{"report_id":"50f83bae-7f93-4fb4-a71a-ffbd47f610ec","version":6,"status":"done","tags":[],"date":"2026-02-16T13:43:59Z","url":{"schema":"http","addr":"ledgerqfsconnect.com","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"ledgerqfsconnect.com/","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"title":"Web3 Wallet Connect","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T09:49:08.512845Z","times_seen":17815242,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledgerqfsconnect.com","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-23T13:43:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-16","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube-nocookie.com/s/player/1798f86c/player_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1126,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.youtube-nocookie.com","ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2009-01-23","domain_rank":20734,"first_seen":"2012-05-31T06:37:10Z","last_seen":"2026-02-11T13:29:54.590886Z","alert_count":1,"request_count":10,"received_data":3424311,"sent_data":7588,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-02-15T22:26:20.540622Z","alert_count":0,"request_count":1,"received_data":60028,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yt3.ggpht.com","ip":{"addr":"216.58.211.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-01-16","domain_rank":1275,"first_seen":"2014-01-15T16:55:17Z","last_seen":"2026-02-16T00:11:29.317224Z","alert_count":0,"request_count":1,"received_data":1738,"sent_data":532,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-02-11T20:05:56.47035Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"ledgerqfsconnect.com","ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-01-30T19:54:23.138867Z","last_seen":"2026-02-15T15:57:58.223868Z","alert_count":285,"request_count":57,"received_data":3996025,"sent_data":29353,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Elementor:3.28.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"WordPress:6.8.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-02-15T22:33:11.747224Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.74.133.176","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-02-11T20:05:56.067957Z","alert_count":0,"request_count":1,"received_data":379,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-02-16T00:11:29.1938Z","alert_count":0,"request_count":2,"received_data":1139,"sent_data":1221,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-02-12T00:51:55.446633Z","alert_count":0,"request_count":2,"received_data":26079,"sent_data":883,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"02129bb861061d1a052c592e2dc6b383","sha1":"c032adc1ff629c9b66f22749ad667e6beadf144b","sha256":"4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015","sha512":"3173f0564ab9462b0978a765c1283f96f05ac9e9f8361ee1006dc905c153d85bf0e4c45622e5e990abcf48fb5192ad34722e8d6a723278b39fef9e4f9fc62378","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000030000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-10T10:01:06.982505Z","times_seen":50422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-10T09:48:31.908178Z","times_seen":417511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-08-10T09:34:23.750628Z","times_seen":298300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-10T09:34:23.751171Z","times_seen":262048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ba1f2263bc47d4e9ef912a9293c8ab80","sha1":"c7cef6b3e6e9abdd08620f35d4a82ef7b544c06b","sha256":"db9a7f477fa7038cda900fb5d64a1869580b9ee36920ec91c4c5574a7d955fd8","sha512":"cb805b1114b60f62b570afe2328d72d3c3f7a932b382fc8735f098b40fd575aec801a63a3655466539eda89a12c8e4c26260a1efa7af530cca3de0b6dd048dea","ssdeep":"","tlshash":"780141d5608134b66a43a3609547ac6c863eb421bb3c2e3d2cf0c1758734b22f04220a","size":794,"data":"","first_seen":"2026-02-05T00:52:25.372051Z","last_seen":"2026-02-17T00:38:46.449642Z","times_seen":1242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5f029fbf2a061172ea402dfdfccc57c5","sha1":"5317e98bec552d72f09b5ccb59f677c59aad3592","sha256":"4bfc28283b1bceeb97d97f505a52d2213b35cc42b0832da991d4c15a1fe9be57","sha512":"a3194c499f693bd4b5f36c696a27e7e37efe7d69da3673d64294d6d7a50707fc2961399ed96c1941609f21e461ff6c2f2de7a4470b9c23631c94c9bb424e2134","ssdeep":"","tlshash":"c71000000000000000000c0000000000000000000c0000000000000000c00000000000","size":2,"data":"","first_seen":"2023-10-03T19:37:56Z","last_seen":"2026-02-17T00:38:46.573776Z","times_seen":1735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"085e23ef61516ddb07dd15e3066a8850","sha1":"bf603c3632a217fbc32effe84b4a472efba10d82","sha256":"10eb41a97655c9102858b3afdb825fb79828964cfadd7ca590b95baa0d0af591","sha512":"43f6f95457303971732154c6b6edf50338c7478d477711dd656fcc47ef1e516c4583e68439bbbff7f86f7401adb5b1e414737a072737c8e641d480623d701c3f","ssdeep":"","tlshash":"d1e028c5372310853ccc0408b151cc3a82bce6447754bbc1cd54d0480ec01c7d5c5fab","size":339,"data":"","first_seen":"2026-02-15T08:01:06.249957Z","last_seen":"2026-02-17T00:36:14.114191Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-includes/js/jquery/jquery.minf43b.js?ver=3.7.1","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-10T09:49:25.947393Z","times_seen":1012902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-10T09:34:23.869073Z","times_seen":341664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ac3ee54a9c946e87c1d2a2e1c074aed5","sha1":"b82f70dfba64230c5e0375bb4fa32eccaa3a47ff","sha256":"707d2b7fae499b721044aec9496a9bdec335839f08ae37c28d4f05f11aaeeb8b","sha512":"cebc87f755ebfda1bbb0b3d0778cc4167e139f5d99ce1c1695d8cc5d9cad994e44bd9a4055f306c4806d3e448224e3e7c88e27cddfad3fc8ce64025f4faa978e","ssdeep":"","tlshash":"d901d361b011507ca481eb39864734309c25d535f51f1c7a7a55daa3ca74397f8f22ee","size":661,"data":"","first_seen":"2026-02-05T00:52:25.454871Z","last_seen":"2026-02-17T00:38:46.493492Z","times_seen":1235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"79bafef78d93e910696b3b0c0279c9fd","sha1":"15cc9c29b94a44d0e49937134c52a0744d69d93f","sha256":"c3d39cf2431bbe9ebfadcd6b654fdf4b7456c72a43a490f97fce44b3f19142d5","sha512":"ac7cf00a409254624a43e60e6e37a3302198d2f74e419e67f604a40b8d2aec131abaac5730b4aab266a01a2e55883e9015a8ddac1cd26ca445ff639d69586b33","ssdeep":"","tlshash":"c7100000000000000030000000000000c0300c00000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-09T01:33:22Z","last_seen":"2026-07-20T06:04:06.292162Z","times_seen":1635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61077d6fded97f62a7c209f6cab40b4f","sha1":"e41a048110bf38ad5b6fcfc35c701ece934dc1b0","sha256":"94f1bb03da497a3076da2adf7c31880911877c7364853042b584d3e79c1a35ae","sha512":"a43c8e2e80659dd77d34c43ee7d8a172e3ebfa9317e02f55d8718ff90492ad1b7039b0bd282183a42404fcd38a26db293c8dedeab36908a8f3d8243ddb118df6","ssdeep":"","tlshash":"67d0a794b84241fcc141a633152312914e14497685c51cb5d302ff5add605828dbb143","size":217,"data":"","first_seen":"2026-02-05T00:52:25.404669Z","last_seen":"2026-02-17T00:38:46.472598Z","times_seen":1239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-10T09:49:25.930397Z","times_seen":927977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8ce4b16b22b58894aa86c421e8759df3","sha1":"13fbd79c3d390e5d6585a21e11ff5ec1970cff0c","sha256":"8254c329a92850f6d539dd376f4816ee2764517da5e0235514af433164480d7a","sha512":"2af8a9104b3f64ed640d8c7e298d2d480f03a3610cbc2b33474321ec59024a48592ea8545e41e09d5d1108759df48ede0054f225df39d4f0f312450e0aa9dd25","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000000c0000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-08-10T09:15:23.322772Z","times_seen":52501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d3314b2996f608dad6d956e9e1900b76","sha1":"7f3d9e5d5da071e239567c665b8c0be1c63182e9","sha256":"401bd63903b546c4cce017c817101064603defdc970840dbd00bca2d5e6619b8","sha512":"21c889cca4c11d602e39368058d4d3fd3bf8b6213ccf565974f4a89793754e9874f890aeecdb3ff1cc01d937d3338aaa2a7250dd1896c1d16167588e5ab2104d","ssdeep":"","tlshash":"0d11146f6684a7edfdf6a2d50c9f950603658c37efa9118bad5253f0f5048537012e42","size":951,"data":"","first_seen":"2026-02-05T00:52:25.274867Z","last_seen":"2026-02-17T00:38:46.471174Z","times_seen":1249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"26c98c8965619079681bb390dfe65b15","sha1":"336135959cdc4463781959fd9a153a5859cf24e0","sha256":"1067d75e0526c20f0063e3c433cf0a15df4e8d26a46deacdd24a7638fd808a30","sha512":"a19134ea706c38164e430dc461e43f205f1721c4ef5e0735ff87a71b35573edd5823b22131e901c2aaade1bc64353db66c58fed0a43d88f92bda9119ea78887a","ssdeep":"","tlshash":"51e0c2c8ffc64976a4e1b1e2539f5b044257a54ad4b60ca1411ed8c46878ceb8678a17","size":299,"data":"","first_seen":"2026-02-09T01:22:27.488828Z","last_seen":"2026-02-17T00:38:46.575176Z","times_seen":592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9ce6796d1fc635ea4e71fec1258e662d","sha1":"6d574b06d6fceca0aa556e71dfafffcc3129f3a6","sha256":"5e8f453c24ecf4c91372257f8caa9a39d914cd08f95ebc0b27311f07489e84ba","sha512":"e1531d7edfccd91b58ed9523a98aefd0c4edaa6a7bd35661c59b72d2336145215a808c484d1b7d7f164d1e121c74b347013c8a34276d0dec8eace80617e53a28","ssdeep":"","tlshash":"7ed0a7a4b84241fcc141aa33252312914e14497685c51cb5d302ff5add605828dbb143","size":219,"data":"","first_seen":"2026-02-05T04:31:48.508173Z","last_seen":"2026-02-17T00:36:14.233692Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"43d5faadb4ff41229920777a3ac3ffce","sha1":"d66f5d996f8252ad59b5ba555199f11afb042399","sha256":"0becb6bfc7dd16d998622320c232478c6ee2dbf5dad7a91db077c04980843e56","sha512":"e6719211a58edc96a4b687d1c9adac33d8e94d7b0291d8dc29e1b71284d90712f1473d0e740433314e3236521069ff5ed22cad0767ea2b2312fe68f0ea866bb9","ssdeep":"","tlshash":"ed8004441c54304111551411013700040153000334514050505fd0440d7d547441f41f","size":38,"data":"","first_seen":"2026-02-08T14:47:51.301385Z","last_seen":"2026-02-17T00:36:14.113308Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/js/frontend-modules.min87cc.js?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d79e92ec845b407074ceddaebfd93c31","sha1":"4d5570d5b1eea3fabed11ff5b99feb68a33fc3c2","sha256":"f94cd7c7a33e600e9d9aac4771e661ade5c91719ccb32b52f405b1fe2e356ad1","sha512":"4866c7fd7325346b032aa18172a484334bc8a71216c9979482adc0d853211d151d806b166ef2688d609489fef59f20c33bb3ee5ea63403e0958221431617eb58","ssdeep":"768:JeAjA6wk9C+QioJHYNQAzeLHeBHmjkSK7+z1hlN14cR8+AvNKRiA8m6XS3gzlAIT:JeAjA6f9C+QiSYNQAzeLHeBHmjkOzRNM","tlshash":"f323c7853652f4f70beb40daa02f450af25619a8640df4d4bfe9dce194b0d8e237ab74","size":48393,"data":"","first_seen":"2025-04-01T21:21:15.982299Z","last_seen":"2026-08-09T21:30:42.75649Z","times_seen":3281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cf80dd2e6836c109fea30c57444667b8","sha1":"af610dbfa0ed4ed3a4aa1a3e41e7deec2701a497","sha256":"373ebb8d5c8678a1bbd0ce66921b197985b51d3e9cd90153f06aa656628bc903","sha512":"3cfac6bd4398a177f707181aad6d1fafc0f225d4d601b86fc7b29f89bd6ce14fb258c751bd8f6c09399b85646b60abb4bf251430f6103a4b2950d29ab42ab9ce","ssdeep":"","tlshash":"73d022c13a5fb183e1e62d8a3347d874092b060250488e0da439a8c1927b9b61da8c2a","size":222,"data":"","first_seen":"2026-02-05T00:52:25.309848Z","last_seen":"2026-02-17T00:38:46.596557Z","times_seen":1260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f8368060f056fed83c4b969d9942749","sha1":"8d07a71af820ac613055b1e85abd75b7d6d41d11","sha256":"ae251a0c96af0f274b6f9715025e06dbde9f3253a796c0edcef23f9560d83d96","sha512":"919f016fd30f8b9ee7cd8ade618b5b77fc5003a7cddf9e5b6e6b40a665306ca822d20bc0c0d6c180f2c2164b0dfa6eb452486215f0365db2d6cb61497daeaaac","ssdeep":"","tlshash":"c710000000000000000000030000000000000000000000000000030000000000000000","size":2,"data":"","first_seen":"2023-03-11T12:48:33Z","last_seen":"2026-06-04T06:47:02.997756Z","times_seen":3268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5206560a306a2e085a437fd258eb57ce","sha1":"c9ee5681d3c59f7541c27a38b67edf46259e187b","sha256":"de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc","sha512":"40422e2733a73dec2f9aac48e2ab48d3b2fdcdc1e3a88bc7ea855227e62c029246da1dd49dd057bb8a8b796b3b2a6f60d9d8a85de53df597e422b2f68c54cfb6","ssdeep":"","tlshash":"c70000000000000cc00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:04:13Z","last_seen":"2026-08-09T02:36:33.105112Z","times_seen":68965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"618441d41cce47dbcfd9bed6e5ff64e6","sha1":"91a07087a57580c557f3a426586f0c2f60ef2af4","sha256":"53a36375dcfbda8e572b120a670e0fc20d48121894dc37bd950851777c2f0b94","sha512":"26b2fe0761a06310b02f1c5071dc13234d132db2fe30446508c20fa2c7a7ffdc9ee306a5ca522c846570f06e6dd567a37d66e11a0cef1ffb420d7812e4755e7f","ssdeep":"","tlshash":"c7100000000000000000c0000300000000000000000000000000000000000000030000","size":2,"data":"","first_seen":"2023-03-14T11:21:28Z","last_seen":"2026-08-04T21:48:11.316514Z","times_seen":1916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-08-10T09:34:23.847197Z","times_seen":210123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"758951cac5e62129e654698c8ca0333b","sha1":"caafa15ec77a41298ea6f4d0d1c26f6269dd834e","sha256":"5c62e0b4977585c1b8aecfb35a731f2f6669e3c814cd6feab19ee492d56499f1","sha512":"13ac44f6794a55c5b31540b37e7b00447c7ae6fc7b8d80135c64c2d289381516d336ff5a44fdefbb74ced6ec3d1a04a5321f67d827bac94105649dee318fe3d5","ssdeep":"","tlshash":"c7100000000000000000c0030000000000c00000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T12:10:41Z","last_seen":"2026-02-17T00:38:46.543647Z","times_seen":1639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0b1b4955c7c96c017b6b1e294afe9f10","sha1":"c2afaff7a1a7c7ad7f181b1c83d27b8c8c558fee","sha256":"96bd0919f1c96b029072001b6b0f9ef7e6e2d0834319b5c0476c3883f1a7004c","sha512":"7e8e4d0857577522f41d61e8bbf60d8ebf349fe459f03188f06879904d9dccaaef88e2dddf0d6f7676a35a9e9f4d7eeb3f0fb24aea666a9f57a3d8ec7ad6a349","ssdeep":"","tlshash":"1090044d315d75d415417d37155f5555715f4457dc4d347cd1451d443c101374053f4c","size":51,"data":"","first_seen":"2026-02-09T01:22:27.510944Z","last_seen":"2026-02-17T00:35:35.729566Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a17e8601faa88d356dc0120758036ff1","sha1":"dfb2fa95d8ce79f472782c2324cc00046fcfb144","sha256":"e74eee16803394ebb4614c1c20883d5c9ce279d460dcd7d69099407ec7c4032a","sha512":"ff464216893df9b187c561fa58213fcd1b0327c8cb7d807c9145ca1cf80148e73f16e6c98ee14544e0ae0549d2eba8e4bb96d30306927f31693e48530ff45c47","ssdeep":"","tlshash":"64e0c067337a952a51608de3c6df6488b86410e9d6910ccca2be8046113dcff4155503","size":351,"data":"","first_seen":"2026-02-05T00:52:25.418447Z","last_seen":"2026-02-17T00:38:46.526707Z","times_seen":598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a87d4cac7e3d0b013a819fa54113b504","sha1":"5fa1810dad4f5f70df65f7cba64453959ef669d1","sha256":"aa2806a536e9d9e210d7c4336b79fca7b52e6e269621d64f47e2f3b7660522b6","sha512":"75378949c8bd1ba426f9695813d8719a725ebdf4383a295895361dd9985b18b51d2d56a3db407cd13c648f70fd2472f0cef5cb0de3778af1ea29e68df7401484","ssdeep":"","tlshash":"9a61a79a3775388b31bb15d2aa3f0e0beb7658361684d034c9b9f7541cb24a3c379e49","size":3244,"data":"","first_seen":"2026-01-31T08:55:30.954536Z","last_seen":"2026-03-30T14:25:36.098696Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/vendor/js/countUp.min1c12.js?ver=2.0.4","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"6db9b099a1472f4d9383c9c0c83d8f88","sha1":"6fdc52f9b9ec2a08bdde5e324fd6e0ec69da482a","sha256":"5eceebb692f4f85b1735f007aab6e4c80dd6636389fc9cbad4fa863f34d3ef83","sha512":"51a8e35a93f009e83f4c00e19c6b3592f60ef6947a008b7bfe34b35d315a9a96636d4ff22845ddb6e418ea86015e95e5bdb6a0b8a8d614a1c0b492224d7fbf7a","ssdeep":"96:RsH6HUqlSOasjE+46RbYi4laJ+bcyaYXaeaA4:Rs/gY+48bZGv4","tlshash":"34a1ff8af5725b110fd713a319070346233756687448846c7cbcabd78de581bbabbb78","size":4706,"data":"","first_seen":"2023-03-07T14:38:55Z","last_seen":"2026-08-09T23:05:40.4488Z","times_seen":306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-includes/js/jquery/ui/core.minb37e.js?ver=1.13.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-10T09:50:32.425339Z","times_seen":340523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"81f4f8a4a1d2e2b5ae4732502a010379","sha1":"e01595ff840cc7a567cfe1381a79194c48898e83","sha256":"be706051f6b94b4bb0cdeee49539fde272f344997d912e21ace157cd77ae7ebb","sha512":"5d80562129210611849689c3f3128c2ed38b6be48e6003f701364289008a6ca78856a6464aa32186a743787802286fefbaf9189fa501b83c7816460a5bb1c1e2","ssdeep":"1536:DZc0RtySap5ouDUFbv4k6VcpBgoAB3p+cV9bFxpOjSzo9entHiGDDhsj1fbTFlch:d/tlapCuIpv4k6VcpBgo03p39hxpO+zh","tlshash":"08432bcbf2d6632a68e375f2005b410ea37a594acd942c6fb909ebf41d78847407bf25","size":58572,"data":"","first_seen":"2026-02-16T13:44:05.192435Z","last_seen":"2026-02-16T13:44:05.192435Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bc5c44265ef1a96eb390a9f240394741","sha1":"f04e72279860117a68cfe4e41685def138ad07a8","sha256":"314d2a87c16a08f0dced12725bf97847d132caa2f22110f6fbd265dcaf4de6ec","sha512":"3ed70d1bee620a4fa6b35765af731ad01e82d34616e91616beb3921b15276a5693f1dce82e289db54765331114cb31e53260adbc0b7c2ae7e5125a88fa3a68c3","ssdeep":"","tlshash":"edd095c0f45e70b2b3ee3becc316df200c570000551c9c00103f54c15db64a211d1526","size":261,"data":"","first_seen":"2026-02-05T04:31:48.531831Z","last_seen":"2026-02-17T00:35:35.79524Z","times_seen":598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"89fc57ccc474c3ea81d802a82333bf91","sha1":"496bcdb358c6421b77b460085b7dd8e94ffd33d5","sha256":"25892ddc0935da6a2e7d288497bf74c55944fc577cd923ce99ef193f521ff995","sha512":"8f71cbf1c3d7856be8d0225163c67292d0f1f65d5a7107351f5172212e2025fe4ff3b30d66dca81a6b6ca01d90f9bf9014b5a615bd383127768a5a454f09ee69","ssdeep":"","tlshash":"40c0c0c0744b55dcc301e7b3217703a14c564d04848c8571c147fb4de86060b1cf3b81","size":179,"data":"","first_seen":"2026-02-05T00:52:25.357649Z","last_seen":"2026-02-17T00:38:46.541987Z","times_seen":1256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/js/bdt-uikit.min4ecf.js?ver=3.21.7","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b34dd0c9da769f32af745b406f2e4c8","sha1":"49a4cd67ba123e912abac8b3fd87baf376a7dfec","sha256":"757a19939ac96d32b1114a58d91c67862035d592858e2216b816164aecc93f94","sha512":"d1ced79c43c27804add4ace460a02e200c59af9dd268d542823d19bd92d890565d3189b42896c66812784cd1b5e17b14c9962675892640feae416de5e7cb2b5a","ssdeep":"1536:clS8nXcZmJnO/oktfw4nTubT/W6JV166tOqjoLOghx0NgX3vTlMHSrT0cd1xYAcm:cltsZWYtfwVnEDpMH4q2EgenSXPua","tlshash":"9ee30a9733a5b02643e741f550ab4606e3395984b40b84dcf67caace38aa845727ff7c","size":146909,"data":"","first_seen":"2024-07-24T00:24:06Z","last_seen":"2026-08-10T08:51:34.657216Z","times_seen":1685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"89582da1a836a561891424dd20a8b49b","sha1":"ed1c1dc976d326f7d824ee3711693aa4ee4ab7b4","sha256":"cf79ebe82c1366e7f7c6520af0e2ec620a2747d43861262d7e9d7b193de1a620","sha512":"0748759224d023dc5908a58c7e3271b4821526feb930f60ade06474eb8cfa546920735adf8db5a6a924e5cc32ab618e89d49762fa7f88eb628158327225c64e7","ssdeep":"","tlshash":"49d022f0adc16c8cfbb2513aea4f8939812e80c2e41a2c04a62348a46a12803028f958","size":216,"data":"","first_seen":"2026-02-05T00:52:25.301704Z","last_seen":"2026-02-17T00:38:46.590442Z","times_seen":1258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b265f413415bee09848e236f3938a628","sha1":"7c88e65875bf5b31db9a6b0e761113a18fbbaaa7","sha256":"0155d3fabd9df0969cddc83249140330d7be4017e41ab079b9d4e4dbc3f2049c","sha512":"5c9ca576df65fba018052628703e975a9eb42d81a325856d615ccd8666936fd21356168929a7d598181ce6b89684ab1e6ce059fab19417381ac0aacee092824c","ssdeep":"","tlshash":"c710000000000000300000000000c000000000000000000000c0000000000000000000","size":2,"data":"","first_seen":"2024-01-17T06:28:00Z","last_seen":"2026-08-02T23:01:01.202449Z","times_seen":2599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"da95b9bd2495c607c66cc7b6254b3f2c","sha1":"8a20f63fb720b79a45cd8850656a70557a431817","sha256":"d3f4d77d8bc5f1b285a9eee45b64bd9752928ec105bab89ae631edea01f686d4","sha512":"c70bc6b97627c6d0df08c2a2e0f038d25dde6b4831bb1dddda4d7977513ec5b842e0d3af664ce8e5fb70b8ec244e40b8334ee4b5de25590607c0d8865be8c441","ssdeep":"","tlshash":"3fc02b6534af155e7505f0835112001c937084c0a4082d585323b7f674d5873c022a00","size":138,"data":"","first_seen":"2026-02-05T00:52:25.424257Z","last_seen":"2026-02-17T00:36:14.245998Z","times_seen":611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"94f5a64e61ba849a9213f6b6f62b151d","sha1":"92d40794f5555ba4dc94d57f6fc9c19105048fbd","sha256":"2f434ba53bd39e7933d7e12070c4a783c41b3f1c68d9f14008cb29f7c3871a1e","sha512":"3852a9b43ba48dd236f9e626cd896034626db8ea5f9de98887011c0b2f5b5d3083cf474d59c340a7d7721e307956b30c73dce76d2ece2ab222a388b66502b429","ssdeep":"","tlshash":"c710000003003000003003000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