0d1233cf2178d9997d9964d7239d983e2e22aeff11166dacbc77811326206","first_seen":"2026-04-09T15:07:35.831353Z","last_seen":"2026-04-17T00:31:51.710171Z","times_seen":2255,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":79,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:05.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1776221945453\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgsxWFVsTHEyRWlXVSj1_fvOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYQ%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260414.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 899390650\r\nX-YouTube-Page-Label: youtube.embeds.web_20260414_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1776221942744\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C250%2C250\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 10260\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":10260,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260414.01.00\",\"configInfo\":{\"appInstallData\":\"CPX9-84GEPCcsAUQ1YW4IhCu1s8cEJmNsQUQpojRHBCUttAcEPzbgBMQgc3OHBCs9dAcEMz50BwQwonRHBCHrM4cEP7_0BwQv5TRHBDxtNAcEL2ZsAUQzN-uBRD79tAcEJfVgBMQ3rzOHBC9tq4FEJSD0BwQuOTOHBCL988cEMGP0BwQvKTQHBD2q7AFEImwzhwQprbQHBD8ss4cEJ3QsAUQn8-AExDI988cEL6KsAUQlP6wBRD-jdEcENr3zhwQw96AExDTn9EcEMbGzxwQsZHRHBDildAcEIqH0RwQhuzQHCpMQ0FNU05SVTItWnEtRE1lVUVwVUNuQTc1RmIwR1dPVUVoN1h3Q3pLZ3JBUUR6ZjhGeTdjRy15YTI1QWJVOFFfRGtBYnEtUWIwSFIwSDAA\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://qfsglobalsecureledger.com/\"}},\"events\":[{\"eventTimeMs\":1776221942416,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942420,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942437,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942437,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942438,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942438,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942790,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942881,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941146,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940868,\"latencyActionBaselined\":{\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941058,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941146,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941160,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940931,\"latencyActionTicked\":{\"tickName\":\"ndnss\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940932,\"latencyActionTicked\":{\"tickName\":\"ndnse\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940932,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941058,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940958,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941058,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941604,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941972,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941569,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942033,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941568,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941851,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941568,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941922,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942890,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942397,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942894,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942899,\"latencyActionInfo\":{\"serverTimeMs\":42,\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221943141,\"screenCreated\":{\"csn\":\"YCVNv1eKYhdz7bux\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"9f7eafaIBYOQjNgPj5acwA4\"}}}},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1776221943142,\"latencyActionInfo\":{\"clientScreenNonce\":\"YCVNv1eKYhdz7bux\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1776221943142,\"screenCreated\":{\"csn\":\"yVZd_SpN4opR0Tah\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"YCVNv1eKYhdz7bux\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1776221943143,\"visualElementHidden\":{\"csn\":\"YCVNv1eKYhdz7bux\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"20\"}},{\"eventTimeMs\":1776221943143,\"latencyActionInfo\":{\"clientScreenNonce\":\"yVZd_SpN4opR0Tah\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"20\"}},{\"eventTimeMs\":1776221943143,\"visualElementAttached\":{\"csn\":\"yVZd_SpN4opR0Tah\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMIi8rdru7ukwMV05X0Bx1_Cxy-ygEEBgLlqQ==\"}]},\"context\":{\"lastActivityMs\":\"20\"}},{\"eventTimeMs\":1776221943146,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"24\"}},{\"eventTimeMs\":1776221943148,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"25\"}},{\"eventTimeMs\":1776221943163,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"oZqHkiLSj6oveJof\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"40\"}},{\"eventTimeMs\":1776221943167,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"44\"}},{\"eventTimeMs\":1776221943242,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"aCUiFUkyqCC7V-LZ\",\"clientScreenNonce\":\"YCVNv1eKYhdz7bux\"},\"context\":{\"lastActivityMs\":\"120\"}},{\"eventTimeMs\":1776221943243,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"aCUiFUkyqCC7V-LZ\",\"clientScreenNonce\":\"yVZd_SpN4opR0Tah\"},\"context\":{\"lastActivityMs\":\"120\"}},{\"eventTimeMs\":1776221943397,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"275\"}},{\"eventTimeMs\":1776221944402,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"1279\"}},{\"eventTimeMs\":1776221944403,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"1280\"}},{\"eventTimeMs\":1776221944404,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"1282\"}},{\"eventTimeMs\":1776221944410,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"1286\"}},{\"eventTimeMs\":1776221944731,\"visualElementAttached\":{\"csn\":\"yVZd_SpN4opR0Tah\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1607\"}},{\"eventTimeMs\":1776221944731,\"visualElementShown\":{\"csn\":\"yVZd_SpN4opR0Tah\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1608\"}},{\"eventTimeMs\":1776221944771,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"1648\"}},{\"eventTimeMs\":1776221944923,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"1801\"}},{\"eventTimeMs\":1776221944923,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"1801\"}},{\"eventTimeMs\":1776221944924,\"visualElementAttached\":{\"csn\":\"yVZd_SpN4opR0Tah\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1802\"}},{\"eventTimeMs\":1776221944924,\"visualElementShown\":{\"csn\":\"yVZd_SpN4opR0Tah\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1802\"}},{\"eventTimeMs\":1776221944924,\"visualElementAttached\":{\"csn\":\"yVZd_SpN4opR0Tah\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1802\"}},{\"eventTimeMs\":1776221944924,\"visualElementShown\":{\"csn\":\"yVZd_SpN4opR0Tah\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1802\"}},{\"eventTimeMs\":1776221945042,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"-jvDkxt3v4kNtSP7\"},\"context\":{\"lastActivityMs\":\"1919\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"9f7eafaIBYOQjNgPj5acwA4\",\"clientCounter\":\"6508\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-04-23T11:12:34.310496Z","times_seen":236480,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/trustpilot.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/trustpilot.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:01 GMT\r\nContent-Type: image/png\r\nContent-Length: 7965\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7965,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 247 x 139, 8-bit/color RGBA, non-interlaced","md5":"299e966a1e48c90f856f71659599fb37","sha1":"5ec61356526e2b921a733eeae3bfb898f884c034","sha256":"08fd90ecb9d2ceb9deae377abbefae14c238bad17d401ffc8e1a03c4b98cb7fe","sha512":"d8b2ed5b090b1936117f345d99f130a9df278965e69143627590ef4836dc13b21919e9a55fa659e6b7e90f81375621999411fe9b3581df344f61b90a4c18c53b","ssdeep":"192:Uukn2c483Ock/YfTf2f+j9OtschJoD2DwFHZtkVKw40L:mn2cNf2f+EtB82Dwt7k8wV","tlshash":"f5f15b84e1437ad45182fe5d3a8dd4ff2a268b411fe0e49facd1972669320f4c9761c5","first_seen":"2025-02-16T20:38:08.807192Z","last_seen":"2026-04-15T03:01:03.420338Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1436,"timings":{"blocked":1312,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /embed/juUgJwBwgWk HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, base-uri 'self';object-src 'none';script-src 'nonce-ohMMDRW0KlnRKw1eM-j9Vw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 15 Apr 2026 02:59:01 GMT\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-BUCKET=CIMD; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nYSC=5QO4_S5WAK8; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Thu, 20-Jul-2023 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=1XUlLq2EiWU; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgYQ%3D%3D; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CJf1g92lidOgbhD_49yu7u6TAxj_49yu7u6TAw%3D%3D; Domain=youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":136746,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52117)","md5":"b13075ab6d81708087a88f5c28ebdba3","sha1":"42ba82f2967bc2b1b7e8e1f1e412cabedae8a99d","sha256":"3979e626706352ba8a3d45b808914cbdcfcf3abff3e0dc4401e7942826e017ae","sha512":"160df3e1555edbe51162681d661bcc2b2d22d42a028b58d905613c8c96bfc969177baba46e6191ab747e3191ecf6b1fcc50c95f8af5d6dc24fa071876942975d","ssdeep":"1536:4oC2OGoyxNt2yahgSpd4jU2wgYZ1Ysp0ws66UlCV1LRiGmKagmNyzR:yly8gSpv2wgYZ9TXxlW1kngmYd","tlshash":"56d31c250858a876c5939447edbaff3e6cb8023907c9956ebcbbd75c01ec6610eaf413","first_seen":"2026-04-15T02:59:49.44894Z","last_seen":"2026-04-15T02:59:49.44894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":109,"dns":1,"connect":23,"send":0,"wait":87,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/qfs.mp4","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /qfs.mp4 HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:01 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 78021351\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:14:29 GMT\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-78021350/78021351\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"b9338e1a527dd92043c310c928485a53","sha1":"62ab570f7c2fbf01c5cecb0484ed232eb7852289","sha256":"2a16ca698fd37730488269a977d2028f1f6c131e660bec2c4ba644b2675bc314","sha512":"d4802200254f15f97cc1e3e853d8f29661d924ca701d6c6b51317e699700ef4b1ffd730f2625305f574ea0a9f892ebbafe824b90d7ec63737fe32f1ce06dfe27","ssdeep":"12288:dG9m4TiBNgvcDN/43Mmj5xO1vN9Htz5Lo3/+dU2iPlv22X9tHOi+hXSxD:dGM4TbvcDdiMmtxO1R5s3W0lOi+E","tlshash":"84f412f5eb6d1516eae3aa30e1d92728bc44a4f151c0c9ca10f6d37f8b350e5eac60d9","first_seen":"2026-04-15T02:59:49.450326Z","last_seen":"2026-04-15T02:59:49.450326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":105,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:01.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290686\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-23T11:10:21.517787Z","times_seen":756306,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":280,"dns":4,"connect":23,"send":0,"wait":10,"receive":2,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en-us.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:02.