{"report_id":"40542ad4-e84c-454c-82c2-b3da0c548cd6","version":6,"status":"done","tags":[],"date":"2026-02-26T14:49:31Z","url":{"schema":"http","addr":"youpay.to","fqdn":"youpay.to","domain":"youpay.to","tld":"to"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"youpay.to/","fqdn":"youpay.to","domain":"youpay.to","tld":"to"},"title":"YouPay.to – Network Settlement Protocol","dom":{"size":4674,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c954fc5400bc201995a7dfb1da61c96b","sha1":"1d5eb985dc00cd1fc1940de518b5eff068297eef","sha256":"2d392c7a3d3f705d05306b3d30682a9c4fd719484647bf9792dc2efef7c6f490","sha512":"bf202d35e6078fa33ba31853154d59575504b1717cc090740a92e8b8c22194cbb1b7d8a708b90b05e144a956abda4ab1fd8fefe9e4fabe8a32a923a380c4f21c","ssdeep":"96:nBr0IGbS1jhM5U92CV76FjTtSuXvzTAP69br85NZDw57+n8zOJiQfLGb+KelOj:Br0IGG1K5UgCV7EjpSuXvoP6JMnDw56+","tlshash":"4aa1712aa2f360459887d5b53366d3182718d107cd0bc9ac3fdea3a0df8c165e9e3a4c","dom_hash":"domhash83ffa46d8ac5c09c2dea263fe8d1e251","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"youpay.to","fqdn":"youpay.to","domain":"youpay.to","tld":"to"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-02T14:49:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"youpay.to","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-26T14:49:31.814014Z","last_seen":"2026-02-26T14:49:31.814014Z","alert_count":0,"request_count":2,"received_data":10371,"sent_data":903,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-22T22:30:31.423356Z","alert_count":0,"request_count":2,"received_data":134213,"sent_data":916,"comment":"","tags":null,"fingerprints":null},{"fqdn":"firebase.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":21765,"first_seen":"2018-10-19T09:09:59Z","last_seen":"2026-02-25T22:48:31.923718Z","alert_count":0,"request_count":2,"received_data":1253,"sent_data":1166,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-22T22:20:46.526035Z","alert_count":0,"request_count":1,"received_data":400116,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.7.0/firebase-analytics.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f85bfec19a15d8ba83761bd72180d700","sha1":"ba1e86f35a009f726e75b3656194b90a08d5bf33","sha256":"15708cf1fe0aadbd972336c15b23f51a447df8bab57fd3d9c5aded4efb8096bf","sha512":"fc04ff1406da9f615e38ba36a21254b029cac500b6d4b31dc89211aa22eaf67f5f0da1397f7cf73e6cb2106596e9eea348e8b2d3e039b1f16a58620bf711b677","ssdeep":"768:DvhwGocBQZuPn7+BUWCPQe6G+48N1AWfqq+TBT9aTNRwsSNSUo5K1Nx1MC/97d:FeWnoUWCyBfqibWNSUoIfBBd","tlshash":"6fd2f9da77f7f533829215ae817a0111f7368648780d8020b35ce9ea3c6648aa777f9d","size":29367,"data":"","first_seen":"2026-01-24T16:13:09.412322Z","last_seen":"2026-05-29T08:13:55.997593Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?l=dataLayer\u0026id=G-Q582VD8QGB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd3775cefc3156de01e6a96ba6cc15dd","sha1":"f88ff3cbee41b769fe4c8a8d4ae472020b3ebdfd","sha256":"d94b06805b10ac8aa27730c9a897fe38714f4618fe274ccb81849757ff0121c9","sha512":"7c599fbcdf1964f5c111b8f4b4c813f8c1586fa85d7d6f63fab9b5eb3cdb5847c8dc8f2882da8c799c554ae378b1d85966a40b09d8dc38672724eb416ebc92d5","ssdeep":"6144:/akI3dclXYZfoDbvGPR8JLgoQ99orRUO5N8P1Q3PnXE:ro+lXYZfoP6R81N8t28","tlshash":"f18419cdb3d674225397b478503f018ba57b68a2b88cc899f189cce42d7469a4277f7c","size":399512,"data":"","first_seen":"2026-02-26T14:49:36.233563Z","last_seen":"2026-02-26T16:14:51.422758Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.7.