-04-20T19:34:42Z","last_seen":"2026-03-17T05:46:24.260521Z","times_seen":6434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"984dcf30f68bc5fbdb4773448ca11e46","sha1":"82b9f4c6742ddf1130eaa83e24e186d47638bfc7","sha256":"4be3e167f75a33bf5f6f1b7faed456c33c9597de88d9ffa5b5565f1d260f9ab3","sha512":"ba0a59a113bfcf862602450312fa3d1feb87a002c1f5607bceee06b7421453eaca821d3d3787003940f36c1c9de866477f6f9e85c55ed17b855c6673232a0771","ssdeep":"","tlshash":"c7100000000000000000000000000000c000000000000000000000000000c000000003","size":2,"data":"","first_seen":"2023-03-14T13:52:16Z","last_seen":"2026-08-05T00:33:09.040258Z","times_seen":1801,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa79053198c404a6274ed31f37d7e53c","sha1":"36f5a27f4b1807a253d7aa694aadd8643d73a8f7","sha256":"617584ae11332a2c963340e2ac131a101ffb24befc213a5942311f7d9ac072fa","sha512":"b3118e1fea55ca3dd84c4d92b16dbdbbcb07ca76edcb71c48037de4015fb2883b708b1c0316eadb93967f293a130dbae6313f446e115717059582671b248be09","ssdeep":"","tlshash":"5ce0f87c3c7040a20be210b681bff63c3e0a30a04094d857a8abdc282cf1fce6e019d8","size":418,"data":"","first_seen":"2026-01-31T08:55:30.964579Z","last_seen":"2026-03-30T14:25:36.108093Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/s/player/1798f86c/player_es6.vflset/en_US/base.js","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8f8400198c6339c0fa28999321918f7","sha1":"1ed29a62892b6f72f14de3da6ae838545f931000","sha256":"d7a7e66076bb8ddf0de2f43df759b6310c31f7b41f48d8ae086aa322cb0b9ecb","sha512":"a17d26890ef4385f62f6ffc8c6cdac767dc94dfedd15f7ca24a5ea0ede39c2b15e3c3646ec4ad7e5a1737a2eb216005419403d4adac2ab11698250284cf5673c","ssdeep":"49152:YqQsNtRLKH33OKAA0TJ3+JNuU/pa35RXcQDZ02xLUL+HVREpCgrYhyA4GA/R8+l/:YeYSdBUhqBwrv","tlshash":"6fb57d8536e3786a42b3f4e5d42b2101b23a6848b108c5bcb57cdfeaad75c06617af74","size":2391755,"data":"","first_seen":"2026-02-11T11:11:57.922343Z","last_seen":"2026-02-18T17:11:15.259747Z","times_seen":5148,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-16","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube-nocookie.com/s/player/1798f86c/player_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d20caec3b48a1eef164cb4ca81ba2587","sha1":"d160e0986aca4714714a16f29ec605af90be704d","sha256":"72dfcfb0c470ac255cde83fb8fe38de8a128188e03ea5ba5b2a93adbea1062fa","sha512":"242dccbd15e40f8f78cb6fc54cb9894713b7682afd1305d5230e26f2fda96fd764061713e4954e22457b37f25c328e8342c2bf6b55844610cd0756fd02271aef","ssdeep":"","tlshash":"c700000000000000c00000300300000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-08-08T11:57:38.947355Z","times_seen":83638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"38540e1230099e56b80360fa1c451b2d","sha1":"88c9b729253ca7dac7895cca6787eb3d79bcb5af","sha256":"7d0747d0e87fe364b877d643d253cfb83dcd63a5ed0806e5d8d5970b3fcae97b","sha512":"634c73cdd2931220876e1f72d48486498a6e6bf96217907dc116b491ea72fa6e1288650dc635d86c37f1199ad134d697f7bb96b630ef224f07ef3fdaba9d78bd","ssdeep":"","tlshash":"b47000aaac8a200000333028000b0008022200a000020008080000888e3080e3882828","size":22,"data":"","first_seen":"2026-02-05T00:52:25.47321Z","last_seen":"2026-02-17T00:38:46.547112Z","times_seen":1250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cd5532a9977c28cb4bcea23ba3b0dc48","sha1":"a5d68da11cecbf14d8352e78a6055824b8d1a3cf","sha256":"b5bf718bc41d2e0a2c0c26d1821b03a294c752ca81fef4fca231e04bea31143b","sha512":"5df34587fa00d74e952148c128c97985c94921986c508880579ee5c5d40b373a9db95a1e580147a25f4436ba381d6a89b4e05855b2dc8e6e94617c1e9a250e76","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000000000000c000000000c000000000","size":2,"data":"","first_seen":"2023-06-23T09:56:18Z","last_seen":"2026-07-14T03:05:58.101659Z","times_seen":2082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1730150ecdb45d7e67ddef33556fcac9","sha1":"8b09a7ca063bfed87b5ae130746a4233a15d9155","sha256":"749ccf81306e9a0fc57e1d7e54243c6c417aed5aced3e975577ddfc0e89c925f","sha512":"a65977cbe9ba1e16f489001960437b8b175a4dcab8a0c21c741d2c573c247c2e397ccae283c4ba884c9959585cba0765ca22df78d8cdc27c18d1a86130d56c59","ssdeep":"","tlshash":"d5b0121afa581e595011d0b2623b233ed1f584445de11d197516948f6276fc605a3104","size":107,"data":"","first_seen":"2026-02-05T00:52:25.342005Z","last_seen":"2026-02-17T00:35:35.728472Z","times_seen":591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-06-07T08:19:02.131151Z","times_seen":267242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6c4e4d90a01bd21f38da20f9fd98600c","sha1":"dd4930af5b15c239d07d88568cf9d6e39afe2456","sha256":"bd4d44eb055b22f2249f190c3176d7d6f9971c5de8a4aeb63cc45ed3af00bd70","sha512":"e68e506701685ff0878faf745af774d9765e0133303584aa4186354196d254ac177fbb7d4d235a9fcfdab4768e0db97a92302e16f018d38e52e9f11d6a8b8683","ssdeep":"","tlshash":"e7c0c00cdd313c044582bc30acb7080dd1dfe00f031e339022006db909c00345c0f100","size":170,"data":"","first_seen":"2026-02-05T00:52:25.304134Z","last_seen":"2026-02-17T00:38:46.591565Z","times_seen":1241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cc43ad532377e05783b919d86a896d9","sha1":"69e00bdb15ac21186c8d27764e6311759ba5b99b","sha256":"007cd5f5a967155b6963ac5de46c369ee23237414c3f576b4197fe46229808ce","sha512":"404182f4b51a22a4a35e58480d372a65db2465803ca23913e379199413edf84fa74dcf0f92026d8561dcc35bdff981cb98a38c8f50ae05f7224e5c7b42b30c92","ssdeep":"","tlshash":"2cd022c93c4978d20279238888ba01f7e2fbb8dc78068b40c32442002a3ca3a5464402","size":199,"data":"","first_seen":"2024-10-31T11:08:50.83142Z","last_seen":"2026-08-10T09:34:23.826506Z","times_seen":157940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b3909ac4082ca5a64f99eb887f0b6eb","sha1":"29f30fb110bbe211e2d326f60b4607700183b1a2","sha256":"0adf45ad4a592af56615b037719f0e3aaa595829627eb1ef431f1e06287c0c18","sha512":"89daaa745a90e548b34c7c4519a8f2fd47587fae063d1ae350827e40a4f2c3808be907bbda1f924aafdf8ad76964795e87e4e4c777b6ea38fd1342c636767528","ssdeep":"","tlshash":"d4a022a82ca2b0c200003000808f8830aa832acbe020c000c000ea3220380000cc8080","size":61,"data":"","first_seen":"2026-02-16T13:44:05.203249Z","last_seen":"2026-02-16T13:44:05.203249Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-08-10T09:34:23.862658Z","times_seen":177271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-10T09:15:23.311342Z","times_seen":63513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"277a8cbdff24f857576cfaa18e3fc1ca","sha1":"a3985f22f2ef1b128cbe37fdf8b0b6ea77288625","sha256":"42950d789af50e105f1116f0d85993c48a943e681a6c6b5f956981d7b3f2b82a","sha512":"29d791b2be24427cdbad9d206617d540eadcc463bc3ff1b408c15b773c370c19e9f21d25bf41898daca239943828ad987a461cad050622c297b0f056920be97f","ssdeep":"","tlshash":"fb7000882c0820028822303088cb0008002208c080020008008000802f3800a0802808","size":22,"data":"","first_seen":"2026-02-05T00:52:25.383871Z","last_seen":"2026-02-17T00:38:46.46505Z","times_seen":1242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d380a89cd9d63c6a63ce7631eca970e","sha1":"6996033c1188706c33d82cfcb5dbda86185f8d9e","sha256":"36e8bfc3a7b0f707ebdb1dcfa451af344195af2e21956301185de853ac4078a4","sha512":"504cd565dd4b67d9a6a0cfd319ce441630196f833f43394df05ec3ee68c19e9a4558e471b55d846119e21eb3a67858291e0bd774c6b8afeea973d5371ccb433d","ssdeep":"","tlshash":"46d02bc2f31c10c178f3f4d66717c420027501096d75217151ce96c040e7eba9971ba6","size":277,"data":"","first_seen":"2026-02-09T01:22:27.527148Z","last_seen":"2026-02-17T00:38:46.600797Z","times_seen":578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b2fa3a200ed194e3022ce8f0fc6716d","sha1":"9e52cb07930786a293aa17a60f3e85957092d4d2","sha256":"1d5863243ae6598e9788a89ea02a0d8af4643cac5a8fc471bdf4f30645a1e5a7","sha512":"05f1abeeeec396e36244072f5f7a22a30211435ea7837fb9c82e1935167249435d25036010d74e9ce05a661b0fdb6b66a5d63ebc6c1161217dc9261abef17783","ssdeep":"","tlshash":"0fe08cf08b081de895c3f419c7839276270dc142b668292c02350aa022dd692ab8d17c","size":304,"data":"","first_seen":"2026-02-05T04:31:48.492517Z","last_seen":"2026-02-17T00:36:14.265155Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5c244fde4e6f1ade71beed5c11edb59","sha1":"6bc634a7f8505a2ce340807aecfa1e50c2a578b3","sha256":"d561924e4295103128924509bbe71b3eed6625592d75ba3cc35c365189d6081d","sha512":"6ed66e7a246ab961cedd150553b6a9aa692988813dd4ee30c8b7d78d80bb8765a828112c6860d08eb382cae34e22bdd76ecda5ee1c9c7ee25a49b1d2639474f9","ssdeep":"","tlshash":"966000300c000330c0000c00000c0000003300000000003003000c0000300c0000000f","size":13,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-08-10T09:34:23.838649Z","times_seen":176298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bf84d82171dc2ac5d461275d538d0e49","sha1":"99dd7fa76dc8801ca953d6be13afeb4a6c04c12b","sha256":"67fcb53fef40413c40f0eaff1081c1a2d2ba53196a0d6303c8ea5de28d1bdb7c","sha512":"0f684e9df0f912e11616b67c03ad87b171b2b0ba1146d94c36d32d003e14610af2eec434f4b484c2cecd76547b3ba4aa76cb54ce406be266c792fa0ef68c0584","ssdeep":"","tlshash":"cfd02b563d0053027c8a2cf8f3b7f38215b1321ae6cf049ccc0e8d540f948934823c12","size":283,"data":"","first_seen":"2026-02-05T00:52:25.263093Z","last_seen":"2026-02-17T00:38:46.583821Z","times_seen":1241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-08-10T09:34:23.784654Z","times_seen":204564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3a3ea00cfc35332cedf6e5e9a32e94da","sha1":"e0184adedf913b076626646d3f52c3b49c39ad6d","sha256":"a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58","sha512":"99c426cc0bf3c465f9c4a49e5a6c3d09a43c4f95631776b354be0727f3f65567ae9357c5d55015e2cfbb27ead98e1bb54f2a0f26042ad267a279f0e3a8c5b2e9","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000003000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-09T20:20:01.160412Z","times_seen":50545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/js/frontend.min87cc.js?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"0340daa3432491513af0f0fdf90d9a3c","sha1":"f5c963ed068b58853dfbc84ae6f72df1f1e4e574","sha256":"e0b2af8faefc08acd9a693c66baae9def17b1bb4dcab7f64ba7d141cbb98ff7e","sha512":"c4253e4477ff1e40ab77d350aa54cffa23b6e5a2d7eafddc5ac9dfeaba9e60c4101eb64b6654578b991872eff1718f21624aaa08190e5742ff2180b0a0c94160","ssdeep":"768:iRP3yjt7R8RjDKvx1QEa/A3JSJGfVgNq1w9VKEAzBc5GPTSebsvTigAUMTSX5aos:iRP36t7R8RjD8x1QEa3GfV3zEAzBc5eJ","tlshash":"6113f71231d294aa55cf48b7b0330219b3765dddb802b59cb1bdace6a471e837372bb4","size":44243,"data":"","first_seen":"2025-04-01T21:21:15.926583Z","last_seen":"2026-08-09T21:30:42.673837Z","times_seen":3277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c995266caab3bbcd2bf8e9aaf601f5d","sha1":"f1e791060e63f5f343dd8c9d12737d6c344040ac","sha256":"b8335c6c847f3262db7d79d2978b1047246f41ad63ab793383c45f274134031c","sha512":"ab547b111e1ffd7bb653013ed923e15858d55a787327a5ce9c14d722505ab9a788a274b0b567b3bc67b7e4870bd47b6fd484c76fd9a887a7a52c9dbcb41a5a01","ssdeep":"768:fA/hGDDLTOYHwGGDViA8J4igxJ6mqNd+yq4Nu8MRouhZENrdBhLQ7:oGOYzgxHyrNtMuuhEQ7","tlshash":"9a5363240868a8729893e547ddb9ff3e9cf816790bc59aaebcb7835c01ec6510d9f413","size":64795,"data":"","first_seen":"2026-02-16T13:44:05.225394Z","last_seen":"2026-02-16T13:44:05.225394Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a472461ac5e17b05e29ab594bdd74747","sha1":"5a2290fdb6637a9993f0c22169c20249cfeb3d0d","sha256":"3ed5ca1120dae6414898a7f4ba0c52d96bb1b8014bfda531b2bbf26754c6092c","sha512":"59b96d258cf0ebfc2be780cc9deb94d556956efc7038ae0cecd46e47bbee613b538a09be0b468f4a9f3891bf036120a5822eb605538725b47f512f5a9ef17d1e","ssdeep":"","tlshash":"58e0dfea5820406ed51f4362a4f362eb6ad2f04b57257b653db364a80bb105c6086643","size":351,"data":"","first_seen":"2026-02-05T00:52:25.319897Z","last_seen":"2026-02-17T00:38:46.534696Z","times_seen":1242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cc646d79eb7718caea06316bc4a3d9a1","sha1":"284b901732acaed8bf60348b5a409c5bec7b4e85","sha256":"377a1dfb2481af521f9cd9b231577e1590acd900f5da22ca71dd0936ea28d076","sha512":"8a2cd5126b7844bf73acddcc31887446ee8ba9fbe0d67e37a03437457478a3d117adb906f9aa3b851c6d09e2062310941191aaa524707716da6fdc14bb2d391f","ssdeep":"","tlshash":"13d023dd30f1db154271cd3467074cc77334d945c2361814751c1e0a4727457059d4c5","size":208,"data":"","first_seen":"2026-02-05T00:52:25.474671Z","last_seen":"2026-02-17T00:38:46.590995Z","times_seen":1249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-10T09:34:23.784149Z","times_seen":237855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d43ef05e57cdeab7895fe8a3b6ee014","sha1":"19671e4e00cc9b5f8f6a6167c1ea8800ee539aeb","sha256":"b7893a0611b91f5fe47ce3889faf375eddbda47517f4e44c8c338eef6d2c41e5","sha512":"535346ebfe272e052e64dfa1845da29662c36e84fa5a946e52dcbb2cf4d894851a102180fb1c04603f86ec920d89fdfb62c1ddc14ea81ba4cec7d4723ad5598e","ssdeep":"","tlshash":"8db092a4a20c0b5812813919ad2b06e950e42704f82994884ac0ae2548e0a41568ead8","size":116,"data":"","first_seen":"2024-07-19T01:23:55Z","last_seen":"2026-08-10T09:34:23.767098Z","times_seen":192009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b43b0aee35624cd95b910189b3dc231","sha1":"4dc7c9ec434ed06502767136789763ec11d2c4b7","sha256":"454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1","sha512":"a882f0ac848b0b6b4ca7b42bfa1d266afd0ddeba9204ae57a984a69376d59816b1ef3f4d442ea8a70396067ff5b70e0ae8eab3935b617b8e366d8e35c3bfe14c","ssdeep":"","tlshash":"c700000000000000c00000300000000000000c00000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:42:46Z","last_seen":"2026-08-10T10:01:07.047456Z","times_seen":60257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-08-10T09:34:23.753653Z","times_seen":113643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7170da8f479e1014247ea9317681fb27","sha1":"8dc582f16ace1af7298f9b1e1511dc5287a52a4e","sha256":"e5ec5806a896397a04c1dd719af65f830a4bbc24c9f5f93767519b906cf3bfc1","sha512":"8b1afad02ad01c8eb6c57b42c25065ed165b0fbe498f34bdc308c736d5ed2bea33eac58a20d7c723f8922b5b7f86143f57e5851d1ae590a3520100ad0c2f1c08","ssdeep":"","tlshash":"97a011c03828c80e20a22020822a0c0803280a02fe008820820ae0820b2a0ab0bea88b","size":79,"data":"","first_seen":"2026-02-05T00:52:25.43502Z","last_seen":"2026-02-17T00:38:46.581055Z","times_seen":1252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d65b342242e3560dcb8e1a73cbfe4042","sha1":"4d2e486f643d8ea8562bd90957ecebcbb992ddb6","sha256":"56f7750db0f8742fa1a190c856e39a781c3397b147e5f5732335bb07de332dad","sha512":"cca4e585afca1fa9d59ba9f3909169b6425176c5ab09949957abb5c1e5cade70f0b9e785645b9e63fef2acabecdcb1f3df57613a690fa105ca6a784de7385112","ssdeep":"","tlshash":"c71000000000000c00000000000000000c0000000c0000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-13T14:51:51Z","last_seen":"2026-02-17T00:36:14.143586Z","times_seen":1273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-10T09:34:23.855836Z","times_seen":187302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-08-10T09:34:23.839229Z","times_seen":174033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a931635074a5017da74948b67e16c76f","sha1":"a6799582ad16a7c1ab8221c166268130df6691d2","sha256":"1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c","sha512":"7c96bb515bdba9ad60854b433d24e77982a321dd7ca71599fd8f79acee580802f56829a5dbb7f64932a51ad50d18a9438251a6ad8127ad2b2e332811033d2c7b","ssdeep":"","tlshash":"a5d023cc3941f262d06274b9041704dfd173384a1e1cdf4184154875667c5d9407f4c4","size":206,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-08-10T09:34:23.839822Z","times_seen":209715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/gPcLkiLtQzW5GAviWs0_DV09CkKQZ5Hz8oELTgKOL84.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe61a53cbd79da0d96422794bfcdbd27","sha1":"5c2004e19f919a01ea051d0fa92104afb59e8d94","sha256":"80f70b9222ed4335b9180be25acd3f0d5d3d0a42906791f3f2810b4e028e2fce","sha512":"6b5b25d5397941ae3997c531f1d195cd56cfad23b1a32f1d09e8b668598acf1a4a15e08f4c4132e4754d371e0417ba301c471d5369e773ab03229a7754a224fd","ssdeep":"1536:jD7c0RtySap5OuDUFbv4k6VcpBgoAB3p+cVXbFxpOjSzo9e9tHi6DDhIj1fbTFlY:T/tlapsuIpv4k6VcpBgo03p3XhxpO+zd","tlshash":"58432ccfb2d6632a68e375f2005b410ea37e594a8d942c6fb909ebf41d78847407bf25","size":59195,"data":"","first_seen":"2026-02-05T00:52:25.223323Z","last_seen":"2026-02-17T00:38:46.376773Z","times_seen":1326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ab04f4504e4d8fd3e51f8a02cf2dce2","sha1":"b7d71e271f0b0682c163c8b44806e3b06fe26573","sha256":"0efabca57f63f3cc0672de70bb99a5a90e6384d65fb0478f93107539d4749dd6","sha512":"68362e7de75304fa020dacd501b7331221ca55da4b43c1dda046a23303c81bc6a4a1e600e3bfb36c00b8c5a0044cd7fdd984d3d55f55e479d13c24efe0e63f44","ssdeep":"","tlshash":"4cb0120d9539f87c121f101c9fab3ba5903d80e872602d18f2d495164f42487030d141","size":112,"data":"","first_seen":"2024-08-01T13:09:19Z","last_seen":"2026-08-10T08:00:01.128091Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-advanced-icon-box.min166d.js?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"0321502e2d081d9146963a2b9e4a7c7a","sha1":"ed6c6b9d7221c873cc2e811c5b0536e8034bd493","sha256":"d2e486df155e99841226cbf280e72537a0da0ba6dc39bea9fb4a51a146be6969","sha512":"0181ca11f81a5585b28d2fd9204e9506f2433203c79690a1fb071ec43e2096b3cf2f034fa2bae79d845b7269d2b8f09a402668c4cf395d02b5092d35581f20f3","ssdeep":"","tlshash":"1de05c24b6431055213770b3931f305d60b29c71f8163ad69150c5a01cf5f5e7659bb5","size":433,"data":"","first_seen":"2024-10-16T01:38:05.251175Z","last_seen":"2026-08-08T02:09:39.285415Z","times_seen":406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5587198008a38fb8f25b2aed8d49ce6e","sha1":"558a3f0e71a219973735a2fc9949d684740ee450","sha256":"2918a7eed9a56900bf373386b654102376b54eab3c599e3a05a6992cf31c30e0","sha512":"f6ca4333c423a1fbd589326f94a984f1b1978237f7315a036493178da687bbafc6ed67932db86166b138be14c9d94b97743ba51a0d7dc08aec80f338149f0d97","ssdeep":"","tlshash":"8a90045100553555531530513134c15d1575d075fc45d335750f0f004140405473cd01","size":43,"data":"","first_seen":"2023-03-07T12:10:46Z","last_seen":"2026-08-09T17:34:20.876327Z","times_seen":840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8a7cc8246af0c6abefb95ba6e644a127","sha1":"2488fdc1f52e0a7e7e36ea526c247b03135340e4","sha256":"bf3e4cb95ebc0b0826d903797f607e1f1fcf34b196c27d5e02703feffbb6b89d","sha512":"17e25b597ec288cf28573bf96abe36603549467b0706d68d383429998c2e69c564276866572c709329910e4584128fbe7e289a2e72fa93e81e26750cea6a8c9f","ssdeep":"","tlshash":"daa002fc2fbd5b1e27a62c34a60fa91c3271468372051c105259e07167ae5ab957184f","size":70,"data":"","first_seen":"2026-02-05T00:52:25.467054Z","last_seen":"2026-02-17T00:38:46.537874Z","times_seen":1252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"adfdc2b47abf88aa8165eea457e47754","sha1":"69e13f206cec034f8dbc22126e3596e546e7c7ff","sha256":"72ae1cb7f5c7f0f2fc32bfb560c3a3d3d6f815334d770b0d1349e8bd6744bee1","sha512":"60c4fc32d616c006c70c286daaac00c1dd9e87e19323987855649fe9dd47eaf08451a74f3322812cd2cd06e4e5b2fb86932bf571d062425eeffcd69cafd29293","ssdeep":"","tlshash":"90c022a0744200adc1818733202b22504a454a28e04825b25242daaa96322074cb6082","size":179,"data":"","first_seen":"2026-02-05T00:52:25.370425Z","last_seen":"2026-02-17T00:38:46.536079Z","times_seen":1250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9c511a30b8ed0c5c87f51239e4b43f20","sha1":"b2b30f6741b319ba17fd715b347190f2f5d02fd5","sha256":"eef07373a0546c5ec0ac7ef8971c4215b5e8d47f92237df1fc64912d98a88bfd","sha512":"352fd2a162c888ace9a33998bb0634eca8a849bea308e52e7471d5f023cb8ecc63adc6dbad9dd5faf3deaa53567021c53426a7063ca8ea6bb675b16e8471c1c3","ssdeep":"","tlshash":"367000a8ac8a280088233028000b00080222008000220008008000880c3080e08a282c","size":22,"data":"","first_seen":"2026-02-05T00:52:25.461354Z","last_seen":"2026-02-17T00:36:14.286002Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ecf134e468c3547b01119bdf7fd9e6e","sha1":"7ce1b8b41f345b7726867948815b6e24db603dfb","sha256":"e147e1ac2f7e6b750e15df7dbdfed39c742d16b2fc8e13f9f557269ecce728d3","sha512":"992a66c1ccc53159c06f17925ba16e78114c239b70701f24fda8d82332552b05e2ce9005a37dccaae79bba9b66e01231494a90bae6780e798c1f673a8bffe58b","ssdeep":"","tlshash":"2ec08056c44df1e13c35c451e4154c6633c55f157610ec86b48d74685cd098343555e9","size":169,"data":"","first_seen":"2025-06-30T01:25:27.853044Z","last_seen":"2026-05-20T00:39:12.919747Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fe077ad32f69b1bfa26e71bdab056ac","sha1":"ee3325f540fefea3a3e3bc56cae89c17ca8a1ac1","sha256":"3c3029c57d5fc2ffeb2d0fa84aca907d3087f3ac01c507fe0fe85fd2c9d49d9c","sha512":"d67d9edfb71aa2b3d3b83082b68c27115b21769a80cb263f913db02ac76acab29bfeb463806253bb208195cba4c31b075cc39c4e4e0941f13591e36551eef7c1","ssdeep":"","tlshash":"15a012c03824840d1052002481150c0407180a02fe0488500109e0840b2a09b16d584b","size":79,"data":"","first_seen":"2026-02-05T00:52:25.264976Z","last_seen":"2026-02-17T00:38:46.537272Z","times_seen":1253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","size":4,