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 01:40:44 GMT","end":"Thu, 28 May 2026 02:40:40 GMT"},"fingerprint":{"sha1":"F0:7F:B1:BC:BE:73:55:AD:38:9F:92:6F:D6:4E:DB:1C:05:30:A3:80","sha256":"32:CE:74:34:FD:C2:62:30:95:38:1B:13:E0:4F:A0:DC:0F:1D:D8:44:4D:60:AF:C5:1C:94:AD:15:57:F1:6F:2F"}}},"request":{"raw":"GET /flags/svg/en-us.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 02:59:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Sat, 13 Mar 2027 06:06:32 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nc366UY%2BW%2BQepJRd4AcQ3M0nB%2F%2BSpHTLQqs3CFAV6uVDnBEurk04FDG7Gzo3J1hdQYEIj9uyfyY6ZxGLCzBfOOkMnZC%2FxoxkjtCI7O9WqH7wE1SnN1z6Mesu0FWb5qrSXSv3jQ%3D%3D\"}]}\r\nage: 2839950\r\ncf-cache-status: HIT\r\netag: W/\"639d0089-17c0\"\r\ncontent-encoding: br\r\ncf-ray: 9ec7b1239e5e56b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6080,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd1db9b9606bef828892eae52f30a642","sha1":"2fc22e2636c912d135e456c841656e93ecbfa394","sha256":"1c64c14fa68916dba409ddf0e38ca5dc8bd262b959a5814ecb6667096b35efa5","sha512":"8f54327e0e9a3a85d935e89817d86426f59d7c15f6723ffff7047cc72a407c41d2046bd9f6c58648aa57c3aa870947008fe47de86a219126dfd0f53a5ac9d2d0","ssdeep":"24:t414AhNMMJtMMaKKKKK+51KKKK+kG/GBlIQs9rBvyIrEnxn9rVIvoLMd3+FxUxvH:C4AhSkmC0DdavymqV+","tlshash":"7ac125fab7b0a0c57a4b9a119733db1fb95b245c1575d706f002f69d82aa232c44fe38","first_seen":"2023-05-07T22:36:46Z","last_seen":"2026-04-23T10:32:34.30701Z","times_seen":3737,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/meanmenu.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/meanmenu.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 7278\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7278,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0e9d719c0fc93c8f128b233de0dcd6bf","sha1":"0305e608c34f4858ee6f63065e8cdeeacf235908","sha256":"7cd9b0eb937a055990515570a19065202d520fad145d252b73a1350247f32e1b","sha512":"1542124f039d7161eecd1382c61a55b21717974581bebc4d0eaef81615cbe26757a88fa4a9387560b92f63e106318e9000992920422cc27be6414d3180fb32d5","ssdeep":"192:kXyhB2Qaqxv4m+dVMF7FAix8thN7UMLDh4LvhNRPYSyeVS1tgesVRvL:kXCZaqxv4m5F7FA88zN7UMLDh4LvhNR1","tlshash":"27e1f356dab72444788a806caf9993342fdc5047a72dde6a35afa254cfc338450a3fdc","first_seen":"2025-07-12T07:10:36.115319Z","last_seen":"2026-04-15T03:01:03.443422Z","times_seen":11,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/logo2.jpg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:02.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/logo2.jpg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:03 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18329\r\nConnection: keep-alive\r\nLast-Modified: Sat, 14 Mar 2026 00:26:05 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18329,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 341 x 322, 8-bit/color RGBA, non-interlaced","md5":"4393bd8fc313faebba4e2389aa088733","sha1":"65780f0cdec848cf5b13093b0fc1147c9774c539","sha256":"e772f6af97eae1e19113fb3d037a0d9f2ecdfb04edea213d434eca2c9e3924d0","sha512":"3b2bd23a40fb483144d624f8d59fada75b8df523cde2e4823b76f25b877f46d71d60aebfa174b39b7cb4b7f238742ab88900e5810ab42104b067c08d1ad23f47","ssdeep":"384:z0w6ri50I3j7LGELTLXb8knlUisC5aT26ec3gD/DJ0KPg:zZFT7iE3LL8klk3NwDL+F","tlshash":"7082d0c1585cc965810a1a665ad9cf039b13a5cde58e0f089c5f9437cb26aa23fbab81","first_seen":"2026-04-15T02:59:49.453867Z","last_seen":"2026-04-15T03:01:03.439128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1466,"timings":{"blocked":1335,"dns":0,"connect":0,"send":0,"wait":130,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:08.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1776221948758\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgsyUXhTUmZrcXNpNCj1_fvOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgEA%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260414.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 899390650\r\nX-YouTube-Page-Label: youtube.embeds.web_20260414_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1776221942121\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C250%2C250\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 3441\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3441,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260414.01.00\",\"configInfo\":{\"appInstallData\":\"CPX9-84GENzPgBMQwY_QHBC9tq4FEMbGzxwQvZmwBRCZjbEFENWFuCIQ9quwBRCfz4ATEJSZgBMQrPXQHBC_lNEcEJSD0BwQ05_RHBDI988cELyk0BwQ_v_QHBCU_rAFEPG00BwQi_fPHBCmttAcEP2S0RwQuOTOHBD724ATEIHNzhwQzPnQHBDD3oATEMzfrgUQh6zOHBCHkNEcEPv20BwQibDOHBDevM4cEJS20BwQrtbPHBD8ss4cEJjVgBMQvYqwBRDCidEcEP6N0RwQndCwBRDa984cEKaI0RwQs5HRHBCMtYATEJ3dgBMQ6dOoFxD4n9EcKkxDQU1TTlJVMi1acS1ETGlVRXBRQ25BNzVGYjBHV09VRWg3WHdDektnckFRRHpmOEZ5N2NHLXlhMjVBYklsUVRQX0FIcS1RYjBIUjBIMAA%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://qfsglobalsecureledger.com/\"}},\"events\":[{\"eventTimeMs\":1776221945753,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIFA==\"},\"context\":{\"lastActivityMs\":\"2564\"}},{\"eventTimeMs\":1776221945756,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"2568\"}},{\"eventTimeMs\":1776221945877,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"2689\"}},{\"eventTimeMs\":1776221945877,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"2689\"}},{\"eventTimeMs\":1776221945879,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"2691\"}},{\"eventTimeMs\":1776221946757,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAKCaQA==\"},\"context\":{\"lastActivityMs\":\"3568\"}},{\"eventTimeMs\":1776221946757,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"3570\"}},{\"eventTimeMs\":1776221946758,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAADVAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgFvCgYKBGFHSWYSCREAAAAAACyjQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAABA\"},\"context\":{\"lastActivityMs\":\"3571\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"9f7eacOLAoCTv_IPgqTeiQM\",\"clientCounter\":\"255\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 02:59:08 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-04-23T11:12:34.310496Z","times_seen":236480,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /embed/yLeji6EidI8 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, base-uri 'self';object-src 'none';script-src 'nonce-nCZ0cz7YcpW0EoUlFUpMaQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 15 Apr 2026 02:59:01 GMT\r\nstrict-transport-security: max-age=31536000\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-BUCKET=COUE; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nYSC=mRhUIJHQ-Tk; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CJGPuuKitPFAENrP267u7pMDGNrP267u7pMD; Domain=youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\n__Secure-YEC=; Domain=.youtube.com; Expires=Thu, 20-Jul-2023 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=a6DrdHjfoxE; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgLQ%3D%3D; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 02:59:01 GMT; Path=/; Secure; HttpOnly; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":139372,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52117)","md5":"087026034f30cfcf2c984e9e94ff1d30","sha1":"ae66c45fbf49e3ebe649790f87a4dc57617e9064","sha256":"87cdd9964f6f02dc3bf8fe760219115d50d2816e5bbc52b959937b27b28fd5c2","sha512":"53e420786498532e8ea6293f1431a70220bca1e1e004fb0b5657e3e2655cf18b4093d0f7242c8fc0c73e4e2d0feb2048579dc93a6f7a6dc32f583cb0aa958f0b","ssdeep":"1536:JEuzO7oyxNt20ahVuUd4jU2wgNO6h+WmKspkdZv3MJUEdxefKrBbV:4Uy0VuUv2wgp4Wmov3adxjrn","tlshash":"c8d32c250858a876c8939447eebaff3e9cf8023947c495aebcbb975c01dca510e9f417","first_seen":"2026-04-15T02:59:49.455151Z","last_seen":"2026-04-15T02:59:49.455151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":96,"dns":1,"connect":22,"send":0,"wait":86,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:02.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 146487\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:42 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51021\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":510435,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2293)","md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"resource_available":true,"data":null}},"time_used":1113,"timings":{"blocked":995,"dns":0,"connect":0,"send":0,"wait":35,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"52.29.137.2","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:04.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://qfsglobalsecureledger.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: U+WVUizrbZ3R+b6xlvA8oA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 15 Apr 2026 02:59:04 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: /OTecBoocL52CtOjddcW9tuwmbA=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":110,"connect":130,"send":0,"wait":23,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/animate.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/animate.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:58:59 GMT\r\nContent-Type: text/css\r\nContent-Length: 58113\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:00 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58113,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57903)","md5":"e3e3700d61c45e1e5ccf7ca4834d2a83","sha1":"c962baa0c04422114ad141bdadca84fbd0fc7fdf","sha256":"582f0595cbd3ef5c107b179ca19432bfd668dc80f77ac4bafe187164075894f4","sha512":"4fd09947050e7037990f098674b286b193a1fe2ed0ce49a4a5f09aa5dca820bfd4db66baa10291ac4bcb5d63086e878921eefe2d43a3270be1c40010f2cde74b","ssdeep":"1536:UkZHPGwQ1OAPkWDL32ye5trKem0OTo6j3rwzlr2c:UkZuwQ1OAPkWDL32ye5trKem0OT0","tlshash":"3643f8af5891229991230f66c7cc5ea8873dc66314721cde33866c4b8b46fde33ca617","first_seen":"2023-06-18T15:17:44Z","last_seen":"2026-04-20T11:40:44.023179Z","times_seen":127,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":111,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:01.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290686\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-23T11:10:21.517787Z","times_seen":756306,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":172,"dns":20,"connect":7,"send":0,"wait":11,"receive":9,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:04.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:30:49 GMT","end":"Tue, 23 Jun 2026 10:30:48 GMT"},"fingerprint":{"sha1":"FE:60:F0:6C:13:88:B2:39:2E:11:67:71:2A:8F:58:11:3A:45:30:5D","sha256":"BB:F8:AA:87:AE:AA:9D:E7:CC:47:F2:E8:98:89:5B:12:D2:33:6C:16:8E:C6:CA:61:CB:25:84:42:51:47:56:17"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsglobalsecureledger.com/\r\nOrigin: https://qfsglobalsecureledger.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 02:59:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: c494243850baf102b3f9f705545512bad86646b6\r\nx-77-nzt: k6ysCOjaAqFfgw0b1BRRxcGZMtFWAMa8prcNmbO1vV9tBuMISWHKpGCA3WiqR4xLdr/Fp30\r\nx-77-nzt-ray: fdb5412325224788f8fede695d6de624\r\nx-77-cache: HIT\r\nx-77-age: 317\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7216,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"05d7604a60456ab25eb809557b353edc","sha1":"e32135b721636e7994e42748da35341e03dfd123","sha256":"5892aca834fe3f9f8fb66f68c8a3eb2295708a3b428cf355d7f3e3c1a0b7b62e","sha512":"db4124c008e22597192e1f07b44575ff191a03322f763bffb1efd129152e0f6f1546d98f5016967b32cc71a8252fefc0546aef0be258e8343fbba4ae2afe00da","ssdeep":"192:Ccdft/hc4l6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcbWbYKZcF+jhqoWQmw","tlshash":"48e1b54f9a144ea987c6438276cfb84675bc80734250993afd8cc8b842697cda3e3b94","first_seen":"2026-04-01T12:23:41.393805Z","last_seen":"2026-04-23T05:43:00.898349Z","times_seen":657,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":59,"dns":34,"connect":8,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/www.japantimes.co.jp/uploads/imported_images/uploads/2021/02/np_file_65624.