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9f08e39def5eb2df6582937fb0e40612","sha1":"ae374a99d9b79466ecd95605f9104ef6cb31a4fe","sha256":"474c1e7cc3bb9be13f9904258986085ed6b94bce9611f565d686dc52d276d57f","sha512":"1141e997f20fe147d8cf4d184b63b16943f4cd5e83d1c41307608f4e78cacb0e1526bf02d945b7f3118da4c7dddf26d1aea4d196e1ee9ec3043441fdc8410d81","ssdeep":"3072:MHSxYKRntxRYl2rkMVl1BqLN/DEqaxt30Q7urHCp:MHS6KRntxRPrNqLN/DEqaxt30Q7gHCp","tlshash":"61a3842d2be7113306a354bc2f1f6086b32dd11b261ada94789d83e48f8653d46f6fe4","size":103065,"data":"","first_seen":"2026-01-24T16:13:09.418702Z","last_seen":"2026-06-01T01:42:50.871767Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"youpay.to/","fqdn":"youpay.to","domain":"youpay.to","tld":"to"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-26T14:49:09.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"youpay.to","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 04:50:00 GMT","end":"Fri, 22 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"FE:00:D0:7A:91:57:1E:74:11:25:F9:5F:51:A4:FB:C5:20:C9:B3:C4","sha256":"43:FB:EE:E5:39:F7:DC:AC:78:79:4E:D9:C9:B1:3F:3F:8A:5B:53:81:69:7B:E1:66:81:2A:D2:3E:45:C6:7B:3D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: youpay.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\netag: \"a67a072cb377d0152fd2b555ddb67c8d196141ace06b72a513054ea577c6d63e-br\"\r\nlast-modified: Tue, 23 Dec 2025 02:01:56 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Thu, 26 Feb 2026 14:49:09 GMT\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1772117350.760815,VS0,VE96\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1348\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":4586,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"10a77a037fcbd34fff6c4caff341fbae","sha1":"9bc2a1b7451aa2578c2a8ee8388f76d8bec46a79","sha256":"6a28f4e02e99debe38fb2caaf8109fabad8e35448be73af225522df160c3cda4","sha512":"aaf84c3344927129f7e2a5168375260c3aab99a67e7f3b22a6fb4ac5df86042031a2ffdd59fe2080d98dec84e7a37af4a90facb420cb881bc81c5419c8a2f3f6","ssdeep":"96:vr0IGbS1jhM5U92CV76FjTtSuXvzTAP69br85NZDM57+n8zOJiQfLGb+Kel6:vr0IGG1K5UgCV7EjpSuXvoP6JMnDM568","tlshash":"9a91502aa2f360459887d5b5736693182718d1078d0bc9ac3f9ea3a0df8c165e9e364c","first_seen":"2026-02-26T14:49:36.230616Z","last_seen":"2026-02-26T16:14:51.420863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":59,"dns":19,"connect":14,"send":0,"wait":109,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.7.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://youpay.to/","date":"2026-02-26T14:49:10.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /firebasejs/12.7.0/firebase-app.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://youpay.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://youpay.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 23204\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 09:03:43 GMT\r\nexpires: Thu, 25 Feb 2027 09:03:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Dec 2025 15:46:41 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 107127\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103065,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"9f08e39def5eb2df6582937fb0e40612","sha1":"ae374a99d9b79466ecd95605f9104ef6cb31a4fe","sha256":"474c1e7cc3bb9be13f9904258986085ed6b94bce9611f565d686dc52d276d57f","sha512":"1141e997f20fe147d8cf4d184b63b16943f4cd5e83d1c41307608f4e78cacb0e1526bf02d945b7f3118da4c7dddf26d1aea4d196e1ee9ec3043441fdc8410d81","ssdeep":"3072:MHSxYKRntxRYl2rkMVl1BqLN/DEqaxt30Q7urHCp:MHS6KRntxRPrNqLN/DEqaxt30Q7gHCp","tlshash":"61a3842d2be7113306a354bc2f1f6086b32dd11b261ada94789d83e48f8653d46f6fe4","first_seen":"2026-01-24T16:13:09.418702Z","last_seen":"2026-06-01T01:42:50.871767Z","times_seen":146,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":92,"dns":1,"connect":22,"send":0,"wait":27,"receive":24,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"youpay.to/favicon.ico","fqdn":"youpay.to","domain":"youpay.to","tld":"to"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://youpay.to/","date":"2026-02-26T14:49:10.