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-10T09:34:23.817756Z","times_seen":282717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"511e65f7df3700f1da50980ef4b5320e","sha1":"a1dd8931367f13c50d9c8e3ab0216b60169f9c27","sha256":"9d400c587dee13682d55ec9088a2225845e16cfec05a96c138f4891b0aa9f11e","sha512":"e24a157120bdfd71fdfddc1e1a592448348507481d566121371b0288aace193f7cabc286926a1a626e0474e6eaee77bb8d5c631a4332b73d83c35657b1b59ded","ssdeep":"","tlshash":"6f80000a2c0e3800a00220b0203b08cc20a330bc3b280c3820a820ca2e3228b2222c3c","size":34,"data":"","first_seen":"2026-02-05T00:52:25.367479Z","last_seen":"2026-02-17T00:38:46.598383Z","times_seen":1085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b95d379b504a50dc3848c1d7fb030fd9","sha1":"fd0c6a79983ef72b1ca2249b08c22bb3ecc3ae6e","sha256":"e2404ef1f1b7a59ee0871d071ed12a594aed30991d50265e894f4b19e657f028","sha512":"932f2fd3b07f062c65aaced86ea7973d2f7936787a0087b8d797c8934615bf7b81aafcc3aeb9a42857b45dd1e47ea3d0f3c367323eb455951085dcc13eedb172","ssdeep":"","tlshash":"81c02b8034c8e23b0932004f005a68ccc9103011c00d001380b191e0a0b16de5c2d588","size":130,"data":"","first_seen":"2024-10-12T22:57:38.675732Z","last_seen":"2026-02-24T20:52:52.763042Z","times_seen":81393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bf5ec2c75e2fe99790ddf2833818457b","sha1":"a74de6ea7606d24523b42b3938149dfd44747749","sha256":"e6801ff5574076406a3476e11b7f34dc431422d911309aac5a1ecd7c63f2662b","sha512":"ee9b8ffcd2a593900807bbce107c79da1d2d0b8286c65d30588cd3e3c45d196ffad175a4b4df247c98635978ffac55ecc34d2a338c8059dbf288cb280b082369","ssdeep":"","tlshash":"8cd0a7d877bf04f272f64cc14f0f811a03d607445d3535a81b6dd99008b6d054570f6d","size":239,"data":"","first_seen":"2026-02-05T00:52:25.256864Z","last_seen":"2026-02-17T00:36:14.245275Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"618441d41cce47dbcfd9bed6e5ff64e6","sha1":"91a07087a57580c557f3a426586f0c2f60ef2af4","sha256":"53a36375dcfbda8e572b120a670e0fc20d48121894dc37bd950851777c2f0b94","sha512":"26b2fe0761a06310b02f1c5071dc13234d132db2fe30446508c20fa2c7a7ffdc9ee306a5ca522c846570f06e6dd567a37d66e11a0cef1ffb420d7812e4755e7f","ssdeep":"","tlshash":"c7100000000000000000c0000300000000000000000000000000000000000000030000","size":2,"data":"","first_seen":"2023-03-14T11:21:28Z","last_seen":"2026-08-04T21:48:11.316514Z","times_seen":1916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-08-10T09:34:23.862167Z","times_seen":178400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-08-10T09:54:31.197984Z","times_seen":217976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-06-07T08:19:02.155739Z","times_seen":241207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2cb7bbc0d23f34c4255d924076e902f","sha1":"9ff31bb53dfc2bff233e882d367714fba682d7dc","sha256":"f078492902275dd3cfc4e676148aea2ee4f88b88e4886f6628d3bfdb6eb5df20","sha512":"72befae742cf64ed70a04d498ec493ab7efd76b3693b1f8debd364741655e46c0ba0557838485ec02978ae8598a09eb844782ab1c2a9f02241b3799fb3bdbc8e","ssdeep":"","tlshash":"c710000000c00000000000000000c000000000000000000000c0000000003000000000","size":2,"data":"","first_seen":"2023-03-08T20:21:52Z","last_seen":"2026-08-02T23:01:01.21278Z","times_seen":2011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a7066bcbde2b7446bb9394870055c745","sha1":"f74cc1af63a8847dfc8746b1038e0e62d1c4d08b","sha256":"1a6a96828d76bdf99b2cba10447f4d27eb92724976f662cc086effb4961d28b0","sha512":"520db5dc9b242269eea3f6392108788c9aa1f286ad1df1551bfdbe710fc015e56ef060759619c66d60aa2b2d8167649bd640e031c0647eb84022f4afa859610b","ssdeep":"","tlshash":"2c7000a8ac8a200000233028000b00080222008200220008000000808e30c0e0882828","size":22,"data":"","first_seen":"2026-02-05T00:52:25.449774Z","last_seen":"2026-02-17T00:38:46.471882Z","times_seen":1256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"26e8577507e4b1c8e5356d0a4a74e52c","sha1":"fcbec5220c0854689ee27f1e72108003080903ab","sha256":"e59dc0f4245f38ac26c1bf13da9832aef3fa1f3e5f9605d4b7983adf3d5411e1","sha512":"bbe385f6f00f42af4fffcc6e78e395a41a6b583cb1f9dc160104405a2e1ab62ac4a456b4e65d3f7bba0bb65e94770ac821266d1c5c144c1b9df815f5fd7730ad","ssdeep":"","tlshash":"dbc02b03d2080343e3870070101303bf8b1054cf0d00b51ccf407cb3d1d82610515f39","size":135,"data":"","first_seen":"2026-02-09T01:22:27.423344Z","last_seen":"2026-02-17T00:35:35.808229Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"961a6b5e15a47bdfc5b51f356792d93c","sha1":"290e697389bf3e218c2d575a1cd179f56750ede0","sha256":"c58803ab250778223a555f5d9ced6bca7a72d0d58fade4f53a4bccabbaceb68a","sha512":"aaa3f5807c68cfa83adb878a4f97c0a71e2ef7e1178ec36d479a69f64b014100e9f3832008bdfc8fc8458ef2e3e20549665016b6f87386f658d41f7c7f234f11","ssdeep":"","tlshash":"6df0d4ca9dfe036b98f125dd035612dd000726065c83309f390f7fa9473480354e9f01","size":486,"data":"","first_seen":"2026-02-05T04:31:48.490734Z","last_seen":"2026-02-17T00:36:14.22614Z","times_seen":594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f502ac14e14405587d798139e860b5f","sha1":"b267cfc679f39f2d95f9d3fa41bca0eafb931aa6","sha256":"39d2483e41bf71db160191d9a148b4bc26c0739e732727e37be0f18bdc8cabca","sha512":"f5bc3d4834c9c4ed165d49476795fb1170fdc577b58fe4b21dfc67cfb4f6eebf045a3812ef48a2f15758e790ce7e111cf9dbd9ffcc3438288c7340e6eeb7661f","ssdeep":"","tlshash":"b1c022ccbb3e600d9121f90031f84e46cb4125ac4407ede3a70128b4448180aca1f406","size":194,"data":"","first_seen":"2024-08-23T10:18:17Z","last_seen":"2026-08-10T09:34:23.801828Z","times_seen":176791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-08-10T09:34:23.857455Z","times_seen":186651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min87cc.js?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8cb760e23d83f47aa475b625bcbd5be","sha1":"12040791178730b55fff8b105c00020462f691d5","sha256":"b0694ca7e3b222abf2721f11150ec59c48161f6b62bd504e40015a51eebd05c9","sha512":"0e379d10b6207223724216791026f6369f3abd9362bda9ffa7a616a94770a915dbcadd2d2ed0fae0a1c0caa7c642e742cb3d9d93eb208a12b153eb84f9d7cb83","ssdeep":"96:BxsNt0jqf9fzq5xl8O7AEQQ1CejlejNVobVDjgqKokxwvT8i2:jsNCjw9fWdNQteKN4FjgvCgi2","tlshash":"22b141941a90fc6b35e135c8a11ba730662fc1337c1bb8c1fa21dce959e8ed187a9572","size":5407,"data":"","first_seen":"2025-04-01T21:21:15.978722Z","last_seen":"2026-08-09T21:30:42.621456Z","times_seen":3294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0e8d7dab7655b37b5319d430dd57a385","sha1":"e5051d5af33934fe9d75863124f7ec87ba1ac4d5","sha256":"7c882140fdec68ac8ab82ce7b8f1713fe19b9a6d2179c3b21516044ecf13ce76","sha512":"06445f13279a033af762aef575d2436f2ac496963bfcac08d67ce9d5c987c791e206c2c5b3a0f7ad163568c7558c440878571717c7690d6e73ddab3eea9fa4f4","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000000000000300000000000000000000","size":2,"data":"","first_seen":"2023-03-08T12:10:41Z","last_seen":"2026-08-02T21:59:04.481648Z","times_seen":3320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d891e0ad1b2676d9740a367fc2315c5c","sha1":"62a57c1e09a5171dce44d35148298afab0458bb7","sha256":"ac782343247a9f90e993a1f3c82f058c20f1ac89497d24c7d594a1af95be5a00","sha512":"eda86af8754510202236f7ebf1be343577843ff7ab904401858cc1b1f437d609500f23edd1da9acc3b81da5d344c6bb6d5487fd4048bb85d3b5636ce44f70ffa","ssdeep":"","tlshash":"c71000000000000300000000000000300000c000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-26T14:25:50Z","last_seen":"2026-07-29T17:49:53.471327Z","times_seen":2244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6b8bb713295beacfad07481e559f0826","sha1":"dc2dc5add7d83fda33698d9da003f09a69bb72c1","sha256":"5f9ec3974455548f727b7a54d43417c361f405d0382c0aeea5fcb50af34709f6","sha512":"8ada430059d065708979932b2b7e193a54ceacb2404a215e09f288830d249e69baaba48ed3d3fb5a0a82ab1fa4002965f0302c2b595026d784be00dbbb155d02","ssdeep":"","tlshash":"24e0c067337a952a51608de3c6df6088b86410e9d6910ccca2be8046113dcff4155503","size":349,"data":"","first_seen":"2026-02-05T00:52:25.375019Z","last_seen":"2026-02-17T00:38:46.55494Z","times_seen":1229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cf451638ff0f83100878def3c8421b6e","sha1":"e7b59416cfd534e577c6eee12e56565c53831859","sha256":"297bb99cc9341ffd5299156d66518ba9c022b70d85e8eb8ff7fc8cb25ada086c","sha512":"e3141b9f7e3bd9e42b63458a8bc4b829761b7d33b8a57d37965786c345f0d94d0c9693438aa3426cee9ac105972a5e308d2e9ed212cba89b65dbf3409c815aad","ssdeep":"","tlshash":"b690044d315d74d415417d37155f5555715f4455dc4d347cd1451d443c10137405374c","size":49,"data":"","first_seen":"2026-02-05T00:52:25.44451Z","last_seen":"2026-02-17T00:38:46.584403Z","times_seen":1245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"01ce78c12b6147e1bac01efea6d5bab8","sha1":"4a1a5bd9189c324b860939b7396263959d50796f","sha256":"c067ed47a717b84c2da596b408c22ba194d80bafd145ad37e81ae82b4601e9ff","sha512":"47544c79cca26792b710d59f5bda3b03916c446cf0ec6657a4705db5f15fa492a42b32ee4dedc2b97b447698fd64191e2a52dd43c1de9ee1057946deb8829fcb","ssdeep":"","tlshash":"3cd097c7bf08a082002ab1a972c6e03f0fe0a00cde55689640957de81f237e83c03c2b","size":262,"data":"","first_seen":"2026-02-05T04:31:48.459699Z","last_seen":"2026-02-17T00:24:35.693417Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d1aca1cad5baf018429aea971215f3a","sha1":"68f9e2105307c0189abaf2c025ba4e1413cd7d6a","sha256":"ab5fd6bfa4239bb10c2fbf4ee8ab5c238d6d78e06e657a7175882347b4d4d935","sha512":"707cfe77a03d6a37e96dd8d230804611be5936e71e7eb690778c45b0244ed856f3347e178f24873d9c6de86efda4e0cbd1096d45dc04215f6417aa8678b8cf18","ssdeep":"","tlshash":"e91132952c143d1707ae95edb05437a276f40108eb15eead06ed8a0c025cfcdbe929a2","size":1041,"data":"","first_seen":"2026-01-31T08:55:31.024957Z","last_seen":"2026-03-30T14:25:36.153368Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"91eb1b31adc96c13406c102a17c84a61","sha1":"66b7f09a793d0c475f93e91edb0c2a64fa74e8b4","sha256":"232057048bf72882260a8a47bf648894efe274a1be2cffd58e1e06f6d341cf78","sha512":"40c77a93537259f0d8984763138f45757b26d2ab88e0c952df1d0732ad31e827a7bba8f5709b672846d0f9336addd0b2895668ea474ad30f7780c242b388844f","ssdeep":"","tlshash":"54c02b03d2080343e3870070101303bf8b1054cf0d00b51cc7407cb3d1d82510515f39","size":133,"data":"","first_seen":"2026-02-05T00:52:25.346586Z","last_seen":"2026-02-17T00:38:46.521944Z","times_seen":1240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ba34ea40525a4379add785228e37fe86","sha1":"46e6e95a4a45afd802c3d25fcccb26c96dc858e9","sha256":"74fec0c33e96ab90ac88666979207a50a6ea7b9b3eea6ec0e8b916d64c0a0706","sha512":"b646df52dcc2d236c44c1ec366183a8d6008bb00a224e852d5369de253e7a9a79383222e4cea53357b6ceddf3e9befb9e1e7a6a8fc9a12a3edccb4fa4e96ba02","ssdeep":"","tlshash":"c7100000000000000030000000000000000000003000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-26T13:06:46Z","last_seen":"2026-05-17T05:20:12.755738Z","times_seen":3592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"94f5a64e61ba849a9213f6b6f62b151d","sha1":"92d40794f5555ba4dc94d57f6fc9c19105048fbd","sha256":"2f434ba53bd39e7933d7e12070c4a783c41b3f1c68d9f14008cb29f7c3871a1e","sha512":"3852a9b43ba48dd236f9e626cd896034626db8ea5f9de98887011c0b2f5b5d3083cf474d59c340a7d7721e307956b30c73dce76d2ece2ab222a388b66502b429","ssdeep":"","tlshash":"c710000003003000003003000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-04-20T19:34:42Z","last_seen":"2026-03-17T05:46:24.260521Z","times_seen":6434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"984dcf30f68bc5fbdb4773448ca11e46","sha1":"82b9f4c6742ddf1130eaa83e24e186d47638bfc7","sha256":"4be3e167f75a33bf5f6f1b7faed456c33c9597de88d9ffa5b5565f1d260f9ab3","sha512":"ba0a59a113bfcf862602450312fa3d1feb87a002c1f5607bceee06b7421453eaca821d3d3787003940f36c1c9de866477f6f9e85c55ed17b855c6673232a0771","ssdeep":"","tlshash":"c7100000000000000000000000000000c000000000000000000000000000c000000003","size":2,"data":"","first_seen":"2023-03-14T13:52:16Z","last_seen":"2026-08-05T00:33:09.040258Z","times_seen":1801,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0e8d7dab7655b37b5319d430dd57a385","sha1":"e5051d5af33934fe9d75863124f7ec87ba1ac4d5","sha256":"7c882140fdec68ac8ab82ce7b8f1713fe19b9a6d2179c3b21516044ecf13ce76","sha512":"06445f13279a033af762aef575d2436f2ac496963bfcac08d67ce9d5c987c791e206c2c5b3a0f7ad163568c7558c440878571717c7690d6e73ddab3eea9fa4f4","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000000000000300000000000000000000","size":2,"data":"","first_seen":"2023-03-08T12:10:41Z","last_seen":"2026-08-02T21:59:04.481648Z","times_seen":3320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","size":23033,"data":"","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-08-09T02:43:09.725737Z","times_seen":2971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/s/embeds/5f388a60/www-embed-player-es6.vflset/www-embed-player-es6.js","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd6dbfb8231cee60d43dde2b8c7431df","sha1":"99fe467b0cd5a4aa6737ee22f362105470e5f472","sha256":"54520e29448feb53676739f82097969bacd1608553787673fd03d559c84fd9f3","sha512":"3b9108ee3abd2a809f0942f77790f74325196bf00dac156d20f7d813d138dbd883ea0402ccf86c629dc8837a964b654b1d015815dfc72c6a821a8e00844cb65b","ssdeep":"6144:rF5Q9soeI8m3E/Es2nYDYqnQ0Z2caNeE3VxXFdbwrK3MKzWW8cD5PYh7fnyiJAbP:rF5Q9soeI8m3E/EXYDYqnQI2crE3VxX/","tlshash":"c1745bc977a2706742a294f4903f1502b538a896f80cc8bcb59cdcda6d2595a43bbf3d","size":343550,"data":"","first_seen":"2026-02-13T07:08:20.023724Z","last_seen":"2026-02-17T18:07:18.47751Z","times_seen":3644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b853d4a1886ae866822739ff2c2b84ad","sha1":"d44bb3c94d8c401d8069dc42536eb5700edd1b2d","sha256":"6e8682a491a12465a1bd0c238a0a12c6d9260008178793be43b551b13678e0ae","sha512":"8fff046a20792b31afc5a9782888936e6c202408575273651f2ed627757ba5e1fc5879e310cf306d5c017a15e8fee46dec634abcec5574a7159125d6636dae50","ssdeep":"","tlshash":"d2a011c03828880e20a200a0822a0c0803282a02fe008820820ee0800b2a0ab0aea88b","size":79,"data":"","first_seen":"2026-02-05T00:52:25.396263Z","last_seen":"2026-02-17T00:38:46.558294Z","times_seen":1255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-10T09:34:23.794274Z","times_seen":248555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"359e042a56d1927ba40a1649056f8005","sha1":"f6d09be16b13656a29944ddbdfaf7233950d7d67","sha256":"78e0dd265e8a654016aabb1564cc8747de9db63cb083181151b5658f866a5b72","sha512":"d8669d1452f3e830966ea9f03a5f75b9061c1a1853aad9178b886acac0dfd838c810b990fb5a77c6f7014e4fed4f76cd91a52426f1881833da114c027a04129f","ssdeep":"","tlshash":"597000082c08208880aa3032a30ba00c00aa00e008002808088000888f3202a0803c08","size":25,"data":"","first_seen":"2026-02-05T00:52:25.436689Z","last_seen":"2026-02-17T00:38:46.552346Z","times_seen":1319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8416c36db5c94836a7c82c0c90b86350","sha1":"12af14e56d502c672c1cd702833a3195ba4afe29","sha256":"02865293eebe1d3b2cce0655bdcce3557fa678264947269436f356cf3e11afeb","sha512":"5f9282bab9c56f90ee01be349bd89be4e7d55edcd3861424938bcfafcaa0d5e9cb26c3421474a761032aed05e01c0c97e2da7f941f85113d802f69af67d18605","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000003c00000000000000000300000","size":2,"data":"","first_seen":"2023-03-08T14:33:43Z","last_seen":"2026-06-25T11:21:42.765124Z","times_seen":1957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fbade9e36a3f36d3d676c1b808451dd7","sha1":"395df8f7c51f007019cb30201c49e884b46b92fa","sha256":"594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06","sha512":"5ae625665f3e0bd0a065ed07a41989e4025b79d13930a2a8c57d6b4325226707d956a082d1e91b4d96a793562df98fd03c9dcf743c9c7b4e3055d4f9f09ba015","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000300000000300000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-10T06:13:30.10296Z","times_seen":61434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cf80dd2e6836c109fea30c57444667b8","sha1":"af610dbfa0ed4ed3a4aa1a3e41e7deec2701a497","sha256":"373ebb8d5c8678a1bbd0ce66921b197985b51d3e9cd90153f06aa656628bc903","sha512":"3cfac6bd4398a177f707181aad6d1fafc0f225d4d601b86fc7b29f89bd6ce14fb258c751bd8f6c09399b85646b60abb4bf251430f6103a4b2950d29ab42ab9ce","ssdeep":"","tlshash":"73d022c13a5fb183e1e62d8a3347d874092b060250488e0da439a8c1927b9b61da8c2a","size":222,"data":"","first_seen":"2026-02-05T00:52:25.309848Z","last_seen":"2026-02-17T00:38:46.596557Z","times_seen":1260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dfcc9dca8ed7aa668e1dcc2996455191","sha1":"fe171124686f4346fdd1907674f1f2db4055bad3","sha256":"b5252c3a46889dfab36f8b107b182bce34c7d892ad371e2c62980177440843eb","sha512":"444b32e40fffb977e30b015d121d63c839bc56a4a698ba93ac84efa50925a77559fdf6d0b17a5bcf1b8d2919d2c22f92f93ae5b780233d99fa57c9dfc9a0691e","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-10T17:04:31Z","last_seen":"2026-07-22T04:56:43.253522Z","times_seen":2357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d671650b8e0a2df06ea991695a6c00cd","sha1":"4608308fd650a102a5a554d4081eb5075e7e16c3","sha256":"411c2a3e1a45a25e5b724b3bcc711a84cb9d9968f46963fab53f13812ad6a296","sha512":"2b3e487ea8448096e8e91105dcfac3cc9e753a1d5fea8693fc188badd3e3da7feb482646e3d8e93b1c4c1194aaf8f7dd43d572c4db6e1aa18920925fb89c1d53","ssdeep":"","tlshash":"36b02b2d025c203c407819792db34aececf80369471891015201b0024338f4100ddc40","size":127,"data":"","first_seen":"2026-02-05T00:52:25.409658Z","last_seen":"2026-02-17T00:38:46.500029Z","times_seen":1313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/uicore-global1d25.js?ver=9337","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b0a969277083f089f4e5c83673a3c17","sha1":"009515d45a1c85957b1271b2fa8848d75695dff0","sha256":"c7beee5e8c95bb19ece47185d2bb0ad36e67d421568bfc8de87ced6fe9a52243","sha512":"a0dfd6f06d165ec9486872459c2d860015604290af588011b3c2976d7a1b03ae126920c19edc18c5bdbac8b03342cacc2e6e6c3dcceb6469189a7bfaa2e1f65f","ssdeep":"384:sFDoEHU7g80J1W/Cd01Rpxqshsk7b44M/:ADoEH9PJk/Cd01Rpkshsk704M/","tlshash":"cf626348e15120bd17f711b9b42fae8f2732392d9e1c904e3939cc990f26b9913b7999","size":15926,"data":"","first_seen":"2025-07-01T09:05:17.541238Z","last_seen":"2026-06-22T18:27:43.976912Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0a99815527741bc29666cdd6aa0f53e6","sha1":"8a87ea6c062854191031338116942c6a4fb8526e","sha256":"75031e70675254205a60a4bee734d94f8c47d1a3e5a63dec15697e6f5091472e","sha512":"3fcb477530093ad5d00331aaf0ca5c7015771189e7f4d019ef55531526b2d0dfab38ab60645527e3b7c1257bc0e24789efeecc4d81d8edc29d59c009b2551120","ssdeep":"","tlshash":"c2a022e2ef0be02c2220008002ea880c23322303a23b82280003f220a3ff0c2003cc0c","size":75,"data":"","first_seen":"2026-02-05T00:52:25.476288Z","last_seen":"2026-02-17T00:38:46.525569Z","times_seen":1247,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2993be451b81de522b454883636b4cfa","sha1":"652bf9f06729a74f294a54cb070ecbcc7c29434c","sha256":"a6514b4153217dca6d240ffd05ba920ede19cbb617f8e48c57c6b49c00ec76c6","sha512":"72c383ec80b8b498944892c8f78fd77aeaea96efe9982bfbdb6a005dd81e16b301fe06d33c5b152fa8767db117e3551a8fb58d391e4c8e46b8b3201329ebbb71","ssdeep":"","tlshash":"1dc0c0d0744b55dcc301e7b3217703a14c564d04848c8971c147fb4df86060b1cf3b81","size":181,"data":"","first_seen":"2026-02-05T04:31:48.47233Z","last_seen":"2026-02-17T00:38:46.550078Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2cb7bbc0d23f34c4255d924076e902f","sha1":"9ff31bb53dfc2bff233e882d367714fba682d7dc","sha256":"f078492902275dd3cfc4e676148aea2ee4f88b88e4886f6628d3bfdb6eb5df20","sha512":"72befae742cf64ed70a04d498ec493ab7efd76b3693b1f8debd364741655e46c0ba0557838485ec02978ae8598a09eb844782ab1c2a9f02241b3799fb3bdbc8e","ssdeep":"","tlshash":"c710000000c00000000000000000c000000000000000000000c0000000003000000000","size":2,"data":"","first_seen":"2023-03-08T20:21:52Z","last_seen":"2026-08-02T23:01:01.21278Z","times_seen":2011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-10T09:34:23.794274Z","times_seen":248555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"475ee69e5b2189e08fa81a9df135d08f","sha1":"f676741c5add835894b493de760ad4999f42df10","sha256":"ecd06dc8b010a8ce804dde56a65af07f318b3775642496da8c0362027a94e26b","sha512":"645a175f4d4fdcae27a3f0b1189f5e9d94fbe001fa53d702b188bcf3cd26b46c5a1ecd4fc01cff878c54d5f139ed47ab5cbd1bb9e09526631394c6b7369da884","ssdeep":"","tlshash":"786163137911197707878b8bb0137f63b4ec0126929cb9b9f4fd8d5910b6e583306e4b","size":3386,"data":"","first_seen":"2026-01-31T08:55:31.036912Z","last_seen":"2026-03-30T14:25:36.187355Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-10T09:34:23.754948Z","times_seen":260125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61e9c06ea9a85a5088a499df6458d276","sha1":"e2415cb7f63df0c9de23362326ad3c37a9adfc96","sha256":"fcb5f40df9be6bae66c1d77a6c15968866a9e6cbd7314ca432b019d17392f6f4","sha512":"61037724a2fb00a12fa8a53ada233f54ff7fc6ee02048e579b83a127ce79fc03906c35b5307beb18a3cf5021fe031ae6587448d4d60a082d73252fe2e2f4ae7f","ssdeep":"","tlshash":"c700000000000000c00000300000000000c00000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-08T11:57:38.869419Z","times_seen":79797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dfcc9dca8ed7aa668e1dcc2996455191","sha1":"fe171124686f4346fdd1907674f1f2db4055bad3","sha256":"b5252c3a46889dfab36f8b107b182bce34c7d892ad371e2c62980177440843eb","sha512":"444b32e40fffb977e30b015d121d63c839bc56a4a698ba93ac84efa50925a77559fdf6d0b17a5bcf1b8d2919d2c22f92f93ae5b780233d99fa57c9dfc9a0691e","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-10T17:04:31Z","last_seen":"2026-07-22T04:56:43.253522Z","times_seen":2357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/js/common/helper.min166d.js?