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /www.japantimes.co.jp/uploads/imported_images/uploads/2021/02/np_file_65624.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-23T11:08:49.16704Z","times_seen":144537,"resource_available":true,"data":null}},"time_used":1078,"timings":{"blocked":981,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:01.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290686\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-23T11:10:21.517787Z","times_seen":756306,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":176,"dns":3,"connect":23,"send":0,"wait":14,"receive":2,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/unpkg.com/aos%402.3.1/dist/aos-3.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /unpkg.com/aos%402.3.1/dist/aos-3.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-23T11:08:49.16704Z","times_seen":144537,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":529,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/counter-shape4.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/counter-shape4.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 5271\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5271,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 371 x 255, 8-bit colormap, non-interlaced","md5":"2280efee7bcb1ad3a1434f981a87f0ce","sha1":"3dc89ae8638e55dca8fb854e97ff42f3dbb15717","sha256":"79f6e3b4d41c5c76da464eb1cf5bb960ee042536b32f57e470b415c416dd6c92","sha512":"a2d8ce91f84fa2f1213b65ee418eff2816ce6d6cac4a980b1fee560387ceef5962bd1018fbaee1ddb09b645ed3e2601c713d4dbd24a2d1a7b04ba86d819af8fe","ssdeep":"96:DHJ+MI6t7QtMwZBrHuIS8flc8N8Nitgoiia9OSCz4YiNB5MHoiD706TXU2c7:D0MqtRVHPfbN2iEia9PCzDmMHoV6TXU1","tlshash":"9cb18eec35d85b713365c49a6bd4c3082562730b95b3ce96484e178e0c26b3b7b51cb1","first_seen":"2025-05-02T13:08:05.699387Z","last_seen":"2026-04-15T03:01:03.419337Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1078,"timings":{"blocked":974,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-KNmfGZZQ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:04.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:33:12 GMT","end":"Wed, 24 Jun 2026 10:33:11 GMT"},"fingerprint":{"sha1":"D0:0A:A6:39:E7:85:DF:64:B0:13:66:E3:06:E8:BF:2D:3C:AE:EA:7A","sha256":"70:D5:91:24:1D:F0:F9:7F:57:55:99:71:1F:A5:15:C2:B9:C7:21:65:6B:42:A2:34:4A:6D:A7:53:70:BE:C0:7B"}}},"request":{"raw":"GET /assets/style-KNmfGZZQ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://qfsglobalsecureledger.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 02:59:04 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69afcbd9-9217\"\r\nexpires: Wed, 10 Mar 2027 07:48:53 GMT\r\nlast-modified: Tue, 10 Mar 2026 07:44:25 GMT\r\nx-77-nzt: k5drdwHNGJUYSGEvBkBx+K22Nyz+DTpSC0fDe3H8eefny9xm5pgbX4DVIajvfcuOKJdquPc\r\nx-77-nzt-ray: fdb54123b4244485f8fede695067ea17\r\nx-77-cache: HIT\r\nx-77-age: 3092992\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37399,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37398)","md5":"e0e19bc0ef5c8a7be30d687ff72b1d44","sha1":"103123375bbaaca149d026b729eaf3ef58d2d602","sha256":"f471612283039dacc9bbab82dafd8e35ed37c4fd9d099a7af946c41231daac21","sha512":"1be4a4bce5fd32ddc8843fb781a28a642c4815fbbb891ec33e5d5ee29d1555c7338eb07e4965a7dbb4ddbc26d45381178b973a26a8f8de0ce7ea10029ab11a6d","ssdeep":"768:E8CQgTcCWYtomXFbxrnSJPHs245q+ggFgZ:E8dgTcCWYtdX3uPF4X2Z","tlshash":"35f2a75daad5093cec33c166e3f8e58c9229f591df321adaf6433a048ac27bf1987514","first_seen":"2026-03-10T08:00:57.31215Z","last_seen":"2026-04-23T05:43:00.873612Z","times_seen":2162,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/nice-select.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/nice-select.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 3117\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3117,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3117), with no line terminators","md5":"88503b01944c14f9dbbb6bc9218840cd","sha1":"ea7a5306a4bfb6509d07884a85d5595cd1d740c2","sha256":"98b04886606f8a04c558f482b6f76ee9aefa4fedd7cadf8ae7bd61ba97852e0e","sha512":"0abb823fe4c3df25f396fbe28c44fcc15e56c71121e47f0fe1c9b3d1115b28ae85959dac625dc012c2a52cf1db9e25ca4ab0dd15ec216e604ae6c91b76c0126d","ssdeep":"","tlshash":"5f511235d551216ff07fca3bbac53b68243dd20378324a9ef244e907834e56998da70b","first_seen":"2023-04-20T04:25:49Z","last_seen":"2026-04-20T11:40:44.024584Z","times_seen":251,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":286,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/owl.carousel.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/owl.carousel.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 44342\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44342,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-04-23T10:08:52.028107Z","times_seen":50926,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":706,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-23T11:08:49.16704Z","times_seen":144537,"resource_available":true,"data":null}},"time_used":710,"timings":{"blocked":613,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:01.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 196759\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:41 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51020\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":591066,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"fb598e722e3ca661b8d52298a2b80050","sha1":"63af5c9411b329a6ad1b874d7ccbec0cccb7d53d","sha256":"c86f07d1a6e35e37aed78daa25e6c0011cc94f45f68f2474d498602f9921d51a","sha512":"7916c6378acc030835e3e374ac5dc0ece8b5933743082aa5598c2f58153dc4ce516f6fe92acfd65a29bed63df6e908cb711bdbbb39a5e3808257a67f272e6aef","ssdeep":"12288:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGtpYdJpO8vVhmRvezgHzDzOt5iMaPShv9Sk:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGte","tlshash":"30c44ad873a2706792a2f5e4903f0102b17a6856f40c8cbcf29cddd26db594a51bbf78","first_seen":"2026-04-14T14:26:58.186965Z","last_seen":"2026-04-15T17:30:11.960589Z","times_seen":832,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":84,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/fonts/flaticon.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/fonts/flaticon.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 2033\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e026abe393b771d75b1addfea71af07c","sha1":"1b870657decf3c32d729ff7ee2e58e0eea6c0e43","sha256":"2f044492ff003efe4d3576c313e929db258467a344878d65540854c9d8d99b49","sha512":"3b1c23f5de5342f4835c452d0d69fd193f3e9e184010f0d43b614d828c5e2eb13e1e73509489e8e29b739b7b034e83272d906194f4ea811d2174ad4044c81b89","ssdeep":"","tlshash":"f74184b5846e04808351ae4427ef6240ef44b06d88d8ac69e1165e9cfff5e2cd7867dc","first_seen":"2025-08-11T22:38:38.372851Z","last_seen":"2026-04-15T03:01:03.412077Z","times_seen":7,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":283,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:03.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:39:53 GMT","end":"Mon, 15 Jun 2026 08:39:52 GMT"},"fingerprint":{"sha1":"84:73:AD:21:D7:99:85:74:5C:48:5A:0D:AC:D6:69:F6:B8:C0:F7:92","sha256":"E0:8F:67:97:65:DF:94:C4:50:AD:BB:CB:88:9B:3D:53:89:9B:60:FF:F3:D8:C7:40:94:0F:14:65:BC:FB:C3:B8"}}},"request":{"raw":"GET /js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23855\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Apr 2026 05:15:38 GMT\r\nexpires: Thu, 08 Apr 2027 05:15:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Apr 2026 17:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 596606\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61131)","md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"resource_available":true,"data":null}},"time_used":1032,"timings":{"blocked":717,"dns":1,"connect":34,"send":0,"wait":13,"receive":3,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:05.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1715\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1715,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$TdI50rZRAAaFLtUppS7eSByIa0suKYKnAEABEArZ1DNVSt3q2GcyyZTpXNw5O2tZwS5eAG73QUnz8JppBPhp24wDwkYiqXDXV0xHKzTp8gv4L76x3RpDp3MAngAAA5jOAAAAFfQBB-IAU2QU04O0cW0yhWXhnGScFets2gBUkZLWhdRLWOaSd14jB9BdRuzuBRt-dRUG0Lkcsh3NamyS5E0x-FZFnz9lqtW2GAY_HBjhDx97VrelPy_r3bxbBQQxjAvmN1R07jDu5sRVMucFQLqGMJW2u3W67yXlSDDeXjc-C8qoNvtaGvr4Wx7uk1J9af2K8M8U4ujAuDI9DTerCezQORnWKejz_d7EqaQgn7xpTVaxpEkdLZ15Dor1droivPim3NMD_KPYXwlc9eJWaWaRJ7TZpcZm_Xq58NlAAB3a0MtBUg-V26jJq48zMhuKQtTvGbfaV9yXKL32xHTwaRYVIywxtI0UdO5X6Ggv8G3tbWUCWQDNgHZFigV7ANKUqKijSrwY6k5ZCrXvQIaCjddJ3BsI9IhKzqChCBn2R5TZiXBaCqP7ueQAtw9bOpOE0RqoMNdg926nPnJG9U_toNyCEzkishsnZ7fOlf4GP2RNcOXKYZVyc601sofVm2pGw6cw1eJj7IfgAnj0zBqcmSargAGK0cTdTzJ3TpbS0g2T2wGFqZ8LNUBuwcrOySZV2DLK8iHQQTSPlMhjJEttI5j7OSVPKTalNduFZT5EKmz29aeIw_3r2bgVqScUjooI8K_QK0FaYcXVj2SeimTzH-J8bYTs5WXMr5guL0g8r4Sl24aP2crTksDGdab00PAO2rZqE475WhRpPo08SQrl3edTxlKbHHyKtXSbgsZBcx5DXB9fNerA25LnbxEU6bRjxtryxbKIJongh4xDnei1tPXuwgzswVSyM8TWmMytRFIEIBujNyT5bEsavqxl609UJHdDL8sPg4DiXe6Jbc1GdILBQR2mm6XhwUx_I28vKxn4zPivjj3y7Tg-xdXOe5Ki0bLbOuN5KzOYI3HW_1Jq3C1g6RrWs-Em4Z1Dvt5sQI4OvBEHpqNq_TzNTaRLyq9nTiOkNwLus4Nrvb9GI1I5SBKUgDjJmDb0KxB70WIO8FUGxxXbBRrwXiewkMcFF2acno8ZxSz_CRtRGGleubLzDkTwrogzp87ry7nb51LrPvAlJnCgTCKlP2WvBm9PqA8I4vfscukhCJq0qUjVyGVgfsqODzPdc2o5ILHA67hliSDoOsiLkBcjBCB6JlKciIaEDp42R353p8ugmO_SIGtKG0hqo1xdO8bZn7BNIe5273XjK_8OvhK_XCQ9jpur2f092z9-n9B3vAHybBWyB3zIdyeVIiPN3kc5IgGmwCrj-RRlt2ZLtejnBII5zFGLJD09ElrGMzi2d6ZPYMJLNDAxxP5GkazzKIwVI-QtGK1ytihPRdxgxRw2YW1g9OweYWufrv1GA_pzOoNmLgVdEoSkVonrE6CD4CWtCqZBSm13-ip_uGbMDRn8Vl_gtpFSpmpPykriS9b9xLxFSL6s7TlLSVkoH9RTPglvHxqgrxNPozYprg_YaSoiudpne-abl7a4BEB2RnEhHksme_q3UPExIKIaD3kDvrOBTQwElGrjqf5PqvkgQh8GC7Z3ylC-_Wztui7AxA6P2CtASjF7KMJ8Ryg\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"2c34d38fa2aa205547af5ee2a3bc88ac","sha1":"05584e46df6e0c51b3517afe07ddf781a0d9abd5","sha256":"a0a1938220153d3874c2eb4bf213227381239cef60e7840d03789b5e23e92d0c","sha512":"2a626216e7de056494d5b91455e1feb4ad08175cf5190cf482386bba810ac263f12a1583722a79ff570042d95b3f2def38fc0cd27214215da1c5217c8b566fe2","ssdeep":"","tlshash":"fab01230f8e2d4d59080800eff95e903a3309288dc0d574241672f2502ec81910d2338","first_seen":"2026-04-15T02:59:49.463054Z","last_seen":"2026-04-15T02:59:49.463054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:05.