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"youpay.to","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 04:50:00 GMT","end":"Fri, 22 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"FE:00:D0:7A:91:57:1E:74:11:25:F9:5F:51:A4:FB:C5:20:C9:B3:C4","sha256":"43:FB:EE:E5:39:F7:DC:AC:78:79:4E:D9:C9:B1:3F:3F:8A:5B:53:81:69:7B:E1:66:81:2A:D2:3E:45:C6:7B:3D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: youpay.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://youpay.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\netag: \"a67a072cb377d0152fd2b555ddb67c8d196141ace06b72a513054ea577c6d63e-br\"\r\nlast-modified: Tue, 23 Dec 2025 02:01:56 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Thu, 26 Feb 2026 14:49:10 GMT\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1772117350.257905,VS0,VE108\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1348\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":4586,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"10a77a037fcbd34fff6c4caff341fbae","sha1":"9bc2a1b7451aa2578c2a8ee8388f76d8bec46a79","sha256":"6a28f4e02e99debe38fb2caaf8109fabad8e35448be73af225522df160c3cda4","sha512":"aaf84c3344927129f7e2a5168375260c3aab99a67e7f3b22a6fb4ac5df86042031a2ffdd59fe2080d98dec84e7a37af4a90facb420cb881bc81c5419c8a2f3f6","ssdeep":"96:vr0IGbS1jhM5U92CV76FjTtSuXvzTAP69br85NZDM57+n8zOJiQfLGb+Kel6:vr0IGG1K5UgCV7EjpSuXvoP6JMnDM568","tlshash":"9a91502aa2f360459887d5b5736693182718d1078d0bc9ac3f9ea3a0df8c165e9e364c","first_seen":"2026-02-26T14:49:36.230616Z","last_seen":"2026-02-26T16:14:51.420863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firebase.googleapis.com/v1alpha/projects/-/apps/1:397191760576:web:8c041a2e0c26fcb9317b25/webConfig","fqdn":"firebase.googleapis.com","domain":"firebase.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://youpay.to/","date":"2026-02-26T14:49:10.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /v1alpha/projects/-/apps/1:397191760576:web:8c041a2e0c26fcb9317b25/webConfig HTTP/1.1\r\nHost: firebase.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://youpay.to/\r\nx-goog-api-key: AIzaSyAg7Cf77F7hB9ttquQl-fkvOAL0ZmkikmA\r\nOrigin: https://youpay.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Thu, 26 Feb 2026 14:49:10 GMT\r\nserver: ESF\r\ncontent-length: 188\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://youpay.to\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":264,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1884f67222d42b636783974750cca979","sha1":"cfbfa434f591dd9e3bba847e329de49b49c63462","sha256":"50262aa44f49a99a80fe8b3e08bacabda3ba5c3b672b6e10c968dd56508d990f","sha512":"9fb91abbd4220febf7881f1902f3c740c4658b2b546c5ffcb6facdea60b60404ec993a833e19e1ac496770bb3155a80ab4cd9abc331b15e7ac080376bf9e6126","ssdeep":"","tlshash":"dad05e008782e1734bdd00aa2464e10262566c4a4f5af1bc3797b5359eed6de7473b1f","first_seen":"2026-02-26T14:49:36.232763Z","last_seen":"2026-02-26T16:14:51.422111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?l=dataLayer\u0026id=G-Q582VD8QGB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://youpay.to/","date":"2026-02-26T14:49:10.