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b4538f7e51ba98d16f9532a2e015460","sha1":"b08345dcb4ce0b33c1616bb957c17a3b775fe084","sha256":"b84be3801c9cb4ce11483453bd2de43efe261812aeed9e28fdf37d9f86946a30","sha512":"ed168933f8c0352a80d59db1be650b7460b41199c79011f1d93a8b80ae1017b774b0eb8b56f5561f275e32aa648ed3c94542f99bf1f240d7ba1ad10c95ceedf0","ssdeep":"","tlshash":"b281f201a95f34e95ff71056d57ae328bcaa2acaf1804ec0d6f8e0301b595ca2121f2f","size":3907,"data":"","first_seen":"2024-11-07T17:48:36.316881Z","last_seen":"2026-08-10T01:35:43.141344Z","times_seen":847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"34177b0374165f089e37401cbd15664f","sha1":"efb99bcd657604ed5888480f20557abaea6afd06","sha256":"e756bfbb1fbfdb860acfa7faf51494f7e0429d2b8414e4ea3c6d850d283ec77e","sha512":"9ce748213c5d5286d58ef3daed24f0a662d8e308f55d5a2ed2150f580547180119f185e552b4d1222ba31ca4cc1c5453cda22e24e03c67a69fed5f0f454e0ad6","ssdeep":"","tlshash":"c710000000000000000000000000000000c00000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-04-28T09:35:30Z","last_seen":"2026-08-01T06:54:17.672851Z","times_seen":1537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d794809ff3e0688f26db3304c8977d8","sha1":"08ead72156a139b3487f5552e18146ec0af92542","sha256":"cc8272d8a57bbd0dc784d0b0b4ed77c15e35a9b4374f4060a32ec421cd508460","sha512":"fffc54debcec0ed42d1787afb2374fd9dd7101b96228ab09a71547dac38289cf412d1c1ef8024d7ccecbcdd1fa9594c2c1336f1ae8183e86ebed7a4b3a00aac0","ssdeep":"","tlshash":"c6f0dd3fb3c8531502b546c25debb9c644fa82166eb2984d4e7093904a741cf246d812","size":628,"data":"","first_seen":"2026-02-05T04:31:48.504554Z","last_seen":"2026-02-17T00:16:19.35574Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec7e53845feb375870343182efd0b929","sha1":"63e71d0c5bcadc37a725d971054eb55e017f6989","sha256":"a2253e1fad60aa1ccf31416ca8cde6ffaa5af2510733c7186adc04a503346c5b","sha512":"339f50fe30462dd6204552b2d3d3fe5cbaeea2cadcfbde096f16b40f1d985a5a68ebb227dbbb9f37c9451a36376ed392b7fb50c6e661963124146bac7e03284a","ssdeep":"","tlshash":"cf50003cc00000c0000f03000300000cc0000c00c0c00300c3cc000c3c0cc00c000000","size":11,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-08-10T09:34:23.880383Z","times_seen":175147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"53e59fface936ea788f7cf51e7b25531","sha1":"57df5a2b154df96a35ad4613c100173e2d0b225c","sha256":"8f26d6fe2a3dafd828081cc3ea3a5d610083c4563fb4f4fe51b2533b1ce44eb0","sha512":"f19457f07ea5da74843f9538d50dd041c6e549933b36df1e6457a3572147ff846f15d91826047278fa0a302d4a1f758df0e78835c7484e4557ed3bfa3bba6fdb","ssdeep":"","tlshash":"c710000000000c000000000000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-14T03:02:40Z","last_seen":"2026-08-02T23:24:55.312254Z","times_seen":3431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5ce0979a9c0f55d0683cdf590ad0f8c5","sha1":"d89bd228618f9cbfa3789f07f9cbeef71094c70b","sha256":"c7ad12a3699139609d6f50f1baa28bad2163c422e054d5e736a6ee9507949597","sha512":"1ff481fcce4043148efd01e738b0daece1c71f20b5c838f53b97661977625dccfc7c6f017886981dc39720a6db20bc360833ac8d9958f3097e13a4be72518e78","ssdeep":"","tlshash":"4e7000a8ac8a200020233228000b00080222008000020008000220800c30c0e08a2828","size":22,"data":"","first_seen":"2026-02-15T08:01:06.210322Z","last_seen":"2026-02-17T00:36:14.11638Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e868f712d82638cace8236142c74190e","sha1":"b1806ca4f2342c796c23f60c75b2df25954e7a89","sha256":"2fa63fce3581042717ec0f4d67b1eb6e3ef2b1fbee4fe529a7c4220360a0fe4a","sha512":"c2a3d31513537bf47ed0d406c048351b555b8843e36e20aa07e1c6f674c3659b303262803c8380e9aec0cc508b5424a717685ecccbb47e7132062f19ad52e193","ssdeep":"","tlshash":"8aa022c00c0ac80eb2c32023c00f200e23a2000832800c288280fc022f3a0ca00a2c0f","size":77,"data":"","first_seen":"2026-02-05T04:31:48.453228Z","last_seen":"2026-02-17T00:35:35.746199Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/uicore-animate/assets/js/splitd63f.js?ver=2.1.5","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2343161c6a1aec0560c94428009da155","sha1":"a4a54522ca5a76478a46e968e95fd7adfba5d7b2","sha256":"b1b109401d001890efb10743c408f2a26df09d711036e5bf6557f180721eb1a4","sha512":"0c539c3f0376f57b15b0c6dcb1e927b6d72a805b98d01e25c2746a34612dd04f994e4c2a6f7975d734c40aa7ba3b4b6383f887049f3f7118dfd8c91ab794d5e7","ssdeep":"192:c5zNgwEE+GW2j+M7r4N7uoSqphFhlXNe9:6iwEEbWY+M7r4NSine9","tlshash":"c822a3987162b0f217ab7173006f251eb3742a6c9868c060a238f4f53db5c69637bf79","size":10377,"data":"","first_seen":"2025-06-05T03:41:41.804349Z","last_seen":"2026-06-22T18:27:43.978338Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd008e6fbe6c66bcbf50ceb30fb84794","sha1":"8022adb6d229e8ea556caa632518625ea45a45e4","sha256":"bbcea5456da9e478d64e8e9df4badc9d6296d46251a504b2633e6f7898ba5a16","sha512":"f49e89052fbfacaf7cf9a5db88b64e3855146ce10e89fe9f1390bea77dc2cbe9b53f56820f96a2f14493eb3339ca42af38e2d1a6fe5e99cd241dc79ca6031ea3","ssdeep":"","tlshash":"7cf0780c0704689ce80a9c9cc699ab608f9c9237ba423025f82f460dbae3fd74831457","size":633,"data":"","first_seen":"2026-02-12T18:48:28.247408Z","last_seen":"2026-02-24T21:37:52.819504Z","times_seen":5217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"adf72a0db2cbd36462d3aa203eda902f","sha1":"01af3aa2c34427a230d655bed1ba5ad85fe91c17","sha256":"b84b1b88dab63ec755c0c9f31c02aaef21b7e531bbb4cda5a62611c59e0dc8e3","sha512":"3506e08c373fff6d1b4ef54990dbbe31ce84c57be9f46fef4a4cff8cf315fb67889c536b0bca66fcdbe83f4179da5abf749bcbe768ebc1376f7b430b27bdd4ac","ssdeep":"","tlshash":"c710000000000000000000000000c000000000000000000000c000000c00000c000000","size":2,"data":"","first_seen":"2023-03-10T18:34:50Z","last_seen":"2026-02-17T00:38:46.477026Z","times_seen":1818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"246c0359f2771e51121944e266d50be2","sha1":"70d717aad02c796d55b8741b605c952b60be5a60","sha256":"86b5de418abf28f51f4a02a77e7b11de83e14112baca8b5b33fa0244be90d6a6","sha512":"7574e37c204fc7d5d6707992529aa976a26f7d87a33c87748c31abcbdbedd59d282f5e5ce7830e3c7fae2616a0a05265d5509babd4d30129beb8ac4ab273d7ce","ssdeep":"","tlshash":"dfc08cc43b89f869b716b272c01f020e67eb6264f99009a2912c7ea43fb3c074547d4a","size":166,"data":"","first_seen":"2026-02-05T00:52:25.430836Z","last_seen":"2026-02-17T00:38:46.579268Z","times_seen":1266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f277fd9b5c7f13934b64e5ea4d0eafb8","sha1":"8957b57516161f63528f9e4aba1e3297e742a881","sha256":"53d5212c5ddd1dc6e1c7d12c4f73fa3e4778f34ed5722c1d48b43f55562fcf13","sha512":"4b369c0f1686c7d9909c3d5a2b61db64d2cb56b5863310eebdd8265af94e2a788f28f6c6ee03e4759f17cc6c5f6073519e03122603fcd2c7184a0f78b1e2606b","ssdeep":"","tlshash":"ffa022e2ee0be02c2230008002ea880c23320303a23aa2280003f200a3ff2c3003cc0c","size":76,"data":"","first_seen":"2026-02-09T01:22:27.492247Z","last_seen":"2026-02-17T00:34:38.401244Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-08-10T09:34:23.808718Z","times_seen":169498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-10T05:01:35.80685Z","times_seen":337643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7a7e060fbac468049775df37d8dfa511","sha1":"535872fe5ea734014bc11812c65ea1ba107e98fb","sha256":"d6ba6fe2fc118865c966f4f6df42cdec2139cf709a411e2e273f921ddedad556","sha512":"6404764da83f40e822e86dc7d2533434de2058e1127cbd175dce30d9039518ac3f3cf813321f22d487d8a6de20164744a074a840f244aed798fdc12ccaffa5eb","ssdeep":"","tlshash":"c710000000030000000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-13T10:55:38Z","last_seen":"2026-06-23T09:46:42.510877Z","times_seen":1831,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-08-10T09:34:23.819579Z","times_seen":269165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0a8a9c56ee1f39a80525773b6ce83ae5","sha1":"55514b19e98d3fd9d5d3a256d17d2d2f33c1929d","sha256":"50d4b7203035cf20d9d5ced2124d3d3b6586431ff0f982875edebd601ef35b8c","sha512":"06c6946f7561fa296d9b661e08a6a6b1a1fdd73df384c0ac72290f97f1cf829558c45efa3ac2213379d704602822fb79fc5ce197a3782854a9d9d3cfb39c99a8","ssdeep":"","tlshash":"80e0dfea5824406ed51f4362a4f362eb6ad2f04b57257b653db364a80bb105c7086683","size":353,"data":"","first_seen":"2026-02-05T00:52:25.260297Z","last_seen":"2026-02-17T00:36:14.266045Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e21337ec28681920ff880b5036102e62","sha1":"15d8fb27db6e12b950859b9de45c9a8cdc7027e6","sha256":"a29cdfe14671da9bb952411df892f633fd632257dc52873ddeea1b8fffcc07bd","sha512":"d493a2fcb58b62011cf6c2a3ddd80e054613e2e1a0e93422cabb098901015c0e3df775002ab5690e230e847d89df747dad963f1c61451de103605bb2cdeee57b","ssdeep":"","tlshash":"dde0c2867e40abc631dd3ce9e872330522f21eed9ac593add24159062d509839a73c31","size":300,"data":"","first_seen":"2026-02-05T00:52:25.3625Z","last_seen":"2026-02-17T00:38:46.474086Z","times_seen":1243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1481bae1644fef7cb5eab92d82f69e5b","sha1":"66bc45b231129d5aa4b40ac0499c28dac5fb3906","sha256":"50f211af6df8b47178b3f13753e2656d5c71189cf9282e4af01193203abf49d6","sha512":"6f8ee8fd0e80416d07364a4f06a9880f997efcf3a2e0b64595eb5832ab866184cb22b92f105990dc9205b15886ba135d86f9593944c8de6874820b34bc8a5232","ssdeep":"","tlshash":"95e0269138004f9a14cd7ee9e4a2730025b21aac99c58baee20290071ca0a435eb3c31","size":320,"data":"","first_seen":"2026-02-05T00:52:25.276431Z","last_seen":"2026-02-17T00:38:46.446965Z","times_seen":1228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-10T09:34:23.757317Z","times_seen":256791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e9413e31ccbc5fae77467bc4e7884e2a","sha1":"581376bf970a7d1d329bcce25d6d2449dc531d9c","sha256":"d01a4c32b89e01a67241846f35985865ec55e022f79f2e8e3f9397d50af4939b","sha512":"b54b4bdab281a44a0e2a45e7f84757785663ad5096844b27f06af1bacbdfe1b86eb13fc8f4f0a46db2136f3d61b435e22d41681f83d67f99029b46d617e446db","ssdeep":"","tlshash":"b3b012dc3c08cc2720d61304482a0854226b004c98209451c90df30087af4c717528ef","size":96,"data":"","first_seen":"2026-02-05T00:52:25.339672Z","last_seen":"2026-02-17T00:38:46.595971Z","times_seen":1241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66a4d9708fdb6dd5597f3bbc7d624","sha1":"e10a66fa8a836f6f948941262b70e1fc928a446e","sha256":"3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89","sha512":"06c25bc4dba52367cbe19252c1a013e1714a198141d139939944422266aaaed60ea3953c5d0f890a7f9ce7887c5f2a4cbb47173d06f829d50ac33f6f353c015d","ssdeep":"","tlshash":"ebd023cb729c1114574337141eef0448bc64b4d70dbc941d8649581058011ede03aecf","size":195,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-08-10T09:34:23.842346Z","times_seen":209750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fc56270e7a70fa81a5935b72eacbe29","sha1":"6dcd4ce23d88e2ee9568ba546c007c63d9131c1b","sha256":"559aead08264d5795d3909718cdd05abd49572e84fe55590eef31a88a08fdffd","sha512":"21b4f4bd9e64ed355c3eb676a28ebedaf6d8f17bdc365995b319097153044080516bd083bfcce66121a3072646994c8430cc382b8dc543e84880183bf856cff5","ssdeep":"","tlshash":"c700000030000c00c0000030000000000000c000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:06Z","last_seen":"2026-08-07T14:41:35.831545Z","times_seen":74571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"8531a10ac9bfd11ba77f2429f3254348","sha1":"06772efddc6b52a15425f51929786b8c72e5e813","sha256":"42b75b438a0d43a15d67bf65438e2041956756fb2cfb60b30b47626dc0ad658e","sha512":"ba9e616947dca1aa71a9417f8fdd2b38bfbb4346dc73af96ba6be94d7c219f846793ea52959b5ea12da3f61481003e16dea498f6b30af6a8c647007b348d1f03","ssdeep":"","tlshash":"a7f0e5149c7794a0436f216b317a8a836a7069272005d17e7dadce9c1f41ba48b66e35","size":538,"data":"","first_seen":"2025-09-03T18:00:03.22601Z","last_seen":"2026-03-30T14:25:36.193777Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-advanced-counter.min166d.js?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"277e45333e2269befa77dbca154c119e","sha1":"cc3068f8a96132fb6ab5ebec2c84ffecd49cad6c","sha256":"fc26adc34dbe06d708f85c102bc8f8502050090944de09e390deca51dcc110d0","sha512":"85e7527bd61e49930a5cfe759a18e4e33a164da4f62d1cc6dba312e7a1c92e921594497b37fe5c439c476578bdc66c4bf957e9205621214ff2c769d9a664e441","ssdeep":"","tlshash":"c70120b0b9439106287fb037b24f023921b61c79a22a5cc8d2d4046141fbf7a7a69fb2","size":760,"data":"","first_seen":"2025-03-18T04:53:51.863471Z","last_seen":"2026-08-04T02:53:18.599922Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-section-sticky.min166d.js?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"051daafb7e75813adf2af6202c05f218","sha1":"dfc51b6561c480006f325aca1d29e2399ac38cfc","sha256":"a9a3cf1ce36d0916885ea96a8fc7bf746eedfb022ae2547d669d6c20e68e64d2","sha512":"48a2b5dbced3a68c55073b99214bcdf27a477d9ae58ce7cc4c12c27eb30090288f37a2ae396f21d9437c8b9a1729b118ebc56ff5e71bf53fad437d8717b2a62a","ssdeep":"","tlshash":"0ae06824b50374ea213bb437f237377c60b3c874f412101145a190822df9d29761a14d","size":373,"data":"","first_seen":"2023-03-07T15:53:25Z","last_seen":"2026-08-10T01:35:43.274077Z","times_seen":323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/s/player/1798f86c/player_es6.vflset/en_US/embed.js","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a117fba62d0b5a855ff8e3725c1776c","sha1":"b07b88cbfce021323e18dcaa781fc1b0963c295d","sha256":"a193d936536b17dabeb512c7047c1d3079b90a6ecc2a8784ed48db5da5f643e1","sha512":"815e0229e5bf5deb4fe27f4ed5e95759e0d89ac9423a8fb67b5fc4520bf17e42c7287b01820867fb898a760c1b27d9ea5e9bcc1ff7820580d142048be3cbf78c","ssdeep":"768:o+1J0qQEUH0MKCrZMeQLrAt2DTfQsk5USiRKGLd0H:FCU8","tlshash":"e1e2e80a37d2d4258161e1ea6d0b1100b766a4dd3461e3bc7b3edeeaad31d09b07af31","size":31785,"data":"","first_seen":"2026-02-11T07:46:22.854822Z","last_seen":"2026-02-18T17:04:14.668413Z","times_seen":4763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b21f4d37cc9ff8a97d9f309cdf90fd24","sha1":"b09b5da3c75afff1087820fd1ac4fe12b8e854a2","sha256":"92f767c625f27ce0491eb4936184d1046dfc35ef1dbded11cc547a1bbfe33721","sha512":"4fe1a120f69871ae715db84a1118b2b2a776b87ba175974b184257fd07d9d7e5d6b400bf226881941395a4daa88483804060511e35f1be5324af9cd61c8188a3","ssdeep":"","tlshash":"dcc0126aa0c003951d8235eb21870b4708d2880d0d55711b5947d3915d7a257807ad12","size":183,"data":"","first_seen":"2026-02-15T08:01:06.201005Z","last_seen":"2026-02-17T00:35:35.758425Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c62bc4fd3c4e105cb3fb62fb748d59c","sha1":"f6e2d1e74e35ec4c4740ba02e890b98bda11417f","sha256":"9f4a6a370cd350425d8ac08047e7646116468672e99765ca198e6d463ee5286d","sha512":"5cb125ce0b7fdde81c6df58f6e27943a130f0d9e2a366d94ea8ed926da635dfe2b2c5778a14ed99bb35c7b2a48dcd12090cbac18370611d1c0438e1c2621efb4","ssdeep":"","tlshash":"6cd0129b738060e3d797fea709580020c1ef0b8402d2753d42d5d51070fe9ce83461e3","size":203,"data":"","first_seen":"2023-06-16T07:31:00Z","last_seen":"2026-08-10T09:34:23.80947Z","times_seen":192978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b46ebaf91393d6eef7ca6f0d1cf98486","sha1":"c738df4f0661ec9978ffa1515a02e5fe37a8230b","sha256":"f99d87451d57ca88ec77cc2debedb4f612241976bda0903956c7d3b8f2b3d7ae","sha512":"bf21b50f1f21a1051e2d5c7e6380b94c6f6940f02b2cd643c4e0d69ccd691b93974442501b6ebca4594e95d32851b82138314f1d6f9fe1dc8cc7cc8c7ae5605e","ssdeep":"768:s6STJgzafGkQr/0gsN4qCBJBS1EpmOBviidS+RIJ6/eWR:lzaOV01uqCBJBV0Ogik+6a","tlshash":"b1f2e12dda2cd5f68d196e13d92f9ebe25bc02b18065d2e3e1c68441e0ed384da4ecdd","size":35790,"data":"","first_seen":"2026-02-16T13:44:05.262917Z","last_seen":"2026-02-16T13:44:05.262917Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"591dfdf90fbab2991fca115396bf5426","sha1":"a7765e19c5cdadf2374dca50260db353e6c3030a","sha256":"1af4422c14888360a0393763db76bf794d07e53929988726f33479d0533a53cd","sha512":"5ed8f281d8cfdd8e3addede5ce088009bc43a5ae385c23f53ff988348e42974e62931cfbb5533faf68995918205d9dbc6c0cfcdf081baadd276a3c0cd231dc1f","ssdeep":"","tlshash":"91a02223c02ac8030038002000833002e20803208820a00c030b020830e800bfec888b","size":62,"data":"","first_seen":"2024-01-09T00:00:57Z","last_seen":"2026-08-08T13:26:03.190728Z","times_seen":2174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"266cf0ce6d570d05fbc3453ee155e1e3","sha1":"df468c86b7b4cada9799b969e1d0000f3266bb84","sha256":"f397156f0f9d2081c0769dac2e770843d69736b72ad8696c6a93e4defe5ce92d","sha512":"3e08326650f1c3e767e22e328caf134084b4323ecca366ae70e9e06608e19c151e627aaf20a680be5cc2dc68a493aebfe37fbdab36cba7275995c7fb8dd11702","ssdeep":"","tlshash":"9d70000a2c0c208880aa3832830b800c88a202c0080008080a820080acb2a0a0823808","size":25,"data":"","first_seen":"2026-02-05T00:52:25.386116Z","last_seen":"2026-02-17T00:38:46.55444Z","times_seen":1322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"663183c80bc8d0a1c03dfed5c62d1268","sha1":"886890e6d14d6e7af9367fe127ead0776552d9b8","sha256":"3689a495f9e6a7464401937b1d349ba93edc4de39fe4f17cd3f58818891804dd","sha512":"0ccb9205abae09259f0bd624a90c02f6ae4deb0d3393ea9fbb2ebc93195d125883c7af900fdde86eb96dd689a91ee8787c4519f25375330be054f4fcb68082e1","ssdeep":"","tlshash":"72a022c02c0a2a0c33bb20a0803e003003a280003a3228200b02e28023a20fb0322cfa","size":71,"data":"","first_seen":"2026-02-05T00:52:25.389833Z","last_seen":"2026-02-17T00:38:46.451875Z","times_seen":1319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7893fd2656b8b96d15ec69d8512643a0","sha1":"981cf0e37a0ce495f9737bcc86eb395ec88a01f3","sha256":"583ffe0edc452795ae9a0b38d32761552257d7cd336ebd0108f151ebeac5ef84","sha512":"1e7623936549eb5646d07ba35822bf9716180fe9345311117d922709c2f2193ee770da2cb4a01b1f0db41cf1ceabe75c70ea301f82a8d47b3091992318d612ab","ssdeep":"","tlshash":"9ed02e903fba0802fd9b28026a49866a22e101212c9158097bb481c400b9a6c48a8999","size":250,"data":"","first_seen":"2026-02-05T00:52:25.355968Z","last_seen":"2026-02-17T00:38:46.593895Z","times_seen":1266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7694f4a66316e53c8cdd9d9954bd611d","sha1":"22ea1c649c82946aa6e479e1ffd321e4a318b1b0","sha256":"8e35c2cd3bf6641bdb0e2050b76932cbb2e6034a0ddacc1d9bea82a6ba57f7cf","sha512":"2e96772232487fb3a058d58f2c310023e07e4017c94d56cc5fae4b54b44605f42a75b0b1f358991f8c6cbe9b68b64e5b2a09d0ad23fcac07ee9a9198a745e1d5","ssdeep":"","tlshash":"c700000000000000c00030300000000000000000000000000000000300000000000000","size":1,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-08-10T06:13:30.111131Z","times_seen":57138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-08-04T17:42:18.264373Z","times_seen":27519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/css/ep-advanced-counter166d.css?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/css/ep-advanced-counter166d.css?ver=7.19.6 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 6604\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6604,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6604), with no line terminators","md5":"1839f474db15b072513b6ff02fc72ffc","sha1":"f649f83e594b068529b9770eb2997fd24f8c283b","sha256":"bd8a62d9c977180d2e1cc52ab93e7975fceff852c4449ab24192f184a8df6a5b","sha512":"a65581eba0f5cae05222c9feb116569e6401e6b9cf682b871d648cb1a5d444b8a77636ebdc6fc1f5e0407487e2f9cd20e777c020f35fab2fb797a2ec2e0b5678","ssdeep":"48:isM2uZsMlp66cLH5eCs+XgQVEQweVNxptVmDdjuVuuqtqgg/VIvvVrSggVqGqJYE:isMJsMl6LEONXnftIgrfm3p4ULya","tlshash":"b8d161119f47042aca3ed29ae38aa53973747c50fa531d9c61c69213c8df46d098bbf7","first_seen":"2025-03-18T04:53:51.823655Z","last_seen":"2026-08-04T02:53:18.58193Z","times_seen":111,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":208,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ledgerqfsconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:43:36 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 22 Jan 2026 17:06:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9ced7995aa5e75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-10T05:01:35.80685Z","times_seen":337643,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":27,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/Web3-Marketplace-Zero-Image-3.webp","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Web3-Marketplace-Zero-Image-3.webp HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/elementor/css/post-456a518.css?ver=1750753010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10482\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80b39d9a206e4ebcd4a081412e6f8e45","sha1":"9754c16221de8881de58698dfd448d775afe8be2","sha256":"c0baca143e0af608bf24978ba4d8000cec01796cccad7fda746b09bc2c34f02b","sha512":"253f4aff30a13b03eb2f40711492788ff4bf4dab0b82b6640cacdd84b7447eba1536b8fa18ab3368623457e9f18f6d7b23df6c455132a92c3059e87f9f96c7db","ssdeep":"192:b71EFRg1tzE8RfaXKtpLRjMXoTUZ5CwYPlXhzkv/:b71QRg0wuKtpLGSQ5CwY94/","tlshash":"b122bf2f07b13b4df459fee1ea2c26400d02bb04f34ac4d1a7ee1786a429d583d9448b","first_seen":"2025-07-01T09:05:17.531033Z","last_seen":"2026-06-22T18:27:43.959192Z","times_seen":41,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":406,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/newq/wp-content/uploads/elementor/google-fonts/fonts/syne-8vih7w4qzmvxm2bl9a.woff2","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /newq/wp-content/uploads/elementor/google-fonts/fonts/syne-8vih7w4qzmvxm2bl9a.woff2 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/elementor/google-fonts/css/syne2a99.css?ver=1750418020\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-10T09:01:05.165576Z","times_seen":146702,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:37.