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1731\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1731,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$63Q5dBBRAAaFLtUppS7ePDCZ916fxj2nAEABEArZ1BaRLkXZwSAoQp1Gra3GOaWe5aVDY6WFsWUlX8rxTSfbQU4E5XLba059uPCasR75xWY6WgZMPDVTmefxngAAAzbOAAAAEvQBB-IAUqaRqIbWQcJqJcJ-miCxt-U9BIyIu1Z3gQqUdEmVkCQFRryLKd5jkXREq1kb2xQp9bnOf8zI05wM8xgAY4w5mikd8JvWG1FU_rtJD7cQdzjQ-hwFBD6W68bHW8bpDM2QvdI2AfwJqAg6UkBmx5CWNfPN4J_XhsZg0un_t5WtEnckwFPFPFtWT88Ly_reHTREWluG5NClw9wEUsntRn54qwT383QWL1sEIrGah8aZxeAJsYxUcDQkx_1OGdg9A6pA0BVG1jCeIuGHIRNxr3fe0tCtbNWD3xiWkDImVkDd1hbjmEJecsIDAiuH6tSNKM9xrp9cjCUrph_ZLY_BGdc5M27136e7SBvIUYHPY_ftIznV9nVip7nJlvhfvrPAAoyzYeoUrfm3WBq7sJlCrplOWJiAxvokMRYqXuWV-f9vO9WH1agvPfxEIYFD9QiSi8PmWOA4TQ-eq2A_nsPSr8IIvMnCY9XVHRkmoUTXqchYkyUBgv0KGTaSZC5j0KKjUYqj7FCw1AGt2n5CydPiGvasYQKwu4QNEf9lR1wUf4s9ylcvgx2_OVhnuTiGRGUI7a1KuXmVILfUhDY1fB9Mv6Ilr3L85_4qsmBeXlrvuMo3UHFok8GI-_5Wl2npWLt6RuUbdDVcCbGH6vugJf1e6c3g-W1grLaQX49aVfQstKz0zqjyeNvBBL21Am2iMNHgCqzowSQrq_xFLzNK3BPq4kL5zKOzeWdmyE5m5ax6H_az8mNEo7W7HaJJ2mNuAi2kO8nFRl3Ux7u_Vx-NArwZ4VkZFg-DOc0LoCtx_8G42XP5xv7MBbkNY2KjQdYJys1zI3qEOJOjo_ga4AkjbLz371Pt_FRExl0b-cKFRue2rPy5uZMX4culvZUL-ae5ud3zxu4e_4j144F-vfOpzzo_8AixbnW8ItaH5rI-eKr5dZ0Obd9XaE7apVvL_UhDDmPF7D2vgnptHGTGKNVrX4txtWhtV1ga6xZSWIyl0tR2ppm13I6slW2ADush-9QnnQ_3WNhpeFIIKYOzDDlPVGXKUDj3DtQSISManceOpLfGryUbmrXfXskFAO4aqnwdy9eXX1CvEi3VBGhFTFmaJr3KbTcLgpCSQ_3A9N5X06yXwMlNYdiu-no3nLZH3SK8sLv1GgUMaZSYRM6wuK7aHnV6vhWfgaknuXACxqykr8ONtmEOW3aj6cbBwWNzlqoLlYF3dB3EgUrmnF-_LkM5kRBXgtDJbB2S3J-av--TESR5ZksQcq9wgYhSwewrVcn7xJSosn2T4KC-Ror9UT4CGebrNj0Dj4Fw-BzKnljEGdrX1bV8PaG3prQhZ751bziaMv5w7U1Gidt7hrjmu-xut5643R3TaeHNH_pRHfj_9l1bk80mgpMgOOW_7QbARv2WYfNN6xny3aLt0__XlAGYgkCp9PpYvoj7O5KVLzIBGwbvuJS324DubM2sISuZe3MMnm0gkrPvTnSphyfL5gMJvqoJwFo8Td-oyx8iqtK-pQQSwaWfmTeTkJ7fVxDNWT-fNxT_0617iBmvAFF-g62kJ0KA0H3gotOCYMQ\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"486eb7b1c81653648acbc17b8e11ec83","sha1":"2ca93a2de72b7754c04f0796d4d497e3b827d447","sha256":"a17be3fa2b863b05ce96ba3a4e2a598700bc7e32673af84b0a5daa75a6e10eb2","sha512":"0eef607bcf61deef35d5731e7989320779d79a29d85e49148520efa8e28da8b12676aca7b78af1a24444f511e98692f1aa405c6c04fc45a3449b4a72e3a56b9e","ssdeep":"","tlshash":"0cb012b0738f151f10c11d35b7c13f15435040cc3d1d246800969a49172ed8b4ad0bd8","first_seen":"2026-04-15T02:59:49.464471Z","last_seen":"2026-04-15T02:59:49.464471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/owl.carousel.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/owl.carousel.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 3352\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3352,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3185)","md5":"d964cdd4d9e85b8c1185a92bae34b049","sha1":"a0e2d64bcbb108f0415f364df5b6fabb8a290365","sha256":"aa7e59e6ec8871088cfeb47bac59a6475c815357deef042c61a5c3c965390546","sha512":"acc8bae151fb7542dd53d2a3ecacc9cf09e18109958970dd56d8b1cd2643811f9d5dfdf8499b5cf74e8cfdc6ad85e6be6d9cddea68670a368280576e9c093a13","ssdeep":"","tlshash":"c061bbe5314a265f480f83221dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-06T17:45:15Z","last_seen":"2026-04-23T10:07:30.876515Z","times_seen":1736,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":181,"dns":1,"connect":104,"send":0,"wait":111,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/?size=96\u0026id=3EFzPFftonWA\u0026format=png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 10:28:54 GMT","end":"Mon, 15 Jun 2026 10:28:53 GMT"},"fingerprint":{"sha1":"FB:64:A2:47:3E:78:7C:2B:08:A4:67:CE:63:64:D8:05:DB:13:E1:97","sha256":"C1:67:9B:EC:6A:3F:76:AE:75:5D:0E:0F:46:34:13:71:3C:89:7C:17:5F:88:7D:0A:92:61:16:3F:C9:67:77:54"}}},"request":{"raw":"GET /?size=96\u0026id=3EFzPFftonWA\u0026format=png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 02:58:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 1777\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 3EFzPFftonWA\r\nicon-size: 96\r\nicon-format: png\r\nlast-modified: Mon, 13 Apr 2026 06:16:08\r\nversion: 0.0.29\r\nfrom-mongo-cache: true\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: k/nlsZRgPVz73zTPIe6GB8N9GVWF/N1ChPb8+4aLsKH2U+wzMsdwTYgJ7LKtAr2eYw\r\nx-77-nzt-ray: fdb541231a2c304ff3fede69f9728733\r\nx-77-cache: HIT\r\nx-77-age: 152454\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"f52b621545ab1b3440ed658076eebb53","sha1":"9822329dc610443ea8cf5f0e9601777d15760cfe","sha256":"536ab863fd6b26b66d51f98ad35a6f72e51ad9ce1065f77e1e9fba91b2413606","sha512":"6314f4fec9603cb8b09b522c8a24cfdde45a39be921e288d15aea3046c791a168bb7fe7fb1adc90a48e94f1d271fceb38cfb2994ae3e45eca773dcec59f8fd6c","ssdeep":"","tlshash":"ec31e7a58a46c89dae880604ed6fba5e6cc642892a38b014cff1d710d812dbe8093f80","first_seen":"2025-08-11T22:54:49.008043Z","last_seen":"2026-04-15T03:01:03.453627Z","times_seen":8,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":61,"dns":59,"connect":8,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/xrp-banner.jpg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/xrp-banner.jpg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 33464\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 679x452, components 3","md5":"0d673fd99a33de616295dc90a8adffaa","sha1":"7701fb6fd297e59f23bb1b9811f3e9d9560ae7ef","sha256":"1fc74aed1ff2080a87c9cedef897966974fbb3aff63b07d86b4888cf8dbe9ddb","sha512":"46a182cd66cfb20ccdee6cfc5896989166da46176d6541fe2fc3150215e87c171b95579f205a078beb00dc1a34e07b14cdae3cc43cab8ec066f276a4223e3c90","ssdeep":"768:CRXm3frkJSx8Y5fbrRwauPgOh1ld16US/jyUKNTWTYKxT5TgeYXkp:6A8YBblw71P16USL5tLse4kp","tlshash":"a3e2e0a30247d418823408e7dbdf5b68e1808a759bfe86b36ac53c712b967f1d5e3446","first_seen":"2025-07-12T07:10:36.142285Z","last_seen":"2026-04-15T03:01:03.416302Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":976,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:01.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:01 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-23T11:08:49.16704Z","times_seen":144537,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:01.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 196759\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:41 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51020\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":591066,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"fb598e722e3ca661b8d52298a2b80050","sha1":"63af5c9411b329a6ad1b874d7ccbec0cccb7d53d","sha256":"c86f07d1a6e35e37aed78daa25e6c0011cc94f45f68f2474d498602f9921d51a","sha512":"7916c6378acc030835e3e374ac5dc0ece8b5933743082aa5598c2f58153dc4ce516f6fe92acfd65a29bed63df6e908cb711bdbbb39a5e3808257a67f272e6aef","ssdeep":"12288:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGtpYdJpO8vVhmRvezgHzDzOt5iMaPShv9Sk:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGte","tlshash":"30c44ad873a2706792a2f5e4903f0102b17a6856f40c8cbcf29cddd26db594a51bbf78","first_seen":"2026-04-14T14:26:58.186965Z","last_seen":"2026-04-15T17:30:11.960589Z","times_seen":832,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":36,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/juUgJwBwgWk/sddefault.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"192.178.25.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:04.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:27 GMT","end":"Mon, 15 Jun 2026 08:36:26 GMT"},"fingerprint":{"sha1":"4C:30:16:24:AD:B7:06:03:50:15:3A:B5:DC:98:15:82:5A:91:22:16","sha256":"D2:FC:38:8B:E8:22:C5:9A:34:F2:7A:B8:D6:F5:52:45:A3:43:B1:AF:84:10:5F:60:F1:B6:6D:38:67:8D:26:4E"}}},"request":{"raw":"GET /vi/juUgJwBwgWk/sddefault.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40971\r\ndate: Wed, 15 Apr 2026 02:59:04 GMT\r\nexpires: Wed, 15 Apr 2026 04:59:04 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1596434630\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40971,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3","md5":"dd5c7552958b67d7262c85d78997cd5c","sha1":"f06e7ee5945d89c902918b4e3e4246bc33c49b31","sha256":"6f750648dc202bdfafb4d40280a9dbeb78feae8c333a2d7b973e7273e2a30118","sha512":"5001e1257a3e20182b867bc18ecc9c3738d7dec5ba84d6f6f0354dcbf7405a450a5cc9f85286ed8256135a1100deca9160856e3841ae5a8e25c504afaec0d2ab","ssdeep":"768:L1nmBVVVVVKI89heHwHMSQehfQxYmSP2c5gUElQvG5kyxVq0TzlUC3uML05TC:JhI89heQHMSQEMQHMQu5kuVjT+guML0Y","tlshash":"3903be572c48e573621e8132ce55b09cb4672524930b523b8c7e6dffe33d55e0cae889","first_seen":"2025-07-12T07:10:36.155815Z","last_seen":"2026-04-15T03:01:03.446618Z","times_seen":10,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?rYNMng","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:05.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /generate_204?rYNMng HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:05.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/odometer.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/odometer.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 3116\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3116,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3116), with no line terminators","md5":"c5c5fd142cb067412692ca3202cf8884","sha1":"839930805cd5086af7bc88b4248d50f533bab7c0","sha256":"c023b507dce43045404d4f737df6672956dc2cb3dfca9dc61b74480219315ef0","sha512":"71b1a3dea5ed53d1a5356cbf3d09181b20f68191ac7a2b9edc31a48543bb0b47be25fcf4ec515b0cbc060c74d3687b9af4490ea4b07c3b1a4b59ede74dff6a8b","ssdeep":"","tlshash":"8351e2154f91136863367506bac81b60befce9015123e98e735da54bcf43db9e398b0b","first_seen":"2023-04-08T14:13:01Z","last_seen":"2026-04-22T07:23:18.059643Z","times_seen":1520,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":286,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/contact-banner.jpg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/contact-banner.jpg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1744445\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1744445,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3808x2694, components 3","md5":"1ba5fab066711dcd389e7d7a7cf7aabf","sha1":"4a3de09a90cb762f77780f938d10c936824970da","sha256":"acaf8495c4f524f4372c3357e95529c306a699080e6628816d6751fa6c908dd2","sha512":"ff14bd17cff8fd33a06793c8891090323b12f29a4933066e3ebba2b0011ec14f9864ddac6815a7a5616ea9742a1b2cd97e705dc248624bfb7ca0af4e25f939ee","ssdeep":"24576:qqHU3j7uzs5eqvQHOiffrTgbNU00pV6pvdo/Gaj/Rle:K3jus5euQHlTTg5+7my/XbTe","tlshash":"c625231ddf2dafa6e4cc53724605f37f270287ca97ef382e44a24d342554e3aa276126","first_seen":"2025-08-11T22:54:48.940502Z","last_seen":"2026-04-15T03:01:03.455757Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1717,"timings":{"blocked":973,"dns":0,"connect":0,"send":0,"wait":104,"receive":640,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.ajaxchimp.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery.ajaxchimp.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2381\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2381,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2381), with no line terminators","md5":"36d1b0e5a3a7397b267e704beb2f7272","sha1":"86df23e41520d19dd0c6928e4a5de89c1ae172a2","sha256":"2dcc9f6916671ee0ee4c5f7c7b6f13c519189b65d371a39309c0d95b79050c28","sha512":"e728f97a563dbba72519ef7ff7b6e3de3265c3cf8ef574affed6e67bc9bf2d1f1c2a79d3e7ead1f2a1d6fd4610fcca332e0ddcbd31de608a4ce64464b404926e","ssdeep":"","tlshash":"4741444025101bc2418b21f2e4c7bbe370e7d5958824f558e668e0e30ee4dcdae27a9e","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-04-23T09:35:59.147395Z","times_seen":4343,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":635,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/custom.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/custom.