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?l=dataLayer\u0026id=G-Q582VD8QGB HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://youpay.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Feb 2026 14:49:10 GMT\r\nexpires: Thu, 26 Feb 2026 14:49:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137454\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399512,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"bd3775cefc3156de01e6a96ba6cc15dd","sha1":"f88ff3cbee41b769fe4c8a8d4ae472020b3ebdfd","sha256":"d94b06805b10ac8aa27730c9a897fe38714f4618fe274ccb81849757ff0121c9","sha512":"7c599fbcdf1964f5c111b8f4b4c813f8c1586fa85d7d6f63fab9b5eb3cdb5847c8dc8f2882da8c799c554ae378b1d85966a40b09d8dc38672724eb416ebc92d5","ssdeep":"6144:/akI3dclXYZfoDbvGPR8JLgoQ99orRUO5N8P1Q3PnXE:ro+lXYZfoP6R81N8t28","tlshash":"f18419cdb3d674225397b478503f018ba57b68a2b88cc899f189cce42d7469a4277f7c","first_seen":"2026-02-26T14:49:36.233563Z","last_seen":"2026-02-26T16:14:51.422758Z","times_seen":2,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":60,"dns":0,"connect":11,"send":0,"wait":25,"receive":27,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.7.0/firebase-analytics.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://youpay.to/","date":"2026-02-26T14:49:10.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /firebasejs/12.7.0/firebase-analytics.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://youpay.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://youpay.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 9358\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 18:07:31 GMT\r\nexpires: Wed, 24 Feb 2027 18:07:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Dec 2025 15:46:29 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 160899\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29367,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29318)","md5":"f85bfec19a15d8ba83761bd72180d700","sha1":"ba1e86f35a009f726e75b3656194b90a08d5bf33","sha256":"15708cf1fe0aadbd972336c15b23f51a447df8bab57fd3d9c5aded4efb8096bf","sha512":"fc04ff1406da9f615e38ba36a21254b029cac500b6d4b31dc89211aa22eaf67f5f0da1397f7cf73e6cb2106596e9eea348e8b2d3e039b1f16a58620bf711b677","ssdeep":"768:DvhwGocBQZuPn7+BUWCPQe6G+48N1AWfqq+TBT9aTNRwsSNSUo5K1Nx1MC/97d:FeWnoUWCyBfqibWNSUoIfBBd","tlshash":"6fd2f9da77f7f533829215ae817a0111f7368648780d8020b35ce9ea3c6648aa777f9d","first_seen":"2026-01-24T16:13:09.412322Z","last_seen":"2026-05-29T08:13:55.997593Z","times_seen":61,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":89,"dns":1,"connect":23,"send":0,"wait":23,"receive":3,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firebase.googleapis.com/v1alpha/projects/-/apps/1:397191760576:web:8c041a2e0c26fcb9317b25/webConfig","fqdn":"firebase.googleapis.com","domain":"firebase.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://youpay.to/","date":"2026-02-26T14:49:10.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"OPTIONS /v1alpha/projects/-/apps/1:397191760576:web:8c041a2e0c26fcb9317b25/webConfig HTTP/1.1\r\nHost: firebase.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-goog-api-key\r\nReferer: https://youpay.to/\r\nOrigin: https://youpay.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://youpay.to\r\nvary: origin, referer, x-origin\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Thu, 26 Feb 2026 14:49:10 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T10:08:54.983399Z","times_seen":16173820,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":96,"dns":16,"connect":16,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}