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 02:53:48 GMT\r\nexpires: Sat, 13 Feb 2027 02:53:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 298189\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-10T09:49:56.544313Z","times_seen":960510,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":32,"dns":0,"connect":7,"send":0,"wait":11,"receive":6,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/css/frontend.min87cc.css?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min87cc.css?ver=3.28.3 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 53275\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53275,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53235)","md5":"f161c38d810e96eb73903616702263ff","sha1":"ff1a8a277a515945cdee105bbce3748f30be482a","sha256":"cbc525353d6697722379cdb9b4e4ed4c24265dc569b4ae2adb906b6ced226e77","sha512":"d77495a431be85dd557293e842fb2df9a2f5a49d5719c9f734a70928971f9ab5b36a23b3a0fd780de312d5b9402d9efeba8e0124b9f2723b15ce772c535cf12b","ssdeep":"384:cvrJ9/vmyeUaEMoZ0qk0e/Rmsm5Cz9TfikvmGkvmCLldlRak2ksFrOk:0LRdL2t7RglNP7skk","tlshash":"ad33fb623d13b269226f442b82d7364c526495c1ee4376d9fa04c523dafece63b36c1b","first_seen":"2025-04-01T21:21:15.947693Z","last_seen":"2026-08-09T19:42:41.900214Z","times_seen":2860,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":103,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/elementor/css/post-456a518.css?ver=1750753010","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-456a518.css?ver=1750753010 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 111479\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111479,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"640784664510c461d346a9a3733eed42","sha1":"914d2180dccb5fcccdf2b6ce2005979c588d9750","sha256":"3c386f8049b02fded5204a6934141935a820fed992c930fe62e35cd4ef66a3c0","sha512":"8c42882ef0ad753728f0013c1dae991102a56b6b40c11fd667476cc2a873f7651a3ad88ff8e4df1a30ba92ca6bfa2fece1316456409fe977d9d9d0cf0bd86541","ssdeep":"3072:AB2vhROMGln0kklBFXQGLG32jg+HdYagrL+bhCyZ7qAKwRtdNXwkeABg/7RycB:BhROMGln0kklBFXQGimkSGhrL+bhCyZ6","tlshash":"46b365547d03091979af718fa14391ce29346dcbd6bd76e7e420a013f0baea53bd09b2","first_seen":"2025-09-03T18:00:03.194936Z","last_seen":"2026-06-22T18:27:43.972283Z","times_seen":22,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":300,"dns":0,"connect":0,"send":0,"wait":103,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 13577\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-10T09:49:25.930397Z","times_seen":927977,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":404,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/css/ep-image-hover-effects166d.css?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/css/ep-image-hover-effects166d.css?ver=7.19.6 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/css\r\nContent-Length: 3239\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3239,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3239), with no line terminators","md5":"011f24a91d19a0755c2e0a5bdf59f1c2","sha1":"7807ac8e997f1b314a07e2a90535c94b2f602f5d","sha256":"68d94ab0fc0251ea143f45a9964e032d9878d8d9a6f8a147e4a33086dc01e928","sha512":"5ea3923ceed10c97d928978659554a5328d0b96455b157aff3add7a294fd3346424dab97f5e494b4e56487e87003318e8a2c0695cba7f47427ac1eab150f3229","ssdeep":"","tlshash":"ee618057ce4a00c637a08609e68ead6467667902f3a78f19b1e6c30711cf8f183f264b","first_seen":"2023-11-29T01:35:33Z","last_seen":"2026-08-10T08:51:34.653127Z","times_seen":153,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":426,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/js/common/helper.min166d.js?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/js/common/helper.min166d.js?ver=7.19.6 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 3907\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3907,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3882), with no line terminators","md5":"8b4538f7e51ba98d16f9532a2e015460","sha1":"b08345dcb4ce0b33c1616bb957c17a3b775fe084","sha256":"b84be3801c9cb4ce11483453bd2de43efe261812aeed9e28fdf37d9f86946a30","sha512":"ed168933f8c0352a80d59db1be650b7460b41199c79011f1d93a8b80ae1017b774b0eb8b56f5561f275e32aa648ed3c94542f99bf1f240d7ba1ad10c95ceedf0","ssdeep":"","tlshash":"b281f201a95f34e95ff71056d57ae328bcaa2acaf1804ec0d6f8e0301b595ca2121f2f","first_seen":"2024-11-07T17:48:36.316881Z","last_seen":"2026-08-10T01:35:43.141344Z","times_seen":847,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":614,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/Web3-Marketplace-Zero-BG.webp","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Web3-Marketplace-Zero-BG.webp HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/elementor/css/post-456a518.css?ver=1750753010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 268004\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":268004,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2cde4c9e8551d3f9b580d5900e83d313","sha1":"bd10f00d5612011bb09b4a88396c043c530b8ca0","sha256":"97de5fdd2eac13e1da91153d87b80bd1187040728e18dd611965b0c0bab128e2","sha512":"51993f97f41c362a9ef8f316c8b5610bd4240d572aa3e95e83e5d1a612968641bac022dc2b61ebf445d005e311b0976b11168d3d3594e955c81fbc7b25a6c0ad","ssdeep":"6144:sVb2fSoTOqfkT4PEZY/ryTC2LaToCM8dHK0ajqjEP79GRmO1:DTOqXPECO22LaB80aiE5S1","tlshash":"894423657b1038f8cba47431dbb8d60c5dce2cda6049d7fb926848486eb6b2133d670e","first_seen":"2025-07-01T09:05:17.550859Z","last_seen":"2026-06-22T18:27:43.981269Z","times_seen":41,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":401,"dns":0,"connect":0,"send":0,"wait":99,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/newq/wp-content/uploads/elementor/google-fonts/fonts/syne-8vih7w4qzmvxm2bl9a.woff2","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /newq/wp-content/uploads/elementor/google-fonts/fonts/syne-8vih7w4qzmvxm2bl9a.woff2 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/elementor/google-fonts/css/syne2a99.css?ver=1750418020\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-10T09:01:05.165576Z","times_seen":146702,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-10T09:01:05.165576Z","times_seen":146702,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/js/bdt-uikit.min4ecf.js?ver=3.21.7","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/js/bdt-uikit.min4ecf.js?ver=3.21.7 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 146909\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146909,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2b34dd0c9da769f32af745b406f2e4c8","sha1":"49a4cd67ba123e912abac8b3fd87baf376a7dfec","sha256":"757a19939ac96d32b1114a58d91c67862035d592858e2216b816164aecc93f94","sha512":"d1ced79c43c27804add4ace460a02e200c59af9dd268d542823d19bd92d890565d3189b42896c66812784cd1b5e17b14c9962675892640feae416de5e7cb2b5a","ssdeep":"1536:clS8nXcZmJnO/oktfw4nTubT/W6JV166tOqjoLOghx0NgX3vTlMHSrT0cd1xYAcm:cltsZWYtfwVnEDpMH4q2EgenSXPua","tlshash":"9ee30a9733a5b02643e741f550ab4606e3395984b40b84dcf67caace38aa845727ff7c","first_seen":"2024-07-24T00:24:06Z","last_seen":"2026-08-10T08:51:34.657216Z","times_seen":1685,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":513,"dns":0,"connect":0,"send":0,"wait":101,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/js/frontend.min87cc.js?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min87cc.js?ver=3.28.3 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 44243\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44243,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44203)","md5":"0340daa3432491513af0f0fdf90d9a3c","sha1":"f5c963ed068b58853dfbc84ae6f72df1f1e4e574","sha256":"e0b2af8faefc08acd9a693c66baae9def17b1bb4dcab7f64ba7d141cbb98ff7e","sha512":"c4253e4477ff1e40ab77d350aa54cffa23b6e5a2d7eafddc5ac9dfeaba9e60c4101eb64b6654578b991872eff1718f21624aaa08190e5742ff2180b0a0c94160","ssdeep":"768:iRP3yjt7R8RjDKvx1QEa/A3JSJGfVgNq1w9VKEAzBc5GPTSebsvTigAUMTSX5aos:iRP36t7R8RjD8x1QEa3GfV3zEAzBc5eJ","tlshash":"6113f71231d294aa55cf48b7b0330219b3765dddb802b59cb1bdace6a471e837372bb4","first_seen":"2025-04-01T21:21:15.926583Z","last_seen":"2026-08-09T21:30:42.673837Z","times_seen":3277,"resource_available":true,"data":null}},"time_used":824,"timings":{"blocked":718,"dns":0,"connect":0,"send":0,"wait":104,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/9fd53aa561074c5e83d47b9c7b02fde9975677af.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.74.133.176","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/9fd53aa561074c5e83d47b9c7b02fde9975677af.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://ledgerqfsconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 16 Feb 2026 13:43:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-08-10T07:32:17.926171Z","times_seen":3730,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":92,"dns":11,"connect":20,"send":0,"wait":24,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:39.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube-nocookie.com/\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube-nocookie.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Mon, 16 Feb 2026 13:43:39 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T09:49:08.512845Z","times_seen":17815242,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":83,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min87cc.css?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min87cc.css?ver=3.28.3 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/css\r\nContent-Length: 10310\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10310,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10270)","md5":"82ffcd6f3d474667d7db2d02e1d1ea40","sha1":"966aef61fdf9a2ba28e7dbfe2a4404f1a584d6fb","sha256":"6f1a6c0d31bf05463e2878ff95f6b2d9270859abe0f1eb787823d9c7e26438a8","sha512":"a77367a6451099a3aa4786735cafd05539142516594774979311284c683af43f063354cac4731b0168e8b364c6ef42dca7a38958f25f38e1f62749abf4f4aaa1","ssdeep":"96:BJHIoZKM9wyKI/G+tl+A0zbjiviRILvW6kjO6AHReKuLjYvcv5VA0:zHIoZK6G+tl+A0zb+qy6AHReKuLj6es0","tlshash":"8822d4817d53814e1aff641b141b184ca1d9d4cde9bbecd5e8a66203c6fbec43b31928","first_seen":"2025-04-01T21:21:15.949542Z","last_seen":"2026-08-08T09:50:16.942229Z","times_seen":1635,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/elementor/google-fonts/css/syne2a99.css?ver=1750418020","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/syne2a99.css?ver=1750418020 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 6115\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6115,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"16007e3eb13e1f982eb6507abed443ee","sha1":"0a2fa72703edaded2cff748d404b4bb92f512f16","sha256":"c1d39e7999b914c31bbd5be2cd5de0c1032447a4e0dbac452a42cf9bd24ba432","sha512":"3fde1b5d56224b960c8f55e813dab8d848782cbf65886ae9532e7ac22f706523a58460701c97716a2e1a07e015e845c80fb35255ed52684507e4969157a4af9d","ssdeep":"96:aOEaqnhePOEaqAFJc+ueOEaqWNnOXaqnhePOXaqAFJc+ueOXaqWNnOxMaqnhePOi:9IheYxt0DIhefxtbGIheCxt+lIhexxt/","tlshash":"b2c1afe004bb72009a974dd2628a3d21eb0d6545b5489ffd6bfd08acfde9c15235274e","first_seen":"2025-10-15T12:40:32.350153Z","last_seen":"2026-06-22T18:27:43.961653Z","times_seen":24,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":382,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min87cc.js?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min87cc.js?ver=3.28.3 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 5407\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5407,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5367)","md5":"e8cb760e23d83f47aa475b625bcbd5be","sha1":"12040791178730b55fff8b105c00020462f691d5","sha256":"b0694ca7e3b222abf2721f11150ec59c48161f6b62bd504e40015a51eebd05c9","sha512":"0e379d10b6207223724216791026f6369f3abd9362bda9ffa7a616a94770a915dbcadd2d2ed0fae0a1c0caa7c642e742cb3d9d93eb208a12b153eb84f9d7cb83","ssdeep":"96:BxsNt0jqf9fzq5xl8O7AEQQ1CejlejNVobVDjgqKokxwvT8i2:jsNCjw9fWdNQteKN4FjgvCgi2","tlshash":"22b141941a90fc6b35e135c8a11ba730662fc1337c1bb8c1fa21dce959e8ed187a9572","first_seen":"2025-04-01T21:21:15.978722Z","last_seen":"2026-08-09T21:30:42.621456Z","times_seen":3294,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":651,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/s/player/1798f86c/player_es6.vflset/en_US/embed.js","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:38.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"FC:29:4D:58:5E:E6:74:45:80:0C:2C:FE:14:2F:15:E5:F5:52:19:FC","sha256":"97:7E:CA:18:F0:30:B2:D8:F5:C6:F8:72:E1:CF:30:B5:CE:EA:5D:CF:26:AC:0B:BB:CF:17:23:E2:33:E0:56:12"}}},"request":{"raw":"GET /s/player/1798f86c/player_es6.vflset/en_US/embed.js HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 9320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:10:34 GMT\r\nexpires: Sat, 13 Feb 2027 03:10:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 11 Feb 2026 05:32:37 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 297184\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31785,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3391)","md5":"8a117fba62d0b5a855ff8e3725c1776c","sha1":"b07b88cbfce021323e18dcaa781fc1b0963c295d","sha256":"a193d936536b17dabeb512c7047c1d3079b90a6ecc2a8784ed48db5da5f643e1","sha512":"815e0229e5bf5deb4fe27f4ed5e95759e0d89ac9423a8fb67b5fc4520bf17e42c7287b01820867fb898a760c1b27d9ea5e9bcc1ff7820580d142048be3cbf78c","ssdeep":"768:o+1J0qQEUH0MKCrZMeQLrAt2DTfQsk5USiRKGLd0H:FCU8","tlshash":"e1e2e80a37d2d4258161e1ea6d0b1100b766a4dd3461e3bc7b3edeeaad31d09b07af31","first_seen":"2026-02-11T07:46:22.854822Z","last_seen":"2026-02-18T17:04:14.668413Z","times_seen":4763,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/css/widget-image.min87cc.css?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min87cc.css?ver=3.28.3 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 254\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ed1a22742654123691cf46d2c2f2281a","sha1":"cef4fdb7eed888c4afa90be15c37c5a8a4d4b51b","sha256":"7da4fb4ef56e959a6171df2d13c67a4959895d0303174cf5a45dc83e5266ec63","sha512":"b012f1cf128002826f62852c154eb754e3df91847d663289fc17c819bff93ba10a08243e612147d7cd8fa8e2cc024e4dacdac32a244ca6662f0766f71eef1c49","ssdeep":"","tlshash":"d6d05e4034678382301f596926ab2a9e78d41dd8f246cb90acb166126abacc837b2160","first_seen":"2025-04-07T06:02:40.066608Z","last_seen":"2026-08-09T07:07:52.462346Z","times_seen":2655,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":285,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/js/frontend-modules.min87cc.js?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min87cc.js?ver=3.28.3 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 48393\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48393,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48352)","md5":"d79e92ec845b407074ceddaebfd93c31","sha1":"4d5570d5b1eea3fabed11ff5b99feb68a33fc3c2","sha256":"f94cd7c7a33e600e9d9aac4771e661ade5c91719ccb32b52f405b1fe2e356ad1","sha512":"4866c7fd7325346b032aa18172a484334bc8a71216c9979482adc0d853211d151d806b166ef2688d609489fef59f20c33bb3ee5ea63403e0958221431617eb58","ssdeep":"768:JeAjA6wk9C+QioJHYNQAzeLHeBHmjkSK7+z1hlN14cR8+AvNKRiA8m6XS3gzlAIT:JeAjA6f9C+QiSYNQAzeLHeBHmjkOzRNM","tlshash":"f323c7853652f4f70beb40daa02f450af25619a8640df4d4bfe9dce194b0d8e237ab74","first_seen":"2025-04-01T21:21:15.982299Z","last_seen":"2026-08-09T21:30:42.75649Z","times_seen":3281,"resource_available":true,"data":null}},"time_used":890,"timings":{"blocked":694,"dns":0,"connect":0,"send":0,"wait":100,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/s/player/1798f86c/player_es6.vflset/en_US/base.js","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:37.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"FC:29:4D:58:5E:E6:74:45:80:0C:2C:FE:14:2F:15:E5:F5:52:19:FC","sha256":"97:7E:CA:18:F0:30:B2:D8:F5:C6:F8:72:E1:CF:30:B5:CE:EA:5D:CF:26:AC:0B:BB:CF:17:23:E2:33:E0:56:12"}}},"request":{"raw":"GET /s/player/1798f86c/player_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 638017\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 08:29:44 GMT\r\nexpires: Thu, 11 Feb 2027 08:29:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 11 Feb 2026 05:32:37 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 450833\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2391755,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (891)","md5":"1cea740d67216e8d18210e6430175b7d","sha1":"6481dc91b4aeba2c1633efcff0b801d58e628de0","sha256":"bd8b719048ab25c42b70bafc8454ce0f202adcd7ff9042d8540f1c1a2279946f","sha512":"0f296ad9947e014c840f2b9e935fef2fe9024a24946397679dc80a6a8c201a0c98983c604d95899613391263be0d6ba285d16992a7b78b94fe10b1f5e2f4459b","ssdeep":"12288:YRMWdPXQNNkKPjtLKH33OKAA0TJ3WGvQpaY6wZKA6F3aV2vb0:YqQsNtRLKH33OKAA0TJ3+aY5ZKAuU9","tlshash":"b1256cd936e3745b42b3b8a0e57f210ab27f5c10710ac8e8e16dda952d3984e857bf4c","first_seen":"2026-02-11T11:11:57.856417Z","last_seen":"2026-02-18T17:11:15.141677Z","times_seen":5366,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-16","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube-nocookie.com/s/player/1798f86c/player_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/icon.png","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:38.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/icon.png HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 20389\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20389,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"3c59aff7c3fc6839f53e861429e764f0","sha1":"e2abbb4dd5d554222eca9444e04b81baf2a0fa7a","sha256":"257ff04955884cb46b78168b6465ad422a5841420ce09061ceb028e6017f6487","sha512":"c958ca1c69f697bdf00de0a489a8b5f5f099279a9acff7ec0d9078b5a9b5a185121951887cc175f560357a88dfd9007a7d702b4d190a0f64f42f918d129d9cb6","ssdeep":"384:Mtv2k2tpuP1oR3yYVr5zB3RPwXk2VFAuGA7Dn/6aoY9y1S/s+LLp:vlp/PhoFAr0/6aoEyCfp","tlshash":"dc92e163c316a7fbc19e1663c2eec0b0c23ca1a915ac0a50756f85c2919d38afb5635b","first_seen":"2026-01-31T08:55:30.916547Z","last_seen":"2026-03-30T14:25:36.075239Z","times_seen":8,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/generate_204?CGBY6A","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:39.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"FC:29:4D:58:5E:E6:74:45:80:0C:2C:FE:14:2F:15:E5:F5:52:19:FC","sha256":"97:7E:CA:18:F0:30:B2:D8:F5:C6:F8:72:E1:CF:30:B5:CE:EA:5D:CF:26:AC:0B:BB:CF:17:23:E2:33:E0:56:12"}}},"request":{"raw":"GET /generate_204?CGBY6A HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 16 Feb 2026 13:43:39 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T09:49:08.512845Z","times_seen":17815242,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min87cc.css?