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 7085\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7085,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"9c26a785c8d563dae861e970c6444189","sha1":"e65ba95e755885ef80d20a27055d24e882d2d777","sha256":"29ec1b8f57a1fe87ef14d3097960338658f8d62839f0b850c0a07288ff237fc3","sha512":"9e5df2561dc71589171275727cd9bb925a482d3d794597021b66079e423ec6a00ba887cabfad3e13d24cb1c8fe19cb2a4a6e25a4c988011533dda8739504d588","ssdeep":"192:GSVffzK6zBOIdsObuitTzB5PCP1YE0Y95M5U5cPP/l:GofzK6zBNdsObuitTzBZ+119auWfl","tlshash":"8ae14546f77c10a059bb71a98abe91c2573e2103f80765a7f0fd05285fc967e30b6947","first_seen":"2025-03-20T21:52:11.231494Z","last_seen":"2026-04-20T06:03:17.152231Z","times_seen":27,"resource_available":true,"data":null}},"time_used":955,"timings":{"blocked":848,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 01:40:44 GMT","end":"Thu, 28 May 2026 02:40:40 GMT"},"fingerprint":{"sha1":"F0:7F:B1:BC:BE:73:55:AD:38:9F:92:6F:D6:4E:DB:1C:05:30:A3:80","sha256":"32:CE:74:34:FD:C2:62:30:95:38:1B:13:E0:4F:A0:DC:0F:1D:D8:44:4D:60:AF:C5:1C:94:AD:15:57:F1:6F:2F"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 02:58:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2024 23:02:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 08 Apr 2027 02:09:51 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r8aKEo1CnZ0O6t5iBmqldaiUjOI0ixabUbnAcfB5J9ow0fUE6%2Bg9D3LQ2cl22CV0BLJautWjQgeyCypXXYmVd50YS3h9vUzetM4k%2BSHKN%2BVI9Rf%2BB4XEP5BC209FEBXTdfceig%3D%3D\"}]}\r\nage: 607748\r\ncf-cache-status: HIT\r\netag: W/\"6763547c-59f9\"\r\ncontent-encoding: br\r\ncf-ray: 9ec7b113eded56b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23033,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-04-23T10:31:09.789311Z","times_seen":2864,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":33,"connect":1,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:01.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290686\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-23T11:10:21.517787Z","times_seen":756306,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":274,"dns":10,"connect":21,"send":0,"wait":8,"receive":2,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DKnwhA04.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:04.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:33:12 GMT","end":"Wed, 24 Jun 2026 10:33:11 GMT"},"fingerprint":{"sha1":"D0:0A:A6:39:E7:85:DF:64:B0:13:66:E3:06:E8:BF:2D:3C:AE:EA:7A","sha256":"70:D5:91:24:1D:F0:F9:7F:57:55:99:71:1F:A5:15:C2:B9:C7:21:65:6B:42:A2:34:4A:6D:A7:53:70:BE:C0:7B"}}},"request":{"raw":"GET /assets/main-DKnwhA04.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://qfsglobalsecureledger.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 02:59:04 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69c4f8c4-453c8\"\r\nexpires: Fri, 26 Mar 2027 09:19:15 GMT\r\nlast-modified: Thu, 26 Mar 2026 09:13:40 GMT\r\nx-77-nzt: k0X8xK0bOwKFOEkxD9UvCUOiIjxMAjhw9v5WeYyo5mqoiMiaG7zf9rD8n8VFinRyFVqOFzs\r\nx-77-nzt-ray: fdb54123b4244485f8fede69d04ade17\r\nx-77-cache: HIT\r\nx-77-age: 1705175\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283592,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"04d0691ef560adb488e4b6f4644c5265","sha1":"703691dce49d4244b1c58dc10ab8a285e19b2942","sha256":"b1f432b4a9c8585760646aeb5a5e9686154ca139027818dd7ad9744e290ac647","sha512":"af80daf0b9be2e06be01828c6be6eda731cd8f1ab5f767eec9359f247367758117387dd844c0e725415cde1ef33f7e62cd579a1d9cb6d0fdd569bebf417073cc","ssdeep":"6144:QsJU8SN+jtxVR/ZgQu2W/rLEPhCWVcq9kNE:QwU8SNr2W/rLgjV3uE","tlshash":"b0544ad47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-03-26T09:27:08.846862Z","last_seen":"2026-04-23T05:43:00.852938Z","times_seen":1023,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/logo.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/logo.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 16708\r\nConnection: keep-alive\r\nLast-Modified: Sat, 14 Mar 2026 00:24:39 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1099 x 126, 8-bit/color RGBA, non-interlaced","md5":"6eab2b69bbb9e7b77f18141883abc23f","sha1":"5389b939cf9554751257df8751284541ab6e0cae","sha256":"609f3db5fc173fe270fab76a98e29f651d3eb79f515162aabccd5cc7efb06edd","sha512":"f1ff5d421e68f53bfe828139cc03287fa883d40a57af46c8deba6f2756ea4bb343a225e62066e61c42f7b709364998a453c7376fffdf8cfed0cff3ca3ac4f6c7","ssdeep":"384:F0wNeTm/RDh9SMwORs4ifPXwILaQ7/Dsz+Wr2imS3m:FOq9TK40fw0aQ/o3S3S3m","tlshash":"fd72ce847c87d8327e4f05da9e2d2da98a6380728379f83122bb8b8dd3d4705b582486","first_seen":"2026-04-15T02:59:49.47511Z","last_seen":"2026-04-15T03:01:03.444546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1197,"timings":{"blocked":1079,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.meanmenu.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery.meanmenu.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 5931\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5931,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (397)","md5":"8e766f83bd6115e8c5ef3d95c07a9126","sha1":"22ef6499abd142d66363299a0b138f0ba1582e76","sha256":"114817c3d63b010fca17c5d431c6e38ce4220ea9e316532bbddba933ffeba2a7","sha512":"d06659002ceb6a9f3bad307632270866bde2978f507e98b05d1028515951058d4e739722a9e03834d87e8dbd9639ccdbf1f38295e035ebb6ca354df80d07ca2f","ssdeep":"96:n771uMXsA2XNnaToz99t56txMsLcCMoGIh7b6eFSEvU:77QMXsTP6VQCMlIhKAvU","tlshash":"0dc1ee6bb5b044f8a0bb7855b93eb23030f3640bf949e90032ad65262f1997515b2ffd","first_seen":"2023-03-07T22:42:44Z","last_seen":"2026-04-20T06:03:17.165077Z","times_seen":146,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":635,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/static.cryptopanic.com/static/js/widgets.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /static.cryptopanic.com/static/js/widgets.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:01 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-23T11:08:49.16704Z","times_seen":144537,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:01.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/player/ee507a59/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 57938\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Apr 2026 07:39:13 GMT\r\nexpires: Tue, 13 Apr 2027 07:39:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Apr 2026 04:24:51 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 155988\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":526884,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"75bc21c4a4c6440debd73fe708492634","sha1":"6f56b35d6a8640cc6e6b20ef3f4ba3c2f675c29c","sha256":"aa68e0e1ccb88e0e7e5b0e712acaefd700bc1fddffe47833b9f357c139ef7839","sha512":"35493527cdfb09137e106572e216ce51a279ca2723c940bb1e85dee60d5b7c78988f36de98f1a040a3e5c865aeea0c415d3c795fa80a1ab77f388ca0cfc93277","ssdeep":"6144:q8d5Fe/qoMOg7U9Bfbo4M5Ulv5P+oYo97:pYxMOg7U9FoR5Ulv5P+oYo9","tlshash":"ecb4ea72f0d1233cf2178d9997d9964d7239d983e2e22aeff11166dacbc77811326206","first_seen":"2026-04-09T15:07:35.831353Z","last_seen":"2026-04-17T00:31:51.710171Z","times_seen":2255,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":61,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi_webp/yLeji6EidI8/sddefault.webp","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"192.178.25.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:04.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:27 GMT","end":"Mon, 15 Jun 2026 08:36:26 GMT"},"fingerprint":{"sha1":"4C:30:16:24:AD:B7:06:03:50:15:3A:B5:DC:98:15:82:5A:91:22:16","sha256":"D2:FC:38:8B:E8:22:C5:9A:34:F2:7A:B8:D6:F5:52:45:A3:43:B1:AF:84:10:5F:60:F1:B6:6D:38:67:8D:26:4E"}}},"request":{"raw":"GET /vi_webp/yLeji6EidI8/sddefault.webp HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\nvary: Origin\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 13678\r\ndate: Wed, 15 Apr 2026 02:59:04 GMT\r\nexpires: Wed, 15 Apr 2026 04:59:04 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1566590372\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13678,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d48c83174fbf1d6e9f0ceed3ec8b1310","sha1":"f423c7e63dfc0e2bea4774daeeb8b71873325cd2","sha256":"c797fdc2677611af0f00fe170d923dd231c9d7c690a22d078dc54833e1f73120","sha512":"0e34557079d8a460912e166bcc92519e78f990558bdea47671eb9048ffaf62328914ceab25db90ba391a82e4550f85abf1885d91097e9571631c67135a158da0","ssdeep":"192:pKHNdh/2F9Aay+J004vT+2hsh7r6jxvh4BSuMZ/zlzEuyBQ6BfF/mXh:pKHNdhuAayAkx6mBhZJ/zlwuGQ+fFex","tlshash":"de52c0434ef7074efcd24e777895a4c4c20de1d99f88230eecf8aabd85a92e0a964015","first_seen":"2025-03-16T21:26:57.694063Z","last_seen":"2026-04-15T03:01:03.423524Z","times_seen":11,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":127,"dns":1,"connect":21,"send":0,"wait":37,"receive":3,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:05.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1776221945289\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgthNkRyZEhqZm94RSj1_fvOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgLQ%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260414.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 899390650\r\nX-YouTube-Page-Label: youtube.embeds.web_20260414_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1776221942635\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C250%2C250\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 9973\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9973,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260414.01.00\",\"configInfo\":{\"appInstallData\":\"CPX9-84GEMPegBMQmY2xBRDa984cEJfVgBMQh6zOHBC8pNAcEMKJ0RwQprbQHBC-hNEcELjkzhwQrtbPHBDI988cEN68zhwQgc3OHBCUg9AcEMzfrgUQrPXQHBD8ss4cEMGP0BwQv5TRHBDGxs8cEJT-sAUQntCwBRC9tq4FEPG00BwQpojRHBD-jdEcEImwzhwQ1YW4IhC9irAFEPv20BwQ9quwBRCUttAcELW1gBMQ_v_QHBD724ATENOf0RwQvZmwBRCL988cEMz50BwQsP7QHBCfz4ATELTEgBMQ14W4IhDy3oATKkhDQU1TTWhVcC1acS1ETGlVRXBRQ25BNzVGYjBHV2VRRWg3WHdDektnckFRRHpmOEZ5N2NHLXlhMjVBYWZpUTNxLVFiMEhSMEgwAA%3D%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://qfsglobalsecureledger.com/\"}},\"events\":[{\"eventTimeMs\":1776221942352,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942355,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942371,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942371,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942372,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942372,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942687,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942690,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941124,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940864,\"latencyActionBaselined\":{\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941037,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941124,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941145,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940915,\"latencyActionTicked\":{\"tickName\":\"ndnss\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940916,\"latencyActionTicked\":{\"tickName\":\"ndnse\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940916,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941037,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940941,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941037,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941635,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941981,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941597,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942014,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941596,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941955,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942698,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942333,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942703,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942707,\"latencyActionInfo\":{\"serverTimeMs\":48,\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221943028,\"screenCreated\":{\"csn\":\"PqXUumhc9LDn1x6f\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"9f7eaYjyA52ejNgP-YOZUQ\"}}}},\"context\":{\"lastActivityMs\":\"32\"}},{\"eventTimeMs\":1776221943028,\"latencyActionInfo\":{\"clientScreenNonce\":\"PqXUumhc9LDn1x6f\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"33\"}},{\"eventTimeMs\":1776221943029,\"screenCreated\":{\"csn\":\"MOP5OWH-vZH6WtYC\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"PqXUumhc9LDn1x6f\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"33\"}},{\"eventTimeMs\":1776221943030,\"visualElementHidden\":{\"csn\":\"PqXUumhc9LDn1x6f\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"33\"}},{\"eventTimeMs\":1776221943030,\"latencyActionInfo\":{\"clientScreenNonce\":\"MOP5OWH-vZH6WtYC\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"34\"}},{\"eventTimeMs\":1776221943031,\"visualElementAttached\":{\"csn\":\"MOP5OWH-vZH6WtYC\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMIrcXcru7ukwMV4qP0Bx3rWSO_ygEEbXUKBw==\"}]},\"context\":{\"lastActivityMs\":\"34\"}},{\"eventTimeMs\":1776221943033,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"38\"}},{\"eventTimeMs\":1776221943035,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"39\"}},{\"eventTimeMs\":1776221943088,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"JHPfpEh180D_upUD\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"92\"}},{\"eventTimeMs\":1776221943092,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"96\"}},{\"eventTimeMs\":1776221943235,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"qS1Z1SWH0mPvKaJN\",\"clientScreenNonce\":\"PqXUumhc9LDn1x6f\"},\"context\":{\"lastActivityMs\":\"239\"}},{\"eventTimeMs\":1776221943235,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"qS1Z1SWH0mPvKaJN\",\"clientScreenNonce\":\"MOP5OWH-vZH6WtYC\"},\"context\":{\"lastActivityMs\":\"239\"}},{\"eventTimeMs\":1776221943236,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"240\"}},{\"eventTimeMs\":1776221944332,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"1336\"}},{\"eventTimeMs\":1776221944333,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"1338\"}},{\"eventTimeMs\":1776221944335,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"1339\"}},{\"eventTimeMs\":1776221944339,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"1342\"}},{\"eventTimeMs\":1776221944580,\"visualElementAttached\":{\"csn\":\"MOP5OWH-vZH6WtYC\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1583\"}},{\"eventTimeMs\":1776221944580,\"visualElementShown\":{\"csn\":\"MOP5OWH-vZH6WtYC\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1584\"}},{\"eventTimeMs\":1776221944618,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"1622\"}},{\"eventTimeMs\":1776221944883,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"1886\"}},{\"eventTimeMs\":1776221944883,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"1887\"}},{\"eventTimeMs\":1776221944883,\"visualElementAttached\":{\"csn\":\"MOP5OWH-vZH6WtYC\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1887\"}},{\"eventTimeMs\":1776221944883,\"visualElementShown\":{\"csn\":\"MOP5OWH-vZH6WtYC\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1887\"}},{\"eventTimeMs\":1776221944884,\"visualElementAttached\":{\"csn\":\"MOP5OWH-vZH6WtYC\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1888\"}},{\"eventTimeMs\":1776221944884,\"visualElementShown\":{\"csn\":\"MOP5OWH-vZH6WtYC\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1888\"}},{\"eventTimeMs\":1776221944943,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"vATx7KEyIQDKbfzi\"},\"context\":{\"lastActivityMs\":\"1947\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"9f7eaYjyA52ejNgP-YOZUQ\",\"clientCounter\":\"11225\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-04-23T11:12:34.310496Z","times_seen":236480,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T02:58:58.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:58:59 GMT\r\nContent-Type: text/html\r\nContent-Length: 42224\r\nConnection: keep-alive\r\nLast-Modified: Sun, 15 Mar 2026 10:10:10 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":42224,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2221)","md5":"f5849d1b503fa6e2af87f621542c4f7b","sha1":"1ac305fdd76faaff1ba97e12f67326935ea92820","sha256":"f4a0cc2731316635fb03bce25615547a83f5a87606da7a7d9b9852c153cc64e3","sha512":"8158682bb2cd74f7ef7e8c6bf3de2970eb2ae9fa917d76a8d5d5f857267c0109b807c714ddf9673365755a51664aa5c4a518534e87680843a002afd7eb1142ac","ssdeep":"768:T4WXXJMYj4w2z4DCbnpUx78VUdsG5a1WJ+FPW:T4ILj4w2z4DCzpUxAm6G5a1WJ+Fe","tlshash":"8e1380255ef220370182a1d279715b1fbfa5e607d61a8a1172fc0bdcafdad86dc13688","first_seen":"2026-04-15T02:59:49.47797Z","last_seen":"2026-04-15T03:01:03.422401Z","times_seen":2,"resource_available":true,"data":null}},"time_used":964,"timings":{"blocked":338,"dns":146,"connect":94,"send":0,"wait":188,"receive":96,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:01.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290686\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-23T11:10:21.517787Z","times_seen":756306,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":177,"dns":10,"connect":10,"send":0,"wait":10,"receive":6,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?Z-NAxg","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:05.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /generate_204?Z-NAxg HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:05.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1776221945469\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgsyUXhTUmZrcXNpNCj1_fvOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgEA%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260414.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 899390650\r\nX-YouTube-Page-Label: youtube.embeds.web_20260414_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1776221942827\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C250%2C250\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 10583\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":10583,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260414.01.00\",\"configInfo\":{\"appInstallData\":\"CPX9-84GENzPgBMQwY_QHBC9tq4FEMbGzxwQvZmwBRCZjbEFENWFuCIQ9quwBRCfz4ATEJSZgBMQrPXQHBC_lNEcEJSD0BwQ05_RHBDI988cELyk0BwQ_v_QHBCU_rAFEPG00BwQi_fPHBCmttAcEP2S0RwQuOTOHBD724ATEIHNzhwQzPnQHBDD3oATEMzfrgUQh6zOHBCHkNEcEPv20BwQibDOHBDevM4cEJS20BwQrtbPHBD8ss4cEJjVgBMQvYqwBRDCidEcEP6N0RwQndCwBRDa984cEKaI0RwQs5HRHBCMtYATEJ3dgBMQ6dOoFxD4n9EcKkxDQU1TTlJVMi1acS1ETGlVRXBRQ25BNzVGYjBHV09VRWg3WHdDektnckFRRHpmOEZ5N2NHLXlhMjVBYklsUVRQX0FIcS1RYjBIUjBIMAA%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://qfsglobalsecureledger.com/\"}},\"events\":[{\"eventTimeMs\":1776221942136,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942140,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942156,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942156,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942157,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942157,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942872,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942901,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941092,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940861,\"latencyActionBaselined\":{\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941009,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941092,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941124,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940888,\"latencyActionTicked\":{\"tickName\":\"ndnss\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940889,\"latencyActionTicked\":{\"tickName\":\"ndnse\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940890,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941009,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221940914,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941009,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941548,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941868,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941521,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942006,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941520,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941852,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941520,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941909,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941520,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221941826,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942912,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942119,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942916,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221942921,\"latencyActionInfo\":{\"serverTimeMs\":47,\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776221943206,\"screenCreated\":{\"csn\":\"NevU1MmX8wOAXRY4\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"9f7eacOLAoCTv_IPgqTeiQM\"}}}},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1776221943207,\"latencyActionInfo\":{\"clientScreenNonce\":\"NevU1MmX8wOAXRY4\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1776221943207,\"screenCreated\":{\"csn\":\"kRVML4mfPxVkAmAr\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"NevU1MmX8wOAXRY4\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1776221943207,\"visualElementHidden\":{\"csn\":\"NevU1MmX8wOAXRY4\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1776221943208,\"latencyActionInfo\":{\"clientScreenNonce\":\"kRVML4mfPxVkAmAr\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1776221943208,\"visualElementAttached\":{\"csn\":\"kRVML4mfPxVkAmAr\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMIr9naru7ukwMVtZb0Bx1TtBVfygEEZAG06w==\"}]},\"context\":{\"lastActivityMs\":\"20\"}},{\"eventTimeMs\":1776221943211,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"24\"}},{\"eventTimeMs\":1776221943212,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"25\"}},{\"eventTimeMs\":1776221943226,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"RYx9UAb9eemX3TGN\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"39\"}},{\"eventTimeMs\":1776221943229,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"41\"}},{\"eventTimeMs\":1776221943242,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"yE1NpUUFprj5rjoK\",\"clientScreenNonce\":\"NevU1MmX8wOAXRY4\"},\"context\":{\"lastActivityMs\":\"54\"}},{\"eventTimeMs\":1776221943242,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"yE1NpUUFprj5rjoK\",\"clientScreenNonce\":\"kRVML4mfPxVkAmAr\"},\"context\":{\"lastActivityMs\":\"55\"}},{\"eventTimeMs\":1776221943422,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"234\"}},{\"eventTimeMs\":1776221944262,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"1074\"}},{\"eventTimeMs\":1776221944264,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"1075\"}},{\"eventTimeMs\":1776221944266,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"1077\"}},{\"eventTimeMs\":1776221944271,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"1083\"}},{\"eventTimeMs\":1776221944653,\"visualElementAttached\":{\"csn\":\"kRVML4mfPxVkAmAr\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1465\"}},{\"eventTimeMs\":1776221944653,\"visualElementShown\":{\"csn\":\"kRVML4mfPxVkAmAr\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1465\"}},{\"eventTimeMs\":1776221944689,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"1501\"}},{\"eventTimeMs\":1776221944902,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"1714\"}},{\"eventTimeMs\":1776221944902,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"1714\"}},{\"eventTimeMs\":1776221944903,\"visualElementAttached\":{\"csn\":\"kRVML4mfPxVkAmAr\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1715\"}},{\"eventTimeMs\":1776221944903,\"visualElementShown\":{\"csn\":\"kRVML4mfPxVkAmAr\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1715\"}},{\"eventTimeMs\":1776221944903,\"visualElementAttached\":{\"csn\":\"kRVML4mfPxVkAmAr\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1715\"}},{\"eventTimeMs\":1776221944903,\"visualElementShown\":{\"csn\":\"kRVML4mfPxVkAmAr\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1715\"}},{\"eventTimeMs\":1776221944994,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"gJoUzkL72R6mWQh9\"},\"context\":{\"lastActivityMs\":\"1806\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"9f7eacOLAoCTv_IPgqTeiQM\",\"clientCounter\":\"254\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-04-23T11:12:34.310496Z","times_seen":236480,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/kit.fontawesome.com/d1472f1751.