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min87cc.css?ver=3.28.3 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 130\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"18b6260305b3bdc5100c937971d28906","sha1":"12c44b736a53dfa11c8286fe3ef05c2f64f47a47","sha256":"7263363f11b6184fe306b05a849db2de5a674258610578e594068bec72b4f2a9","sha512":"2c1751f012fd78fdf93ee1700536c117a4d9eac6fb442f3386aea7339f72ad2fcdf4835b309eafc6214da2c584bdfb47680291e191ac4b3721b21c32e5cdd2d8","ssdeep":"","tlshash":"78c092488aa4414d029a05fabcc4a951c53acbf6e9732edf7294494b4b81aad13892e3","first_seen":"2023-10-30T21:54:19Z","last_seen":"2026-08-10T09:24:02.56725Z","times_seen":46042,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":177,"dns":0,"connect":98,"send":0,"wait":120,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/Cybersecurity-Products-Image-2.webp","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Cybersecurity-Products-Image-2.webp HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2678\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2678,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5746d8302d98891de2025015d89a1177","sha1":"a8c4f6451c7fe7a8919575ba172e2baa1dcb815f","sha256":"aa6f1d8db5eadcf5cab6cdd0e334435882617b160e25eb2553a7c22ca7955450","sha512":"bfa47a8953491ed813b194ec2c26895c44c450fbc6105ee0fb4d3d6d7ff0e1231825a0c05973f0ac9d7991fc27b45e45c11cdbc6bb4a722ead68b6826c8310f3","ssdeep":"","tlshash":"17518ea1d5194d6aa20c0b57360d20a80fe7dbc5a8dcef81f44b2132615ef12b0f20c3","first_seen":"2025-07-01T09:05:17.537052Z","last_seen":"2026-06-22T18:27:43.948782Z","times_seen":45,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":808,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-advanced-icon-box.min166d.js?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-advanced-icon-box.min166d.js?ver=7.19.6 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 433\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":433,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (433), with no line terminators","md5":"0321502e2d081d9146963a2b9e4a7c7a","sha1":"ed6c6b9d7221c873cc2e811c5b0536e8034bd493","sha256":"d2e486df155e99841226cbf280e72537a0da0ba6dc39bea9fb4a51a146be6969","sha512":"0181ca11f81a5585b28d2fd9204e9506f2433203c79690a1fb071ec43e2096b3cf2f034fa2bae79d845b7269d2b8f09a402668c4cf395d02b5092d35581f20f3","ssdeep":"","tlshash":"1de05c24b6431055213770b3931f305d60b29c71f8163ad69150c5a01cf5f5e7659bb5","first_seen":"2024-10-16T01:38:05.251175Z","last_seen":"2026-08-08T02:09:39.285415Z","times_seen":406,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":520,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.1","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.1 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-10T09:01:05.165576Z","times_seen":146702,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:41.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"FC:29:4D:58:5E:E6:74:45:80:0C:2C:FE:14:2F:15:E5:F5:52:19:FC","sha256":"97:7E:CA:18:F0:30:B2:D8:F5:C6:F8:72:E1:CF:30:B5:CE:EA:5D:CF:26:AC:0B:BB:CF:17:23:E2:33:E0:56:12"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1771249421366\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtrbjBvclJBQTFFTSiJvszMBjInCgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBa\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20260213.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 869574439\r\nX-YouTube-Page-Label: youtube.embeds.web_20260213_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1771249418019\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C568%2C500\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 11900\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11900,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"1.20260213.01.00\",\"configInfo\":{\"appInstallData\":\"CIm-zMwGELHJgBMQiIewBRCUg9AcENbc0BwQ4-vQHBDT4a8FENnE0BwQlLbQHBCL988cEK7WzxwQ4IKAExCY3dAcENjX0BwQjOnPHBDx4dAcENr3zhwQ-s7QHBC36v4SEJX3zxwQvYqwBRDJ968FEImwzhwQwY_QHBD2q7AFEIeszhwQgc3OHBC45M4cEMCq0BwQ9tbQHBDGxs8cEMOq0BwQvbauBRDevM4cEPrc0BwQlP6wBRDxtNAcELyk0BwQyPfPHBDM364FEJmNsQUQ0MKAExCe0LAFEKa20BwQjbDQHBD8ss4cEPCcsAUQ3OrQHBC72c4cEL2ZsAUQ9seAExDildAcKkBDQU1TS2hVaC1acS1ETGlVRXBRQ25BN01CYmJQOEFzeW9Ld0VBODNfQmN1M0J2c211TjBHOWdfZDh3TWRCdz09MAA%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://ledgerqfsconnect.com/\"}},\"events\":[{\"eventTimeMs\":1771249417673,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417674,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249418088,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249418090,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417380,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417225,\"latencyActionBaselined\":{\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417326,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417380,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417388,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417230,\"latencyActionTicked\":{\"tickName\":\"ndnss\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417232,\"latencyActionTicked\":{\"tickName\":\"ndnse\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417233,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417326,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417242,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417326,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417545,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417754,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417531,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417592,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417531,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417551,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417531,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249417561,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249418095,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_WATCH\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249418098,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249418100,\"latencyActionInfo\":{\"serverTimeMs\":33,\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1771249418144,\"screenCreated\":{\"csn\":\"B52P3gQ2ExAHS03i\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"CR-TaYrHFOPP-cAPsPrC6QQ\"}}}},\"context\":{\"lastActivityMs\":\"24\"}},{\"eventTimeMs\":1771249418144,\"latencyActionInfo\":{\"clientScreenNonce\":\"B52P3gQ2ExAHS03i\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"24\"}},{\"eventTimeMs\":1771249418145,\"screenCreated\":{\"csn\":\"NjTH4H5mybyyXQCn\",\"pageVe\":{\"veType\":27240},\"implicitGesture\":{\"parentCsn\":\"B52P3gQ2ExAHS03i\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"24\"}},{\"eventTimeMs\":1771249418145,\"visualElementHidden\":{\"csn\":\"B52P3gQ2ExAHS03i\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"25\"}},{\"eventTimeMs\":1771249418145,\"latencyActionInfo\":{\"clientScreenNonce\":\"NjTH4H5mybyyXQCn\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"25\"}},{\"eventTimeMs\":1771249418149,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"28\"}},{\"eventTimeMs\":1771249418174,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"53\"}},{\"eventTimeMs\":1771249418174,\"latencyActionTicked\":{\"tickName\":\"vir\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"53\"}},{\"eventTimeMs\":1771249418174,\"latencyActionTicked\":{\"tickName\":\"ps_s\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"54\"}},{\"eventTimeMs\":1771249418196,\"latencyActionTicked\":{\"tickName\":\"psns\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"75\"}},{\"eventTimeMs\":1771249418277,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"156\"}},{\"eventTimeMs\":1771249418284,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"163\"}},{\"eventTimeMs\":1771249418284,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"164\"}},{\"eventTimeMs\":1771249418285,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"6wClT5JmkoWdRXLU\",\"clientScreenNonce\":\"B52P3gQ2ExAHS03i\"},\"context\":{\"lastActivityMs\":\"164\"}},{\"eventTimeMs\":1771249418285,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"6wClT5JmkoWdRXLU\",\"clientScreenNonce\":\"NjTH4H5mybyyXQCn\"},\"context\":{\"lastActivityMs\":\"164\"}},{\"eventTimeMs\":1771249418325,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"qx_2YSvtnQPsT_sm\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"205\"}},{\"eventTimeMs\":1771249418367,\"latencyActionTicked\":{\"tickName\":\"ps_c\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"247\"}},{\"eventTimeMs\":1771249418368,\"latencyActionTicked\":{\"tickName\":\"psnr\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"248\"}},{\"eventTimeMs\":1771249418370,\"visualElementAttached\":{\"csn\":\"NjTH4H5mybyyXQCn\",\"parentVe\":{\"veType\":27240},\"childVes\":[{\"trackingParams\":\"CAAQu2kiEwjA64yjkt6SAxVSsPQHHe9gOM_KAQSpw4M_\"}]},\"context\":{\"lastActivityMs\":\"250\"}},{\"eventTimeMs\":1771249418373,\"latencyActionTicked\":{\"tickName\":\"wn_s\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"253\"}},{\"eventTimeMs\":1771249418375,\"latencyActionTicked\":{\"tickName\":\"virc\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"255\"}},{\"eventTimeMs\":1771249418385,\"embedsVideoDataDidChange\":{\"clientPlaybackNonce\":\"qx_2YSvtnQPsT_sm\",\"isReload\":false,\"runtimeEnabledFeatures\":{\"isShortsModeEnabled\":false}},\"context\":{\"lastActivityMs\":\"265\"}},{\"eventTimeMs\":1771249418599,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"479\"}},{\"eventTimeMs\":1771249418849,\"latencyActionTicked\":{\"tickName\":\"wn_r\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"728\"}},{\"eventTimeMs\":1771249418849,\"visualElementAttached\":{\"csn\":\"NjTH4H5mybyyXQCn\",\"parentVe\":{\"veType\":27240},\"childVes\":[{\"trackingParams\":\"CAAQg2ciEwigyZ2jkt6SAxWxdpEFHW8RPELKAQSpw4M_\"}]},\"context\":{\"lastActivityMs\":\"728\"}},{\"eventTimeMs\":1771249418857,\"embedsVideoDataDidChange\":{\"clientPlaybackNonce\":\"qx_2YSvtnQPsT_sm\",\"isReload\":false,\"runtimeEnabledFeatures\":{\"isShortsModeEnabled\":false}},\"context\":{\"lastActivityMs\":\"736\"}},{\"eventTimeMs\":1771249419146,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIFg==\"},\"context\":{\"lastActivityMs\":\"1026\"}},{\"eventTimeMs\":1771249419150,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"1030\"}},{\"eventTimeMs\":1771249419363,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"1242\"}},{\"eventTimeMs\":1771249419363,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"1243\"}},{\"eventTimeMs\":1771249419366,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"DBa94Si9QzztgiRL\"},\"context\":{\"lastActivityMs\":\"1245\"}},{\"eventTimeMs\":1771249420151,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAGCeQA==\"},\"context\":{\"lastActivityMs\":\"2031\"}},{\"eventTimeMs\":1771249420152,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggBIhEKAwoBawoGCgRhR0lmEgIIAQ==\"},\"context\":{\"lastActivityMs\":\"2032\"}},{\"eventTimeMs\":1771249420153,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAgEhAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgFvCgYKBGFHSWYSCREAAAAAANCHQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAPA/IhgKAwoBawoGCgRhR0lmEgkRAAAAAAAAAAA=\"},\"context\":{\"lastActivityMs\":\"2032\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"CR-TaYrHFOPP-cAPsPrC6QQ\",\"clientCounter\":\"31604\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Mon, 16 Feb 2026 13:43:41 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-08-10T09:34:23.722799Z","times_seen":284368,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 01:26:30 GMT","end":"Mon, 30 Mar 2026 02:26:25 GMT"},"fingerprint":{"sha1":"37:EE:38:DC:51:7B:DE:E1:29:DC:0E:AE:B0:B2:59:EF:EC:86:33:E6","sha256":"7B:44:5B:17:5D:54:17:1B:E4:42:87:BE:40:D0:27:47:DC:68:F8:47:86:3B:0C:BC:1F:8F:38:85:9F:99:A8:6A"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:43:36 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2024 23:02:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Sat, 23 Jan 2027 11:52:10 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4j5ffouuhPhP8yVg%2FleKYW2fYdRey3QxJ7d3DG37OcgVxdrGI9qIu85UT54%2Fy35C%2FwD86yNRqqjziDRoFMXfl3HgwZeV8U2vk1MA0ktHw%3D%3D\"}]}\r\nage: 2080285\r\ncf-cache-status: HIT\r\netag: W/\"6763547c-59f9\"\r\ncontent-encoding: br\r\ncf-ray: 9ced79951c2e481e-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23033,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-08-09T02:43:09.725737Z","times_seen":2971,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":2,"dns":0,"connect":8,"send":0,"wait":22,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/newq/wp-content/uploads/elementor/google-fonts/fonts/syne-8vih7w4qzmvxm2bl9a.woff2","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /newq/wp-content/uploads/elementor/google-fonts/fonts/syne-8vih7w4qzmvxm2bl9a.woff2 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/elementor/google-fonts/css/syne2a99.css?ver=1750418020\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-10T09:01:05.165576Z","times_seen":146702,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/api/stats/qoe?cpn=qx_2YSvtnQPsT_sm\u0026el=embedded\u0026ns=yt\u0026fexp=v1%2C24004644%2C494889%2C26510702%2C53408%2C34656%2C106030%2C18644%2C117689%2C9252%2C3479%2C13030%2C23206%2C15179%2C53368%2C32155%2C9720%2C5385%2C25059%2C4174%2C29683%2C763%2C13517%2C5189%2C1734%2C19703%2C137%2C4434%2C1628%2C9410%2C16162%2C1903%2C8860%2C544%2C23826%2C9500%2C1840%2C12605%2C4670%2C838%2C2597%2C9025%2C4510%2C1664%2C217%2C3880%2C5710%2C2884%2C10275%2C7195%2C3061%2C1668%2C494%2C6331%2C702%2C293%2C1403%2C372%2C9053%2C2633%2C6115%2C1853\u0026cl=868418280\u0026seq=1\u0026event=streamingstats\u0026docid=2Sd1lGBTLrg\u0026cbr=Firefox\u0026cbrver=134.0\u0026c=WEB_EMBEDDED_PLAYER\u0026cver=1.20260213.01.00\u0026cplayer=UNIPLAYER\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\u0026vps=0.000:N,0.022:B,0.212:ER\u0026cat=streaming\u0026cmt=0.022:0.000,0.212:0.000,0.212:0.000\u0026ctmp=pafmtstr:t.196;s.,pafmts:t.196;isManifestFilled.0\u0026vis=0.212:0\u0026bh=0.212:0.000\u0026qclc=ChBxeF8yWVN2dG5RUHNUX3NtEAE","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:38.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"FC:29:4D:58:5E:E6:74:45:80:0C:2C:FE:14:2F:15:E5:F5:52:19:FC","sha256":"97:7E:CA:18:F0:30:B2:D8:F5:C6:F8:72:E1:CF:30:B5:CE:EA:5D:CF:26:AC:0B:BB:CF:17:23:E2:33:E0:56:12"}}},"request":{"raw":"POST /api/stats/qoe?cpn=qx_2YSvtnQPsT_sm\u0026el=embedded\u0026ns=yt\u0026fexp=v1%2C24004644%2C494889%2C26510702%2C53408%2C34656%2C106030%2C18644%2C117689%2C9252%2C3479%2C13030%2C23206%2C15179%2C53368%2C32155%2C9720%2C5385%2C25059%2C4174%2C29683%2C763%2C13517%2C5189%2C1734%2C19703%2C137%2C4434%2C1628%2C9410%2C16162%2C1903%2C8860%2C544%2C23826%2C9500%2C1840%2C12605%2C4670%2C838%2C2597%2C9025%2C4510%2C1664%2C217%2C3880%2C5710%2C2884%2C10275%2C7195%2C3061%2C1668%2C494%2C6331%2C702%2C293%2C1403%2C372%2C9053%2C2633%2C6115%2C1853\u0026cl=868418280\u0026seq=1\u0026event=streamingstats\u0026docid=2Sd1lGBTLrg\u0026cbr=Firefox\u0026cbrver=134.0\u0026c=WEB_EMBEDDED_PLAYER\u0026cver=1.20260213.01.00\u0026cplayer=UNIPLAYER\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\u0026vps=0.000:N,0.022:B,0.212:ER\u0026cat=streaming\u0026cmt=0.022:0.000,0.212:0.000,0.212:0.000\u0026ctmp=pafmtstr:t.196;s.,pafmts:t.196;isManifestFilled.0\u0026vis=0.212:0\u0026bh=0.212:0.000\u0026qclc=ChBxeF8yWVN2dG5RUHNUX3NtEAE HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nX-Goog-Visitor-Id: CgtrbjBvclJBQTFFTSiJvszMBjInCgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBa\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 418\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":418,"data":"error=0.212%3Aauth%3A%3A0.000%3Aec.auth%3Bed.1%3Bes.This_helps_protect_our_community._Learn_more%3Ba6s.0%3Br.Sign_in_to_confirm_you_re_not_a_botsr.This_helps_protect_our_community._Learn_more\u0026session_token=QUFFLUhqbWs1YTJMZVphRVNuc3d5Q1pzcFRXRE1nMkFVZ3xBQ3Jtc0tuQjBtU0FLdTNuMzBVWGdiMWUxQVRYRXdJWW5yWDVtUlhMYW1qNWNIUkVLel9XVWpPS3p5VUZUcFFrVi1FQlM2ZHZaVm55MGxXdWlRYTBWcjB3djMtWUN3Skx3ZUhmSlZZaFZnQjEyNm9FTkxWV252SQ%3D%3D"}},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 16 Feb 2026 13:43:38 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nx-content-type-options: nosniff\r\nserver: Video Stats Server\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T09:49:08.512845Z","times_seen":17815242,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/gPcLkiLtQzW5GAviWs0_DV09CkKQZ5Hz8oELTgKOL84.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:38.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /js/th/gPcLkiLtQzW5GAviWs0_DV09CkKQZ5Hz8oELTgKOL84.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 22578\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 06:09:33 GMT\r\nexpires: Thu, 11 Feb 2027 06:09:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 459245\r\nlast-modified: Mon, 02 Feb 2026 17:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59195,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57963)","md5":"fe61a53cbd79da0d96422794bfcdbd27","sha1":"5c2004e19f919a01ea051d0fa92104afb59e8d94","sha256":"80f70b9222ed4335b9180be25acd3f0d5d3d0a42906791f3f2810b4e028e2fce","sha512":"6b5b25d5397941ae3997c531f1d195cd56cfad23b1a32f1d09e8b668598acf1a4a15e08f4c4132e4754d371e0417ba301c471d5369e773ab03229a7754a224fd","ssdeep":"1536:jD7c0RtySap5OuDUFbv4k6VcpBgoAB3p+cVXbFxpOjSzo9e9tHi6DDhIj1fbTFlY:T/tlapsuIpv4k6VcpBgo03p3XhxpO+zd","tlshash":"58432ccfb2d6632a68e375f2005b410ea37e594a8d942c6fb909ebf41d78847407bf25","first_seen":"2026-02-05T00:52:25.223323Z","last_seen":"2026-02-17T00:38:46.376773Z","times_seen":1326,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":55,"dns":1,"connect":8,"send":0,"wait":12,"receive":2,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/3d-cryptocurrency-rendering-design-1-scaled.jpg","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/3d-cryptocurrency-rendering-design-1-scaled.jpg HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 253181\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":253181,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 2560x1829, components 3","md5":"6c940f55bd83d1c6fc1c11f5a17a94e8","sha1":"ffab1302d0ac3644d2a03ada53e55c894b825c14","sha256":"762a8ad5432439b57046a948cf3588017a806d6f51cd555377764b2daf3623ca","sha512":"9e1246eedac8a7940703b008588bfece3c514144d42df39edf47a9cbca25b4eaaed9aedf2dc109a74a29a7019dfccf797d18fff6cb8c3cb9fe0f38790ccff51c","ssdeep":"6144:HOMXlPU9ROE+UDG8exvIP3f96QITQxd+5LikWK644aY2+rpjNJNo+b66X:HOM1P2ROE+UapCP3f9CQx8FHWK644aYh","tlshash":"6d34f1238c466a83d029cff97e078dce7a56775ef8457edb50269ec63a301403dae069","first_seen":"2026-01-31T08:55:30.908191Z","last_seen":"2026-06-22T18:27:43.950865Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1239,"timings":{"blocked":1019,"dns":0,"connect":0,"send":0,"wait":105,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/css/widget-spacer.min87cc.css?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-spacer.min87cc.css?ver=3.28.3 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 1833\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1833,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1793)","md5":"a752d79700ce8c09553d43977d56b996","sha1":"968fb280f1bcfb8878f91ec6f6d06624eee16d1b","sha256":"5f62f1ddca590301b4fb324e0821745bc760d3deb420384c39b7a54c9266401a","sha512":"2e574e8c0f033d67076a43cf5f67762cbc7becff1e6fa91f86e3a208d4dd1213260050b3babf8dcb9c5db385752b7e167103ba84746f5da7b8edb398ec9f1bf9","ssdeep":"","tlshash":"12312750bd07662cb87fa60f8413129c658490dee581ccc6cba1f60aa2fcee33336935","first_seen":"2025-04-07T06:02:40.08462Z","last_seen":"2026-08-08T09:50:16.968424Z","times_seen":1069,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":193,"dns":1,"connect":103,"send":0,"wait":111,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/css/bdt-uikit4ecf.css?ver=3.21.7","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/css/bdt-uikit4ecf.css?ver=3.21.7 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 102729\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102729,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"45fa511ef5e28e5920a66f41481edffb","sha1":"1feec972dc9cc435f93887db911a4567bfab2967","sha256":"af439196faf3f09cc69ffbed1194fe9c98913de6451b9f73d68d04f79ac462d6","sha512":"5cec6ac4c48e3ae445f851868d74850e02ee573785508cea98836ccc6d5fa9fe9ed3e2409f247d1d5f74f5a9382bcf810bba415ac7dfb371f47865a549320267","ssdeep":"1536:dPkcRm5YTMFoDBUn7WNmJPMFCQYKcOzMiN04O+8ieZ0oVIkE:YYz1af1ix","tlshash":"fda3b4891d5030adf12b8512d7e0f66cf3295c82f7170beab5d2a3668bc7ad11633a1c","first_seen":"2024-11-07T17:48:36.248978Z","last_seen":"2026-08-10T01:35:43.257975Z","times_seen":2659,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":193,"dns":1,"connect":104,"send":0,"wait":206,"receive":210,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-includes/js/jquery/jquery.minf43b.js?ver=3.7.1","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.minf43b.js?ver=3.7.1 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 87553\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-10T09:49:25.947393Z","times_seen":1012902,"resource_available":true,"data":null}},"time_used":705,"timings":{"blocked":395,"dns":0,"connect":0,"send":0,"wait":205,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-section-sticky.min166d.js?