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /kit.fontawesome.com/d1472f1751.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:58:59 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-23T11:08:49.16704Z","times_seen":144537,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/owl.theme.default.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/owl.theme.default.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 1013\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-04-23T10:08:52.034821Z","times_seen":19619,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":183,"dns":1,"connect":108,"send":0,"wait":115,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:01.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/player/ee507a59/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 444430\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Apr 2026 07:51:21 GMT\r\nexpires: Tue, 13 Apr 2027 07:51:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Apr 2026 04:24:51 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 155260\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1486235,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (848)","md5":"a3f45afee6e0dc137cbfe33a74403f17","sha1":"06e9a62a5ca6154d4bf626f69580681b8f219d59","sha256":"cfa795e622f49f92d0a65a88d1851ee5db708b70f2a757154cc4c852e999d295","sha512":"337f572ff593bf42ef43e2a20ec657cdd82b57cf0273a92ca0574e24d54c70850d9f4bcce84ddd38cb6089f71b7e840ab94c60439635a78b2cbdfa9d69aae66c","ssdeep":"12288:NWJ+YoIPR+umUIWbouNnsuydXdJAXFMhxfBbqdH+PcFK59iMm:No+pIPUKIWbouNnyWMhxfJqdePN5m","tlshash":"14254cd932d2b8a243a3f0a7043f0105f17e89197548c99cfae9dae92c7194751bbf78","first_seen":"2026-04-13T11:27:09.96925Z","last_seen":"2026-04-16T01:05:21.413432Z","times_seen":1082,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":34,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/responsive.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/responsive.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 34093\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34093,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ced1aa5733fbeceb3922c7bb9981ca79","sha1":"53c993131ab3513678e867c902743ba44383561c","sha256":"2046db4fa2ddee577b06198c074e325de2f3829caa0c3ecbd4ee8f064583c8a6","sha512":"7df4eb6c8023e3a6283836b9643b623eb147f77436ba7cba1e358be85bf76ed4d13d4a398df09b40c69f09d366d5d2e03c4b36ab655aac71cc063a5f76c5308b","ssdeep":"768:RF6qCKYFe8FEXFobMFG6hFQqFyFTFM/37Y:RQqCKY5CX6bMc6hyq4VOM","tlshash":"26e29c4e3ee3018d7c51b6746eec6a126284e507d6cfdce37dc09178cf896a845aa688","first_seen":"2025-07-12T07:10:36.160026Z","last_seen":"2026-04-15T03:01:03.433948Z","times_seen":12,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":396,"dns":0,"connect":0,"send":0,"wait":137,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/unpkg.com/aos%402.3.1/dist/aos-2.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /unpkg.com/aos%402.3.1/dist/aos-2.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-23T11:08:49.16704Z","times_seen":144537,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":434,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/8c51f0e50111a2bce371b7f99aa52910fc80a381.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.183.175.15","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:02.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/8c51f0e50111a2bce371b7f99aa52910fc80a381.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://qfsglobalsecureledger.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 02:59:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-nmzJSErW89I05K67ZB0lFdSz13g\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2164f12eab1c91eda8dd630ee3bfffcb","sha1":"9e6cc9484ad6f3d234e4aebb641d2515d4b3d778","sha256":"138ce9db988a439b9c2ba8fa5a4d69577789e98275c033a418e6c4fe9b67f46f","sha512":"0741bf673c2050e6da96f086ad3a3bb45c6d035a346f0f812e853e36e0e206b0d99d890b562fff47dc3b6fa7f17c73988b48dcf70ac8aa5885d5c188a26b220f","ssdeep":"","tlshash":"b921686d4a6822ed5245c7d6c5047e076bbcdcb371043e7eea1d0a4e70db2e5113646b","first_seen":"2025-07-24T15:21:00.111183Z","last_seen":"2026-04-23T05:42:47.917065Z","times_seen":99,"resource_available":false,"data":null}},"time_used":3155,"timings":{"blocked":1550,"dns":1,"connect":28,"send":0,"wait":35,"receive":0,"ssl":1537},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:04.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:33:12 GMT","end":"Wed, 24 Jun 2026 10:33:11 GMT"},"fingerprint":{"sha1":"D0:0A:A6:39:E7:85:DF:64:B0:13:66:E3:06:E8:BF:2D:3C:AE:EA:7A","sha256":"70:D5:91:24:1D:F0:F9:7F:57:55:99:71:1F:A5:15:C2:B9:C7:21:65:6B:42:A2:34:4A:6D:A7:53:70:BE:C0:7B"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://qfsglobalsecureledger.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 02:59:04 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69c4f8c4-7b0\"\r\nexpires: Thu, 26 Mar 2026 09:24:15 GMT\r\nlast-modified: Thu, 26 Mar 2026 09:13:40 GMT\r\nx-77-nzt: kzfarD0GJGinILAqnvLAVvG6UMw8roC2K5Nz14X3bVQfDDxAHgrbTZ/06Urxao4yHh2usJk\r\nx-77-nzt-ray: fdb54123b4244485f8fede6982567b15\r\nx-77-cache: HIT\r\nx-77-age: 31\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c90dc4144123441dfd1880b64a38850","sha1":"3542d9742c4d15ebd275a7f4d00fdeaab0bf2811","sha256":"3f96750d0608315f91b97aa38ed18ba3172c6205e3bae64070fdd3b1ecd96055","sha512":"85219432d56f6d5daff42ab232594e813a0a26d63b22bd8b2de79a3f6cc650f5b4d00035a356cee95137c30b588d3882f294d3e42a7cd1dc90c2ac3ed5a1a010","ssdeep":"","tlshash":"b9411593c4f80d531b9c522bb8944a015d50c3c7e8893d0d36ad8a6f2f0ceba15e67ad","first_seen":"2026-03-26T09:27:08.856479Z","last_seen":"2026-04-23T05:43:00.886942Z","times_seen":1025,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":8,"dns":21,"connect":8,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/unpkg.com/aos%402.3.1/dist/aos.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /unpkg.com/aos%402.3.1/dist/aos.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-23T11:08:49.16704Z","times_seen":144537,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":422,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/counter-shape3.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/counter-shape3.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 5768\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5768,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 389 x 267, 8-bit colormap, non-interlaced","md5":"bcc7feae92b7e330893dbb6496120a24","sha1":"516b967b4cddbddd39031ce7db1ba1fbc3cc560a","sha256":"63694c7af6f73708c874b412a81882ada0db4c9282c4c208ba1c1d3cd6892472","sha512":"e1a6cbbd9daa1ca129d4f441b460dc640c103a010a1d2d293cb2f98e0d95b9b3cdbfcee754fc623c750af548bdffcb4a959faf35e659f877cce5345665e4321c","ssdeep":"96:niYlQeEMpcHe4gW1rTuwh9kMclZuR1ynRR+DlKCbIIqdBe:iYyen4X1WMgZnnXyJbIIZ","tlshash":"13c17ddacfee20251a4b5d48da591252dc90a296aa1b787013ec067b2105649fb9f38b","first_seen":"2025-05-02T13:08:05.724945Z","last_seen":"2026-04-15T03:01:03.450863Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1080,"timings":{"blocked":975,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/static.cryptopanic.com/static/js/widgets.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /static.cryptopanic.com/static/js/widgets.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-23T11:08:49.16704Z","times_seen":144537,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":524,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/testimonials-bg.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/testimonials-bg.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 83734\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2100 x 875, 8-bit colormap, non-interlaced","md5":"c1703d75a74a414a7247b8c9d483ce98","sha1":"e21d79556237d9d44cf5210495035b22bbc7cb45","sha256":"582d042dcf10a966b781170e45fc6a04a98e507afc21b96cd693a5c471b4a2d1","sha512":"6b1afe41156d41e357f905f22b97b2d2c055d0de615ba1d566a60c8a76d60d44230b9405b76822f8b8368b60166a5088e0b0ace0f50d1317869714da1781aa2f","ssdeep":"1536:agBso+Npg2wTMkoAHpgNpQ9YiiFV56CRjmcx+MCpWRD1vnA9MPjHyI/:a9hbzwTIZGSj0IaMCW7jH/","tlshash":"e38302c623250eb1bcf0c29d73c34ca689bf171de644a06d67f9a021c9c55792a27eed","first_seen":"2025-03-19T10:36:51.052112Z","last_seen":"2026-04-15T03:01:03.428024Z","times_seen":22,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":119,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?y4w4-w","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T02:59:05.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /generate_204?y4w4-w HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/Credit-Card-Mockup.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/Credit-Card-Mockup.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:01 GMT\r\nContent-Type: image/png\r\nContent-Length: 1771506\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1771506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1362 x 1458, 8-bit/color RGB, non-interlaced","md5":"b214002ded3b0acda1be65f2641f0b92","sha1":"744bda884204b85ce922c30b9f4a710e74ea4549","sha256":"2bdf909c645dac46c63c8c6cfcef17dc2e36d7b7b09cc9b7d6ec3cb9a75a7702","sha512":"32b79552efd81f9bd72e829a2b072057a9d552a59dede3ecb9af3ad25e0806ca500d2eae39adcc0a21f89d361ade470a4647d98a4dc2cc36ad877753d065a55a","ssdeep":"24576:VywwP44cxbCbsp6exjIoaOygR1qli7bpRJd6+K+mInZFck+:1vCbgutOZDbpRJW+meA","tlshash":"1c2533b033a015e563bc27f97b353e84b2b1da14d8ad58267e06424af1f2c78d4a3dd9","first_seen":"2025-08-11T22:54:48.993524Z","last_seen":"2026-04-15T03:01:03.449694Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1897,"timings":{"blocked":1309,"dns":0,"connect":0,"send":0,"wait":118,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:01.