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-section-sticky.min166d.js?ver=7.19.6 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 373\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":373,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (373), with no line terminators","md5":"051daafb7e75813adf2af6202c05f218","sha1":"dfc51b6561c480006f325aca1d29e2399ac38cfc","sha256":"a9a3cf1ce36d0916885ea96a8fc7bf746eedfb022ae2547d669d6c20e68e64d2","sha512":"48a2b5dbced3a68c55073b99214bcdf27a477d9ae58ce7cc4c12c27eb30090288f37a2ae396f21d9437c8b9a1729b118ebc56ff5e71bf53fad437d8717b2a62a","ssdeep":"","tlshash":"0ae06824b50374ea213bb437f237377c60b3c874f412101145a190822df9d29761a14d","first_seen":"2023-03-07T15:53:25Z","last_seen":"2026-08-10T01:35:43.274077Z","times_seen":323,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":619,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"FC:29:4D:58:5E:E6:74:45:80:0C:2C:FE:14:2F:15:E5:F5:52:19:FC","sha256":"97:7E:CA:18:F0:30:B2:D8:F5:C6:F8:72:E1:CF:30:B5:CE:EA:5D:CF:26:AC:0B:BB:CF:17:23:E2:33:E0:56:12"}}},"request":{"raw":"GET /embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1 HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_other/allowlist, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 16 Feb 2026 13:43:37 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"youtube_other\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_other\"}]}\r\ncontent-security-policy-report-only: report-uri https://csp.withgoogle.com/csp/youtube_other/strict;base-uri 'self';object-src 'none';script-src 'nonce-BmQYoDO-9dNSm6FXlAN9vQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval'\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_other\"\r\norigin-trial: AsnbWYr3bqK88n/C2BgXPMpBC+msV4jf6vsgnAir+gFnHw3zXZEKmz271E4vhxTja+7SD2q3dr2BxZlHzvj9HA0AAACBeyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUtbm9jb29raWUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116675,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52290)","md5":"9ae4d1f37fa680fe67c9dbea0f1b7592","sha1":"c2c3411445bdd95d1220c90278ea9b3d8e57f65e","sha256":"b696d64a3a78b220b537eabc4287d1b8d369c4b54bc9cc9600812b50c37b0c5b","sha512":"74e098af017380a4bde3774eb6233aecb6cc65ab69d5942bc1742c5c488bdee422998968e05bc55e11967129d38473a8fc640ccb31a33922368af50618f0d4cb","ssdeep":"1536:oGOYzgxHyrNtMuuhEQ6zaOV01uqCBJBV0Ogik+6R:0ty0p6ZEu5BybiYR","tlshash":"27b3f8240828a872c9939547edbaff3e9cb8017947c595aebdbbc75c01ec6510eaf412","first_seen":"2026-02-16T13:44:05.14607Z","last_seen":"2026-02-16T13:44:05.14607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":95,"dns":2,"connect":7,"send":0,"wait":54,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yt3.ggpht.com/FkCq2fH9N_SGNf_jlysbRvlMVMXIRWD5-l7fySOy74PLJBJk2MkG3K96fpe81ULslaU8SPoMSQ=s68-c-k-c0x00ffffff-no-rj","fqdn":"yt3.ggpht.com","domain":"ggpht.com","tld":"com"},"ip":{"addr":"216.58.211.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:38.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:50 GMT","end":"Mon, 20 Apr 2026 08:40:49 GMT"},"fingerprint":{"sha1":"95:A9:86:49:F3:E0:E3:F9:36:BC:EC:4E:BF:FB:C5:AE:E2:1C:8D:04","sha256":"B6:B9:D6:54:FE:79:1C:50:57:A2:7B:55:2A:3D:2C:2B:A3:91:C5:B7:3D:65:94:38:4F:69:5E:EF:03:1B:9C:8F"}}},"request":{"raw":"GET /FkCq2fH9N_SGNf_jlysbRvlMVMXIRWD5-l7fySOy74PLJBJk2MkG3K96fpe81ULslaU8SPoMSQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1\r\nHost: yt3.ggpht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"channels4_profile.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 1153\r\nx-xss-protection: 0\r\ndate: Mon, 16 Feb 2026 11:27:26 GMT\r\nexpires: Tue, 17 Feb 2026 11:27:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 8172\r\netag: \"v1\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1153,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3","md5":"4e53746cdf978a118acc359983891d5c","sha1":"ffa64d213d09a8fabf1cfaff07b4733a589e4bf6","sha256":"26562b75ffcf26c14601ad47b895a96ca58bc5a2cf829f010d0a43901606c53c","sha512":"dba5a530a0a88884239546c8d2e8058261fdc62f8af3f9e0bd9a54f65ff718d0d7474e9bad3d146cbf030a8f3f65e6200f97c19df1d0a0cf71ea2911a8a76785","ssdeep":"","tlshash":"af2186d63716d6eadbf1863029411f774b779bf5e522975c100996911e5ac049924040","first_seen":"2023-08-24T17:25:43Z","last_seen":"2026-03-29T11:46:52.524207Z","times_seen":77,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":79,"dns":1,"connect":21,"send":0,"wait":22,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/uicore-framework/assets/fonts/themify.woff","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/uicore-framework/assets/fonts/themify.woff HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/plugins/uicore-framework/assets/fonts/themify-icons8a54.css?ver=1.0.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: font/woff\r\nContent-Length: 56108\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56108,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 56108, version 1.0","md5":"a1ecc3b826d01251edddf29c3e4e1e97","sha1":"9394f35bd2addd24666b79bfc36d4f9d247cb01d","sha256":"0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7","sha512":"2329063d667b5480a2862fe4e11154b4dabf3b8782fd67be79ebfe55bfda96e28e70f8f438f73c7ef9901afcb16370897c3022c8b649a33cb74459c610cca00a","ssdeep":"768:tImTAHYFg71fAWsOKi5qSy5LBaK+mn2noN5IO3RCtebWA8ipCWUa:GmTp0gpBpv2a58oSA81","tlshash":"244328747f6a5b2bde839db9fe850e5160f098c61f43f123c09e98522c7b7a88979143","first_seen":"2023-04-05T04:30:11Z","last_seen":"2026-08-10T09:22:37.129616Z","times_seen":32183,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":106,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/s/player/1798f86c/www-player.css","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:37.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"FC:29:4D:58:5E:E6:74:45:80:0C:2C:FE:14:2F:15:E5:F5:52:19:FC","sha256":"97:7E:CA:18:F0:30:B2:D8:F5:C6:F8:72:E1:CF:30:B5:CE:EA:5D:CF:26:AC:0B:BB:CF:17:23:E2:33:E0:56:12"}}},"request":{"raw":"GET /s/player/1798f86c/www-player.css HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 58076\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 08:25:40 GMT\r\nexpires: Thu, 11 Feb 2027 08:25:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 11 Feb 2026 05:32:37 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 451077\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":528267,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"689aad9822555d9dcaefb16a99654e94","sha1":"99da7781808c4a7eab7850cbb220776efbed6a8b","sha256":"e73a47994fe46c3ca05cd3ef31752f0ad98c50d05aa83925177ae0d422d4e202","sha512":"8b7b51dcf2e511d7d28037d3f9920d998d52fb67e9226764a1abb0edad40eb853cd9b09f0a3595e4460fd7fc33611c8aa32b80a61493cb93f17dce865b9fe5e5","ssdeep":"6144:Gg/+vm2kqMMg7UFBhBYoNuf5kg5gGo6o7m:6eUMMg7UF2oQf5kg5gGo6oK","tlshash":"83b4ea72f0d1233cf21b8d9997d9964d7239d983e2e22aeff11165dacbc77811326206","first_seen":"2026-02-09T09:16:33.95964Z","last_seen":"2026-03-21T02:12:24.015624Z","times_seen":8445,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/32/en.png","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 01:26:30 GMT","end":"Mon, 30 Mar 2026 02:26:25 GMT"},"fingerprint":{"sha1":"37:EE:38:DC:51:7B:DE:E1:29:DC:0E:AE:B0:B2:59:EF:EC:86:33:E6","sha256":"7B:44:5B:17:5D:54:17:1B:E4:42:87:BE:40:D0:27:47:DC:68:F8:47:86:3B:0C:BC:1F:8F:38:85:9F:99:A8:6A"}}},"request":{"raw":"GET /flags/32/en.png HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:43:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1584\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Nov 2022 15:42:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2BpPIBI44gZO9mkBv1X6NQ86Df0RGmh9gIo69VS76ZRIWPZy7p8PayeMSArrlYxUlvjm6TBA4%2Fyh95rKH6JnmTly2t0uCQJYKWE3i90peA%3D%3D\"}]}\r\netag: \"63692750-6e7\"\r\nexpires: Mon, 28 Dec 2026 02:31:15 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-polished: ok\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(89;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nage: 4360342\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9ced799baf02481e-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"049ab73f8bbc28ed5ce406070b1f8a57","sha1":"73d7906533cc94cd4c8452baa15aa4df0436bd99","sha256":"d2e502e93ea5f7f40cbeb9102b1c41a369abeee7954bf8e70bb8d9612ea34437","sha512":"fcbdf3794f7b0b36edfe0e62753fc1c914c373034de51c569400929c9f29fa6b005fde8950a39141d012b4478e61098822a6930d898375ea9bf6b84572fc7ad9","ssdeep":"","tlshash":"3a315c531054d51fda688235f02dd71b30d76e18611b3014c66f5dff3fc2c1a842268b","first_seen":"2024-05-14T06:15:09Z","last_seen":"2026-08-10T08:00:01.076804Z","times_seen":795,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:37.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 02:53:48 GMT\r\nexpires: Sat, 13 Feb 2027 02:53:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 298189\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-10T09:49:56.544313Z","times_seen":960510,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":90,"dns":0,"connect":20,"send":0,"wait":8,"receive":4,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/icon.png","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:38.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/icon.png HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 20389\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20389,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"3c59aff7c3fc6839f53e861429e764f0","sha1":"e2abbb4dd5d554222eca9444e04b81baf2a0fa7a","sha256":"257ff04955884cb46b78168b6465ad422a5841420ce09061ceb028e6017f6487","sha512":"c958ca1c69f697bdf00de0a489a8b5f5f099279a9acff7ec0d9078b5a9b5a185121951887cc175f560357a88dfd9007a7d702b4d190a0f64f42f918d129d9cb6","ssdeep":"384:Mtv2k2tpuP1oR3yYVr5zB3RPwXk2VFAuGA7Dn/6aoY9y1S/s+LLp:vlp/PhoFAr0/6aoEyCfp","tlshash":"dc92e163c316a7fbc19e1663c2eec0b0c23ca1a915ac0a50756f85c2919d38afb5635b","first_seen":"2026-01-31T08:55:30.916547Z","last_seen":"2026-03-30T14:25:36.075239Z","times_seen":8,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:39.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1971\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1971,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$V8g5yJBRAAb1nFEc1ZzeyHXQMTBxc7qnADQBEArZ1G1zNEFk1T71lMjpxihUrOco0rpYh0BKa984FHIwlFHdgAvYWCwluDNlulcJ9KcWngAAASvOAAAAL_QBB-IAUpmVzIFxjbjhsLNOh6KAcVsgd3JJ1PGTp7648_zTw4wGb6ZJRsiiB8baoIhB84vjtT1OUk17yBi0rL4-Ou26n-v0N3OPJ33W9OBzMZNffURsqQkFBP6BGI5kTcQn2ErB5xEKplcuLyXR0vgxEZf4zlXfRYpaS7N-P4eeb7uA5Q__AevYo5FopsaJZmN8V4bDltxdEWDNr-2_Z37MIuNux3Z8j_yHDeYMYsFx01tpJONd__9N3ytFyXG3Lk8bluGoYZoSeJZnBvZBbW4auMrGQAlv3iKLWKOCdC31PshwogiuHw1KPf0wiK7zqb92qAmRurxqMkZW5cJSWf-8hj3_qefYhJLADqxYX__6_awd64FqP4UbHeb3nVsubt5ktB_PJ9BGkynRblMsvGuKOfaF4nSwTH0PbYLMy5ICgZ-TjZGnuICEgt4p_BOO_M-15IfKxxlkZFrQNQbBEjNfbIcIQI-NpGR1bsnKO8kX39hCcE2w2YQxIjCf6qBBQ6t3xI8ng-jSTSYrJJguqRXfK29xKn-UD4gACC54Y0PJXRCOQnBXMhoN9KoXcr8Rk78ANWwibyo2cy10Yp__EBqmaXXgZa0hE2psNTp3yRev-vBG-89K1zhXgMDulqU1p-9sk9YKYtbLLrzk-ObBDPBixo8Ape5MNU0MItkRIA5w2OXEwRvTd__n5CdFrFbESeydP_HR6PuH00EecqpVL8Fa5kBfC7DfiYiXkakv5co3ItTO0S4oUaeI2mrIwzn4ujGqvIFoq5f6C8oNP8u609rY18muKkBdHTQ6dqTDlUqK8HHN9OjJYeThHKxb7_8eO741tKD3hmrHwng7MSxhaLk63mBdqXQ1UihZ_9rjODwUGU52Y64Xxymq3ux5IKiKxGrgJoc5Q0k79Tuio1qejqBtQxco0mtyCixRe2-_9AQwme1K1WWd2ZuHUrPkyoEY7DV-Whbb1kb2ZQFtJPwQW4BlJzh5jDCPw1VduSZwT3YoyphIKQ8KUFpzdbkzZGAoJkOFUjhocwXJDgn6zK0G_HbYPzOxWGkPa9TcX43hEjL9E7NoF-zaMxsTzjVaeVzpuEiD6_S69qbjDYUxlOc5k7Zn1xpK0zelzL5ULYUf8ygI-UzUPwZDo4pVbd5CR1f274Z0NuZq3XUJXxMA2nQHMy7WcbApRe5RAQPvACEDLqOnoa3ze1bqlyVxzvzNRcox3w80kH68b0Yc_ksrhB4gj3QyWSOvUj53F7eTjInMLoFAmjfwt1cxAuZdeW6O0n1avz8vHMaQ3jo3CUmiGeC1J9G0oE2cGKwYBwJKkuaL4FfCfauxbLsna-GdI8U2qtEzogUmNMpMWbLOoYBiKdEQSFtutN_bXvLVvg--tS60daeWszEUZThmCTO6XBTY6aTKedMw-kzPaUGzbnlDJCnq500Y1VIwNAXbaQBvSezqGv1GvjVv7S4FZaEimClN9AcOJ2VGwH9vqaemHiLeC2eUN3gGfVh9_8-udlAEbAnfSJU2TBqoWGBDiunT7cL5xKPq0_xNEgzsMOYjYCBwAGS79MCfWcxOqDMEPyO1QVXAe-UuhX7KpLnRnJQ_1Fpj4W22Ka6oM6ixskmCmp4IUrdxYEnt0cqSVgm6phF_VM5RSs5m0KhXMAdc_ANVj2yaJAUrh7Vl_iDufGoiI9zvX0W7BWTTD0mHyNitIWSKA-ERQPxdm82F4y1XpA5aGaE6L4GcZOzTO-4BMl1IQYUOj2hltCvlnuvZeswJb1iiGiywGNjWMhLoJPo3qmiXypxtiGu8IsN_IlOFFlFL76AgpmvHhyY5SuVFrs68qmM\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Mon, 16 Feb 2026 13:43:39 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube-nocookie.com\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"37a8c2764f9fdef0c782b244fdc465ce","sha1":"d0df3c5faa817872cd2e6b975e56e87a5dc8fe53","sha256":"247d4d9f966e7759c1268263f0c30cf70b31dcfe1a35cf353fd95731f1d400dc","sha512":"d66271224dc0223795b8d3736cc854bb9a57df0484d851b761bdb072e71ec44fcd6ed105a1e59ae015ec89b5b0794d1c66cea766a25aa1da9a69452958b61790","ssdeep":"","tlshash":"45b0121227cc10c41288085543d879c071c964c11d14cef0ac3e845595c05489bcf830","first_seen":"2026-02-16T13:44:05.149286Z","last_seen":"2026-02-16T13:44:05.149286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/Web3-Marketplace-How-Image-1.webp","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Web3-Marketplace-How-Image-1.webp HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 39936\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39936,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2ddfa2209888a3322d08cde6aed6c901","sha1":"3671e07c5b3c8f8443e04835e6c7dc1a90db3e91","sha256":"b1ab88a521383a50e587db6d406f6a754a827255753df8abfcd8a71de556ba24","sha512":"b9b0b94900778daadcb0a589378aff7391862649037ab308b19804e751c5cdafd813f27c10c4e0a1202b09beefdd87f6d4c128ebc6f2e95b367d85381328d665","ssdeep":"768:Vsob9C2XSopJPgGLqctTwZMb3kN6w8RSo95A5jg+UzAF4zBxMUZjbN6ZT0cuwOUa:VsopPFJPHeoIu3y8wo957AF4zfIZY/pl","tlshash":"a703f233dbca076463e6cf690ad11cadebb29b3c08c6c6e09349787461d6f21f54921d","first_seen":"2025-07-01T09:05:17.528549Z","last_seen":"2026-06-22T18:27:43.966141Z","times_seen":39,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":931,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/vendor/js/countUp.min1c12.js?ver=2.0.4","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/vendor/js/countUp.min1c12.js?ver=2.0.4 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 4706\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4706,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4706), with no line terminators","md5":"6db9b099a1472f4d9383c9c0c83d8f88","sha1":"6fdc52f9b9ec2a08bdde5e324fd6e0ec69da482a","sha256":"5eceebb692f4f85b1735f007aab6e4c80dd6636389fc9cbad4fa863f34d3ef83","sha512":"51a8e35a93f009e83f4c00e19c6b3592f60ef6947a008b7bfe34b35d315a9a96636d4ff22845ddb6e418ea86015e95e5bdb6a0b8a8d614a1c0b492224d7fbf7a","ssdeep":"96:RsH6HUqlSOasjE+46RbYi4laJ+bcyaYXaeaA4:Rs/gY+48bZGv4","tlshash":"34a1ff8af5725b110fd713a319070346233756687448846c7cbcabd78de581bbabbb78","first_seen":"2023-03-07T14:38:55Z","last_seen":"2026-08-09T23:05:40.4488Z","times_seen":306,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":598,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/Web3-Marketplace-Hero-BG-1.webp","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Web3-Marketplace-Hero-BG-1.webp HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/elementor/css/post-456a518.css?ver=1750753010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 636728\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":636728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67343ea911de67d8f3ddf1fbe75caecf","sha1":"40e54af112ad9b082cebaa6703c41698bc866840","sha256":"a47fa4627155eee9de729acf7203871f9217a20548e5b3509f87c8da2daff039","sha512":"0f5bf69e4c0baa3af706815a573380eecdb0ab535e0fc845ce92a3e8a29014b86de780eace8564346c16683ffeb06e52797a0ab641b99bac998bf613379045d5","ssdeep":"12288:L7fystXB+r9hfymyIQYAwoQUDyV9oXBfG3ExXRAe1ur/X0c3nSGtMKWeqX:KstyhaaQYAWU5GGXKb/Ec3SGA3","tlshash":"99d423a7d39c6bdbd189a77e58b30324b4bb823f8db481075b4111fac518c29ce0e796","first_seen":"2025-07-01T09:05:17.530176Z","last_seen":"2026-06-22T18:27:43.955636Z","times_seen":42,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":109,"receive":402,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1239\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-10T09:48:31.908178Z","times_seen":417511,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":447,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:43:37 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e151-4684\"\r\nexpires: Mon, 16 Feb 2026 13:47:09 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:21 GMT\r\nx-77-nzt: EwwBuUwJCgH3GwAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: e2f754203cf675ee091f936957094b11\r\nx-77-cache: HIT\r\nx-77-age: 27\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":62,"dns":33,"connect":8,"send":0,"wait":8,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/Web3-Marketplace-How-BG-5.webp","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Web3-Marketplace-How-BG-5.webp HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/elementor/css/post-456a518.css?ver=1750753010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 316408\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":316408,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"678e4a7e26d521eb23b9bb932fdc1003","sha1":"bd0e430fcfda814a8a8cd47760011ddc8bbd2861","sha256":"4f7c701cb5aadb97d74c53637cd32e7eb9935eaffd74400c9b8c285035351dfa","sha512":"167285f3a54897869787cfc91025bb7165effe7fde70ca04e344aa93fec7f663c929e8c733c108f60b9ab4dbb5e0b77daa0c5c206e879bbdf8fa3f17b2625bbe","ssdeep":"6144:Qin9ZNMbEks8Eqfo0bTK4MsgJmL6dSj6SIrW97LDAJeSr/zh5Qebyw/NMTZdNRDa:d0s4o4iSj6W1LDAxrLh57YZdN1i","tlshash":"6964238024735f39965decc3926982ec039ec685e486fe16d4bd2de1e772647f5802f2","first_seen":"2025-07-01T09:05:17.543736Z","last_seen":"2026-06-22T18:27:43.967088Z","times_seen":43,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":208,"dns":0,"connect":0,"send":0,"wait":99,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/Web3-Marketplace-CTA-BG.webp","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Web3-Marketplace-CTA-BG.webp HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/elementor/css/post-456a518.css?ver=1750753010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 637230\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":637230,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3bac95c1a95e4b207b57cf54389855f","sha1":"9f187d3d2b0a082c7616497d16941b7727cb9e0a","sha256":"db213261d343410d6b8a9289167b1f20fa94477bafb709118a35c4de9f8de844","sha512":"9483734096ca6c4ddeffebe07f547dc2804c49f2f9876f152e6b4ad138394a5587b877618d2f34fbae69ab29e99445e7df3f592f109753292f5a07a90ceb2333","ssdeep":"12288:tJHVdfgPjPT+KtXSqlOFiK9tStgQdEtIhfhewL6jDB3:t6bT+GluP9tEJet2fhFuvp","tlshash":"5cd42326119acfeddd070afcd7d0be42e38d7e850d9e9f6d049d9453268ec92190cab2","first_seen":"2025-07-01T09:05:17.531817Z","last_seen":"2026-07-08T04:33:31.130065Z","times_seen":45,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":429,"dns":0,"connect":0,"send":0,"wait":125,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/uicore-global1d25.css?ver=9337","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/uicore-global1d25.css?ver=9337 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 117011\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117011,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2058537fe1033df2190158c42b881279","sha1":"c1a6d5ff8d58cd897f080efc3ae151e3da2b8ac3","sha256":"0e8e7d0cbde6ad4a9b6b651bc5d3f6dbf0e9d51fb3f9c4f66699b2cd2e3394f2","sha512":"162d492d6b9106b822c8728876cc21aaba577ff87c4666bdfaac3bbfb848775d17dfc027d433faca6a349236981ac22bc11f6f9a59747ff540ca5731329ef448","ssdeep":"3072:iMfoTCI8TKgp1MK3zFjnrui9hYWMgaVzPNxMnPgtBlj:jfoTCI8znjYWMg6xVj","tlshash":"dfb39590fd4218342bb3411ef6c99edf1b24b18eed4e58ddfc605aca07cb6e6036594a","first_seen":"2026-01-31T08:55:30.906885Z","last_seen":"2026-06-22T18:27:43.94713Z","times_seen":18,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":352,"dns":0,"connect":0,"send":0,"wait":99,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/css/ep-helper166d.css?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/css/ep-helper166d.css?ver=7.19.6 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 38160\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38160,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (38160), with no line terminators","md5":"f8b25d9f197c70d7348ca4dbbd859788","sha1":"630da205f438fd11b92643d548ce7bce66a8ea9a","sha256":"8aa6b937a79559f291ed0fea5c9f5ca39a25c3104bbebd489318b8f36b4d54af","sha512":"fb97ae4b97cf0e5448b2b6370dc946457b7df52c6d0debc22e5f00170fada22fa6c2d0dcaffeb277e680d46c2f4a82faecb92001a5534bb50ebd8738887f5ab6","ssdeep":"768:P2VVT+AgCdBeDaEISc+R0hOFx+fCGcvcctTD8JStp:XDasH","tlshash":"d303de467f432028b51b092ae7ebd518e57478c1f6428d9ca6e5683687fbcd8233e53c","first_seen":"2025-01-02T15:45:11.245696Z","last_seen":"2026-08-08T06:16:44.699159Z","times_seen":504,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":102,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/css/ep-advanced-icon-box166d.css?