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 196759\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:41 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51020\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":591066,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"fb598e722e3ca661b8d52298a2b80050","sha1":"63af5c9411b329a6ad1b874d7ccbec0cccb7d53d","sha256":"c86f07d1a6e35e37aed78daa25e6c0011cc94f45f68f2474d498602f9921d51a","sha512":"7916c6378acc030835e3e374ac5dc0ece8b5933743082aa5598c2f58153dc4ce516f6fe92acfd65a29bed63df6e908cb711bdbbb39a5e3808257a67f272e6aef","ssdeep":"12288:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGtpYdJpO8vVhmRvezgHzDzOt5iMaPShv9Sk:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGte","tlshash":"30c44ad873a2706792a2f5e4903f0102b17a6856f40c8cbcf29cddd26db594a51bbf78","first_seen":"2026-04-14T14:26:58.186965Z","last_seen":"2026-04-15T17:30:11.960589Z","times_seen":832,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":84,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:02.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 146487\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:42 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51021\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":510435,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2293)","md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"resource_available":true,"data":null}},"time_used":1324,"timings":{"blocked":1202,"dns":0,"connect":0,"send":0,"wait":34,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T02:59:05.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Wed, 15 Apr 2026 02:59:05 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T11:09:30.515594Z","times_seen":14100050,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":36,"dns":1,"connect":8,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/style.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/style.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 108569\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108569,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"a4f2255e240e8e265a759558d746ae0d","sha1":"9dcee8d2cec60de69819ac3bcecebb71bd39b9c6","sha256":"81267ccdb80c05f5dfe103987a806937c513614f378e42eea364df9e5624bef9","sha512":"aeb716e4fc11d0255b0e5c950cf2df557d76b4b8e7764f375576d0614f927da4d22810725d6d9ec6b22363a6cc7416b5d033002e3028cf3a819bafdd9b0b8c5c","ssdeep":"3072:po2SS3nNMk/wJSCiGwDvDwkGqH1aiVGW6ekCxEECotQ7JT4:poo3nNMk/wtiGwrDwRqH1aiVt6ekCxEy","tlshash":"12b37496abb7064c380fa5683d89db6133bc5082d54eceb87be96458df89b9c1033f45","first_seen":"2025-07-12T07:10:36.128584Z","last_seen":"2026-04-15T03:01:03.433426Z","times_seen":9,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":376,"dns":0,"connect":0,"send":0,"wait":141,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald:200,300,400,500,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css?family=Oswald:200,300,400,500,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Apr 2026 02:59:00 GMT\r\ndate: Wed, 15 Apr 2026 02:59:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10266,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a1cc133a90e2f42bb150b6ea0c9f97df","sha1":"912fafb9971d50766d230f50b12bfc0cbdced24b","sha256":"fafd26cfa100cec90090a795113bad5efa34c33aa87360e129683e9c307cf395","sha512":"dfa1107b195ec23d0f48a041f4df71263a5146946b7add9368fc9158b3e4ed3a4e9ea9599ab44c82c49f7c4da65f98227598558bd2e1be11cfc971498672648e","ssdeep":"192:3KHLcfh9mKcLH0habK9La1hHwKaL9yhcVKDL47hBSK4LDQhOt:6rWuc1So0HG6X","tlshash":"4322aea2042fa4806f471cc533cf3d329e8ea24574518975affd1ca8dca6e216369b4d","first_seen":"2025-09-14T23:19:29.11902Z","last_seen":"2026-04-23T08:51:49.215707Z","times_seen":1108,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":112,"dns":0,"connect":21,"send":0,"wait":33,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:59:00.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:34:08 GMT","end":"Wed, 24 Jun 2026 10:34:07 GMT"},"fingerprint":{"sha1":"C2:80:24:A2:B9:B5:FE:08:D5:9C:54:4B:3A:9A:8B:58:11:03:59:30","sha256":"4F:89:7D:DE:1D:14:7D:79:28:01:77:E4:A2:61:C6:AD:B2:D5:1B:97:99:F3:76:01:2B:E0:9D:C7:39:4A:42:7C"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 02:59:00 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69cac7a9-4668\"\r\nexpires: Mon, 30 Mar 2026 19:03:15 GMT\r\nlast-modified: Mon, 30 Mar 2026 18:57:45 GMT\r\nx-77-nzt: k+4lEg16LMUIZce+UHslgwunKN+vkiRo2SyBniabfshzlGegfBZ6oDDCIvRH94N1W3izqgE\r\nx-77-nzt-ray: e2f7542029f1e6e1f4fede69102cc620\r\nx-77-cache: HIT\r\nx-77-age: 38\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-04-23T05:43:00.851544Z","times_seen":1025,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":65,"dns":21,"connect":7,"send":0,"wait":7,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/b174a5bb/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.201.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:01.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/player/b174a5bb/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 444404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 07:48:37 GMT\r\nexpires: Wed, 14 Apr 2027 07:48:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 04:29:08 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 69024\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1486862,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (767)","md5":"7693d90edd4cd8277133128dfd6da6b5","sha1":"7dfa8bd2bf260691b8566d45ab9d0ea3e4af59b2","sha256":"bb8ce387db11c5a7c690127cf65de0dd989c35f532884f8f243821e63aed0cea","sha512":"b7da14e544012750c0ef7bcc0c8d0a3a8dd3cbac4ba958064eff0f680bccf3f9817608e2efa8c65493de980b6beb8ae2c87da90a45a89991f126636672b2a188","ssdeep":"12288:k97FgXhO7UIDRYGvPhBCV5nGxe4y3DX0jESOFNylZ+BgvjTI:kJyXLT0hs5nGxdgDX0jESOFNI3rM","tlshash":"77254bd93692b42643e3f0e8552f0006f67a5d04f44cc99dff2ad9ea2c65906913bfb8","first_seen":"2026-04-14T10:33:27.947452Z","last_seen":"2026-04-17T00:31:51.622491Z","times_seen":874,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":47,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/b174a5bb/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi_webp/sFX1d7Si3mA/sddefault.webp","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"192.178.25.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T02:59:04.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:27 GMT","end":"Mon, 15 Jun 2026 08:36:26 GMT"},"fingerprint":{"sha1":"4C:30:16:24:AD:B7:06:03:50:15:3A:B5:DC:98:15:82:5A:91:22:16","sha256":"D2:FC:38:8B:E8:22:C5:9A:34:F2:7A:B8:D6:F5:52:45:A3:43:B1:AF:84:10:5F:60:F1:B6:6D:38:67:8D:26:4E"}}},"request":{"raw":"GET /vi_webp/sFX1d7Si3mA/sddefault.webp HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\nvary: Origin\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 28052\r\ndate: Wed, 15 Apr 2026 02:59:04 GMT\r\nexpires: Wed, 15 Apr 2026 04:59:04 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1560783250\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e07de6b2da9f80bc120b7858dc48e48d","sha1":"52c44d18ec4e5ed4e870d86ac49d89bdeea2262d","sha256":"b94f8b2d50880658891060356e0f61772d7db937103ece2c2992c8de5e1711f4","sha512":"f54e0a6696dfde1245cfc87b5e0036f726e0f38b9c1128585d7f1e6d0d449c744ed7a86ca8d8748e6a29a5e7443cec023c0d3238953fdfb1256d7cc51b3a9850","ssdeep":"768:Irrrrr/e20Jl/fB1V7fXaWLRsbWprMdVrtD148y3l:6UJfvpebBVZZ48Ql","tlshash":"15c2f14b9b75348dd7c3303433039262e5da9906d3f99c19951d0fcf32b64926b5aa9c","first_seen":"2025-07-12T07:10:36.152136Z","last_seen":"2026-04-15T03:01:03.446093Z","times_seen":10,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":59,"dns":1,"connect":22,"send":0,"wait":83,"receive":12,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/boxicons.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/boxicons.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 61797\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61797,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (61797), with no line terminators","md5":"3e7e5382c0fdf79fdd867a3c46863167","sha1":"8fbff3e3c8b32927a06f3f00d21893ec8b4bb036","sha256":"71ae2eced71ae5cd03dee6b5613f8402299a559780cf864cdf9ff08f6c05a7ba","sha512":"fcb1fdeb622cd7f37a71e63a9b6935341d3c2b9ffeec83adaa639117d4f7b1b9201314d2491524119d0cbea614534911c132b8b324f455477e461e16c6c5955e","ssdeep":"1536:OL9ULu1kcVaxgG8wP4NM9oUbIpBuK+gZo/Y+H4oyIKadSB/8XwL8:u58W8","tlshash":"12533ef5e59944c83732e447c784f74c20aaf931ca461d52f26f941e6ec1a690bc6fb8","first_seen":"2025-08-11T22:38:38.384952Z","last_seen":"2026-04-15T03:01:03.454194Z","times_seen":7,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":179,"dns":1,"connect":100,"send":0,"wait":266,"receive":101,"ssl":107},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.nice-select.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery.nice-select.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2942\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-04-23T05:44:09.540989Z","times_seen":7752,"resource_available":true,"data":null}},"time_used":901,"timings":{"blocked":804,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/bootstrap.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/bootstrap.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/css\r\nContent-Length: 153433\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153433,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"2c8b1bbe4038a925eb7178de2d8d1c3d","sha1":"04c099de11391573409547365e258455fb3ed77c","sha256":"cc7cec5ea029d7698b78a64328030938e52ab4acee58a8e1a4452ff706732550","sha512":"6cc6defa50b8ed7a90ea35cdfe833d49903a9867107bfac5c5b5eedff726d7ddfe35a40ef3be835163f42126bbb3065d52db244af2a120c846fa9b64434bcfe3","ssdeep":"1536:4t6QF83RipVVsEBpy0cuJcL22TWr5SNVUpz600I4fM:4t6QYNVUpz600I4fM","tlshash":"0ee393d7f581241dd4a7c219a4d1bffd052f5686e3025eabb0277bb88b4a2c70963e4c","first_seen":"2025-05-02T05:42:41.618882Z","last_seen":"2026-04-15T03:01:03.457673Z","times_seen":28,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":173,"dns":1,"connect":99,"send":0,"wait":277,"receive":212,"ssl":104},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/spop.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /spop.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 1251\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:04:13 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-23T11:09:30.510592Z","times_seen":120561,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":532,"dns":0,"connect":0,"send":0,"wait":114,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/bootstrap.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T02:58:59.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/bootstrap.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 02:59:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 61768\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61768,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61483)","md5":"86c66103329d2d376c5ec84117058497","sha1":"d65c1eda71a436de34a324b73708421225785f59","sha256":"83ce8dec787fb3ceacaf7a5b61f36475a8a8ec525717aabd73dd6e25522d28b8","sha512":"ecf10c6a81c9350a04aa9c6090ab24a17a448258a81272a57c231c6159a697cc898e6046eedc1a0669c8f8f2d4d1c353c36556862cc96141b59264b3443a35b7","ssdeep":"768:w/gB79Mr3uDTVayu8Of8rm7MT5ZFcHUbw8gpQCYewiTlAx17j0FhlG8KktWyh6c:wWYY28meG+zgA8Oc","tlshash":"2953924ab254787206cf7475817f060fb33a6899a446813cb96ad8de1b7cc897173fb8","first_seen":"2023-03-07T12:05:17Z","last_seen":"2026-04-23T09:10:12.440476Z","times_seen":920,"resource_available":true,"data":null}},"time_used":956,"timings":{"blocked":636,"dns":0,"connect":0,"send":0,"wait":216,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}