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/css/ep-advanced-icon-box166d.css?ver=7.19.6 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 8791\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8791,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8791), with no line terminators","md5":"60018f8471701328419ac604d5b05679","sha1":"38cf12fa27c6012ce0e8c1cbd8b15c1d6ca2c0c6","sha256":"5303a694b93a9b00ca42ddd86dfb9fa6c45f33a398a634ce64b23aea7d4e18f5","sha512":"1f5d7a457137149787b225ef94c19cf58cfd5069d10effaac4bc8ce01e921ef21ae099438f7388420ed541fdb5173228001fc328eabed045a062e68f30b8abf4","ssdeep":"96:nkXXsMlsM0nLohurhVWXDQZYuWrOARdUsMezv:nkXcrnnchurhVIQZYuWrOARdTDzv","tlshash":"bc025c116a03042647325197c3cbb56bb5616f22fed32dcb6246d921c8ff09f498dbba","first_seen":"2025-03-18T04:53:51.83159Z","last_seen":"2026-08-04T02:21:17.69781Z","times_seen":226,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":288,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/uicore-global1d25.js?ver=9337","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/uicore-global1d25.js?ver=9337 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 15926\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15926,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15454)","md5":"0b0a969277083f089f4e5c83673a3c17","sha1":"009515d45a1c85957b1271b2fa8848d75695dff0","sha256":"c7beee5e8c95bb19ece47185d2bb0ad36e67d421568bfc8de87ced6fe9a52243","sha512":"a0dfd6f06d165ec9486872459c2d860015604290af588011b3c2976d7a1b03ae126920c19edc18c5bdbac8b03342cacc2e6e6c3dcceb6469189a7bfaa2e1f65f","ssdeep":"384:sFDoEHU7g80J1W/Cd01Rpxqshsk7b44M/:ADoEH9PJk/Cd01Rpkshsk704M/","tlshash":"cf626348e15120bd17f711b9b42fae8f2732392d9e1c904e3939cc990f26b9913b7999","first_seen":"2025-07-01T09:05:17.541238Z","last_seen":"2026-06-22T18:27:43.976912Z","times_seen":43,"resource_available":true,"data":null}},"time_used":655,"timings":{"blocked":557,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/cdn-cgi/rum?","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:38.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1041\r\nOrigin: https://ledgerqfsconnect.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1041,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1458,\"startTime\":1771249415870,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"1dc63440-a18a-41e3-97e5-700600cf1b32\",\"location\":\"https://ledgerqfsconnect.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":1658,\"domContentLoadedEventStart\":1672,\"domContentLoadedEventEnd\":1679,\"domComplete\":2254,\"loadEventStart\":2254,\"loadEventEnd\":2254,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"http/1.1\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":19,\"domainLookupStart\":20,\"domainLookupEnd\":20,\"connectStart\":21,\"connectEnd\":218,\"secureConnectionStart\":119,\"requestStart\":218,\"responseStart\":314,\"responseEnd\":314,\"transferSize\":109108,\"encodedBodySize\":108896,\"decodedBodySize\":108896,\"name\":\"https://ledgerqfsconnect.com/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":2254},\"siteToken\":\"3391683c5c0a4cfd9505ad8c1b72aadd\",\"st\":2}"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:38 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-10T09:01:05.165576Z","times_seen":146702,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:38.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:38 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-10T09:01:05.165576Z","times_seen":146702,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/youtubei/v1/next?prettyPrint=false","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:38.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"FC:29:4D:58:5E:E6:74:45:80:0C:2C:FE:14:2F:15:E5:F5:52:19:FC","sha256":"97:7E:CA:18:F0:30:B2:D8:F5:C6:F8:72:E1:CF:30:B5:CE:EA:5D:CF:26:AC:0B:BB:CF:17:23:E2:33:E0:56:12"}}},"request":{"raw":"POST /youtubei/v1/next?prettyPrint=false HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtrbjBvclJBQTFFTSiJvszMBjInCgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBa\r\nX-Youtube-Bootstrap-Logged-In: false\r\nX-Youtube-Client-Name: 56\r\nX-Youtube-Client-Version: 1.20260213.01.00\r\nContent-Length: 3312\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3312,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"remoteHost\":\"91.90.42.154\",\"deviceMake\":\"\",\"deviceModel\":\"\",\"visitorData\":\"CgtrbjBvclJBQTFFTSiJvszMBjInCgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBa\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0,gzip(gfe)\",\"clientName\":\"WEB_EMBEDDED_PLAYER\",\"clientVersion\":\"1.20260213.01.00\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"originalUrl\":\"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\",\"platform\":\"DESKTOP\",\"clientFormFactor\":\"UNKNOWN_FORM_FACTOR\",\"configInfo\":{\"appInstallData\":\"CIm-zMwGELHJgBMQiIewBRCUg9AcENbc0BwQ4-vQHBDT4a8FENnE0BwQlLbQHBCL988cEK7WzxwQ4IKAExCY3dAcENjX0BwQjOnPHBDx4dAcENr3zhwQ-s7QHBC36v4SEJX3zxwQvYqwBRDJ968FEImwzhwQwY_QHBD2q7AFEIeszhwQgc3OHBC45M4cEMCq0BwQ9tbQHBDGxs8cEMOq0BwQvbauBRDevM4cEPrc0BwQlP6wBRDxtNAcELyk0BwQyPfPHBDM364FEJmNsQUQ0MKAExCe0LAFEKa20BwQjbDQHBD8ss4cEPCcsAUQ3OrQHBC72c4cEL2ZsAUQ9seAExDildAcKkBDQU1TS2hVaC1acS1ETGlVRXBRQ25BN01CYmJQOEFzeW9Ld0VBODNfQmN1M0J2c211TjBHOWdfZDh3TWRCdz09MAA%3D\"},\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"acceptHeader\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"deviceExperimentId\":\"ChxOell3TnpRMU9ETXhPVFUwT0RJMU1UZ3dPUT09EIm-zMwGGIm-zMwG\",\"rolloutToken\":\"CJDo_N_SmcydqgEQvfXQopLekgMYvfXQopLekgM%3D\",\"screenWidthPoints\":568,\"screenHeightPoints\":500,\"screenPixelDensity\":1,\"screenDensityFloat\":1,\"utcOffsetMinutes\":0,\"userInterfaceTheme\":\"USER_INTERFACE_THEME_LIGHT\",\"timeZone\":\"UTC\",\"playerType\":\"UNIPLAYER\",\"tvAppInfo\":{\"livingRoomAppMode\":\"LIVING_ROOM_APP_MODE_UNSPECIFIED\"},\"clientScreen\":\"EMBED\"},\"user\":{\"lockedSafetyMode\":false},\"request\":{\"useSsl\":true,\"internalExperimentFlags\":[],\"consistencyTokenJars\":[]},\"thirdParty\":{\"embeddedPlayerContext\":{\"embeddedPlayerEncryptedContext\":\"AD5ZzFTxiK-xWMpRntZOqkqC_C3ZOB8j3bXuQR01Ybj4MBqus3JNOUbGhE2eMyBaPSOI7eZVgwIBcmjq6NxAaWZxfF_0v1b2XzCuBw7ACZ7DwHuILpRxGihC4wGlIPkpOwKwTNaDZA\",\"ancestorOriginsSupported\":false,\"ancestorOrigins\":[],\"autoplayBrowserPolicy\":\"AUTOPLAY_BROWSER_POLICY_ALLOWED_MUTED\",\"autoplayIntended\":true,\"autoplayStatus\":\"AUTOPLAY_STATUS_UNAVAILABLE\"},\"embedUrl\":\"https://ledgerqfsconnect.com/\"},\"clientScreenNonce\":\"NjTH4H5mybyyXQCn\",\"adSignalsInfo\":{\"params\":[{\"key\":\"dt\",\"value\":\"1771249418019\"},{\"key\":\"flash\",\"value\":\"0\"},{\"key\":\"frm\",\"value\":\"2\"},{\"key\":\"u_tz\",\"value\":\"0\"},{\"key\":\"u_his\",\"value\":\"2\"},{\"key\":\"u_h\",\"value\":\"1024\"},{\"key\":\"u_w\",\"value\":\"1280\"},{\"key\":\"u_ah\",\"value\":\"1024\"},{\"key\":\"u_aw\",\"value\":\"1280\"},{\"key\":\"u_cd\",\"value\":\"24\"},{\"key\":\"bc\",\"value\":\"31\"},{\"key\":\"bih\",\"value\":\"-12245933\"},{\"key\":\"biw\",\"value\":\"-12245933\"},{\"key\":\"brdim\",\"value\":\"0,0,0,0,1280,0,1280,1024,568,500\"},{\"key\":\"vis\",\"value\":\"1\"},{\"key\":\"wgl\",\"value\":\"true\"},{\"key\":\"ca_type\",\"value\":\"image\"}]},\"clickTracking\":{\"clickTrackingParams\":\"CAAQu2kiEwjA64yjkt6SAxVSsPQHHe9gOM_KAQSpw4M_\"},\"activePlayers\":[{\"playerContextParams\":\"Q0FJU0FnZ0M=\"}]},\"videoId\":\"2Sd1lGBTLrg\",\"racyCheckOk\":false,\"contentCheckOk\":false,\"autonavState\":\"STATE_NONE\",\"serializedThirdPartyEmbedConfig\":\"{\\\"disableRelatedVideos\\\":true}\",\"showContentOwnerOnly\":true,\"playbackContext\":{\"encryptedHostFlags\":\"AD5ZzFQpw6ttOWazKiRmOIXfuXSJzpgv2Sl_wmzGZJc42k_fJoUubbAsswGGf54RfZZ3cBplTl0aMZUeUTAJYpIQ-yn29gNmqhoLoQVAkoeDPSwnBPSLBMNLvPLz82Zr77-5\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Mon, 16 Feb 2026 13:43:38 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 1181\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4036,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"301493496b424687079a6961c21565d8","sha1":"42ffa37a4facba4bbe7789fbda9acf5498a75ea6","sha256":"ac2317d9f6c43ef11e351fc27616cc49b3612df417821236e02c9786bd6f9033","sha512":"511d33075be730fb7cd0194df92eda48e350249d5e1c9df10ae54cd63b50178b2d9aef71d62faa9727f51fab08af280755bce013a3590af14138aa2a09e08271","ssdeep":"","tlshash":"2d8144dd19a7a0fd46c197519147ac37363d295ae38d1a8c62e8fbe807def1c2c59082","first_seen":"2026-02-16T13:44:05.157399Z","last_seen":"2026-02-16T13:44:05.157399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-16T13:43:35.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 108896\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 19:50:46 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor:3.28.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:6.8.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":108896,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2906), with CRLF line terminators","md5":"1d0901c40a8f2c62f3438b353fe3736d","sha1":"d5e10756944abea86914ca73b51cdc99ef39dde3","sha256":"58c2c68f3679d2b73d10683d68a3bfc7bb5a7c111c6ed938f5a48a240d92191e","sha512":"b653f2a18f23d79c111d37e405257e685874b07b19a59affc592325995636cb7b519bc76fbd95b2ef95eaaad4dd1604fda2099ff2e19b76229f879dbd5c7670d","ssdeep":"1536:u//dus/MJK6dQVjqf9gVJw0JzIJJC/uK9TvSuAJY6BOB5NvO2qCtq:uNdMdQIDoICWK9TvSMbi","tlshash":"13b30e10799b942a216f11cf8037274da0cbdff9e662a6e5f4f8523293f4c943ae3165","first_seen":"2026-01-31T08:55:30.919634Z","last_seen":"2026-03-30T14:25:36.089852Z","times_seen":9,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":198,"dns":1,"connect":95,"send":0,"wait":190,"receive":189,"ssl":100},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-advanced-counter.min166d.js?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-advanced-counter.min166d.js?ver=7.19.6 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 760\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":760,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (760), with no line terminators","md5":"277e45333e2269befa77dbca154c119e","sha1":"cc3068f8a96132fb6ab5ebec2c84ffecd49cad6c","sha256":"fc26adc34dbe06d708f85c102bc8f8502050090944de09e390deca51dcc110d0","sha512":"85e7527bd61e49930a5cfe759a18e4e33a164da4f62d1cc6dba312e7a1c92e921594497b37fe5c439c476578bdc66c4bf957e9205621214ff2c769d9a664e441","ssdeep":"","tlshash":"c70120b0b9439106287fb037b24f023921b61c79a22a5cc8d2d4046141fbf7a7a69fb2","first_seen":"2025-03-18T04:53:51.863471Z","last_seen":"2026-08-04T02:53:18.599922Z","times_seen":148,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":515,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/uicore-animate/assets/js/splitd63f.js?ver=2.1.5","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/uicore-animate/assets/js/splitd63f.js?ver=2.1.5 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10377\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10377,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10371), with no line terminators","md5":"2343161c6a1aec0560c94428009da155","sha1":"a4a54522ca5a76478a46e968e95fd7adfba5d7b2","sha256":"b1b109401d001890efb10743c408f2a26df09d711036e5bf6557f180721eb1a4","sha512":"0c539c3f0376f57b15b0c6dcb1e927b6d72a805b98d01e25c2746a34612dd04f994e4c2a6f7975d734c40aa7ba3b4b6383f887049f3f7118dfd8c91ab794d5e7","ssdeep":"192:c5zNgwEE+GW2j+M7r4N7uoSqphFhlXNe9:6iwEEbWY+M7r4NSine9","tlshash":"c822a3987162b0f217ab7173006f251eb3742a6c9868c060a238f4f53db5c69637bf79","first_seen":"2025-06-05T03:41:41.804349Z","last_seen":"2026-06-22T18:27:43.978338Z","times_seen":42,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":619,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-includes/js/jquery/ui/core.minb37e.js?ver=1.13.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.minb37e.js?ver=1.13.3 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 21464\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-10T09:50:32.425339Z","times_seen":340523,"resource_available":true,"data":null}},"time_used":808,"timings":{"blocked":709,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/Web3-Marketplace-Numbers-BG.webp","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Web3-Marketplace-Numbers-BG.webp HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/elementor/css/post-456a518.css?ver=1750753010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 20390\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d925a4b35ec997aa9d996ce6d8a99e57","sha1":"bd66f0e5dd988b30a80c56c2d5aa913a49f8f293","sha256":"99b57dd67db446ef40834bfe245f2f18abc9935566950f5d7fc0c0981857b048","sha512":"fb9aaf689ab7ead227ef1f3c9dcded8445b7342991d7fa7b81d55dfa1bcc5bc5374bed47a63f9cc7331216b685ecd0b5aff1850e27db779b7e0b210e4a0d3dbe","ssdeep":"384:sLRNwnH2HmaZptaiYDwmlS5Tr52hXLhSPCbnTwjzU9fAUC+iV:MjmWHmaPAiYD3SZch7hSGc6AXzV","tlshash":"eb92af46b09aa889d4390336cadfc4608ceaf85e2af604e57f579ac45dcdf40d2452be","first_seen":"2025-07-01T09:05:17.549427Z","last_seen":"2026-08-08T06:16:44.671506Z","times_seen":51,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/Web3-Marketplace-How-BG-4.webp","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Web3-Marketplace-How-BG-4.webp HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/elementor/css/post-456a518.css?ver=1750753010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 343448\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":343448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c885b3baaddecded138815c7a74862e","sha1":"764bc02050f0fc6c294a82fa1b42ef3b15e60125","sha256":"2bed3cea639db51c1f7c5927beb3733469d81df83194954cc00d4461f8db95e8","sha512":"3df3146dd7455f010650173f74e0df51587c8b313afe5fe3dead5c792a921eda8c39d47c0ff5f7131591d5389ac00eca70712e699a1f4a40decb06a01fc8bad7","ssdeep":"6144:dKaQnJUQGmAEwml13Iwq61k+9Gp5etbiDUS7XbSQAxzUEaOV5oCS:jQ2Mwqdf6GbQUS7fA6O7S","tlshash":"287423edb601d03759e6381b24eb37c3edf67a0636372fb9b02fe9061849559a1d3809","first_seen":"2025-07-01T09:05:17.537887Z","last_seen":"2026-06-22T18:27:43.956755Z","times_seen":43,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":107,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/s/embeds/5f388a60/www-embed-player-es6.vflset/www-embed-player-es6.js","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:37.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"FC:29:4D:58:5E:E6:74:45:80:0C:2C:FE:14:2F:15:E5:F5:52:19:FC","sha256":"97:7E:CA:18:F0:30:B2:D8:F5:C6:F8:72:E1:CF:30:B5:CE:EA:5D:CF:26:AC:0B:BB:CF:17:23:E2:33:E0:56:12"}}},"request":{"raw":"GET /s/embeds/5f388a60/www-embed-player-es6.vflset/www-embed-player-es6.js HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 105724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 13:47:24 GMT\r\nexpires: Sat, 13 Feb 2027 13:47:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 13 Feb 2026 10:08:08 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 258973\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":343550,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1196)","md5":"dd6dbfb8231cee60d43dde2b8c7431df","sha1":"99fe467b0cd5a4aa6737ee22f362105470e5f472","sha256":"54520e29448feb53676739f82097969bacd1608553787673fd03d559c84fd9f3","sha512":"3b9108ee3abd2a809f0942f77790f74325196bf00dac156d20f7d813d138dbd883ea0402ccf86c629dc8837a964b654b1d015815dfc72c6a821a8e00844cb65b","ssdeep":"6144:rF5Q9soeI8m3E/Es2nYDYqnQ0Z2caNeE3VxXFdbwrK3MKzWW8cD5PYh7fnyiJAbP:rF5Q9soeI8m3E/EXYDYqnQI2crE3VxX/","tlshash":"c1745bc977a2706742a294f4903f1502b538a896f80cc8bcb59cdcda6d2595a43bbf3d","first_seen":"2026-02-13T07:08:20.023724Z","last_seen":"2026-02-17T18:07:18.47751Z","times_seen":3644,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/elementor/css/post-4578f3c.css?ver=1750753009","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-4578f3c.css?ver=1750753009 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 16066\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16066,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16066), with no line terminators","md5":"9414bed656a68805a549388d7bb5196e","sha1":"b9665c646eab0c41e7e8cbee4b70a2e0ac0e71ac","sha256":"fec27b690821146c2c9a1ddb7d50356ea34d6fdbd3aa6b9c0211afe07aefc7bb","sha512":"d745ae90391f46aa68d553f245584dfd36ae681ccaddf713a2f03353b7520780b1eaee1bb1787a309c1f53c54f38e6eb05542b7b08e641b79c5346774744ec9c","ssdeep":"384:Cd/kDZJE1ZsxVvKLenKYdLSe3eh0KKvcpNLwLXvGf3SrjVwn6aqb6Oigs+5IR/RJ:Cd/kDZJE1ZsxVvKLenKYdLSe3eh0KKvS","tlshash":"2372b4c63c97995eb6bf310b5563688c2428dccee87af9e7f0121317e535e913ba05a0","first_seen":"2025-07-01T09:05:17.55971Z","last_seen":"2026-06-22T18:27:43.946424Z","times_seen":39,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":177,"dns":1,"connect":95,"send":0,"wait":190,"receive":1,"ssl":103},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/css/widget-heading.min87cc.css?ver=3.28.3","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min87cc.css?ver=3.28.3 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 600\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"9e595d40f6d8a2175d3048e416323ef2","sha1":"b3fca9cf0fea5244fe32a2b7e672c3c20148b44d","sha256":"7bad7255ed457909728039d3f74cca751190d68953873454a4df0ee33751b545","sha512":"024c54df670f73b5d8011bf1450f3fc5870c983b25456797961c7f07bdb4365b36635f2d3971e301c754a2c2411b28622d474688be6055f935977507edc73a91","ssdeep":"","tlshash":"53f019237d4b9469783f19571183377c74944ec893a0a4d8edfa91436df4cb67370611","first_seen":"2025-04-07T06:02:40.075969Z","last_seen":"2026-08-08T22:55:10.842985Z","times_seen":2672,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":187,"dns":0,"connect":97,"send":0,"wait":104,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/uicore-framework/assets/fonts/themify-icons8a54.css?ver=1.0.0","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/uicore-framework/assets/fonts/themify-icons8a54.css?ver=1.0.0 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 18538\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18538,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8cca3269bb414057119e66cf069be7a7","sha1":"8e3075d32f749e4cc3e6a194d4434911200fec4e","sha256":"11238ac98b3367ce9858e69bb5fcfe6c467d58336e3138f3400764d3a1552c00","sha512":"dfedd0150a0aab004727238d58dc4c54965cc9b965239394559771e3ce025da6ec9fdecf82b413bcd5acc9f6be67f26048c8adc49fdeff16810dcee2cf64d20e","ssdeep":"192:Wvz2e2S39QGqlDsUNfPxaRwyz/UPLfKP6ziby0Ln/yT:Mz2Sq5ljawyIPDziWWn/c","tlshash":"e082fff894ea14941721d761a393fa26eb4e7272cb434c5cf203da6c5ee7a1181c2ecc","first_seen":"2024-08-19T21:54:40.363691Z","last_seen":"2026-06-22T18:27:43.969582Z","times_seen":30,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":383,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/uicore-animate/assets/css/splitd63f.css?ver=2.1.5","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/uicore-animate/assets/css/splitd63f.css?ver=2.1.5 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: text/css\r\nContent-Length: 1663\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1663,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1663), with no line terminators","md5":"39f38077ca6006ff6aa05d6812e5c26f","sha1":"02352568c234b65de0e0747b9e14bea53712138e","sha256":"2ef21cdf27e0702b56a42d223658d5806ac2db3f0f9c101204ed7a5518cf1275","sha512":"4343602b60d5dac3156499522a2de5338690d8900f92ef4cf990bc647870976126553bd37037f9edceb404cdc26c756904683d3ff53f0e02a2e9d7b366de1017","ssdeep":"","tlshash":"4331cf45da86567c7e235bf147cd49ec793488819c2268b5b23002cf09851b523af63f","first_seen":"2025-03-06T14:59:48.267829Z","last_seen":"2026-08-09T23:05:40.447041Z","times_seen":165,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":450,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/uploads/2025/06/Web3-Marketplace-How-BG-6.webp","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Web3-Marketplace-How-BG-6.webp HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/elementor/css/post-456a518.css?ver=1750753010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 330492\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330492,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a498d599c38a4c93f7c16b50e580b18","sha1":"e5383e58c95164872aa00d277a3db9620980345a","sha256":"3c78bdd318eb8608812014d02aa9e89f98c5a9c9d4c1db50dfed2b104fb36f0e","sha512":"a5d7e6d606e9b7c0245c76db4a79e2f9c34f254877ecd447243a2d097657ec1eddbfaafb123f1104a564d050f7119080aa3aad8a5e403c6b63aaba34a8211fa5","ssdeep":"6144:i5b9Kec5OFyIXrapO6u+MjNo/00Et5E8b1NWfliB+8INPAqJ:c8sWaNo9Ewex+8oz","tlshash":"be642384a5625cd4d1c93ca725ae2f359d29f286a3130ee12325c2a1c279be3f3575e3","first_seen":"2025-07-01T09:05:17.553515Z","last_seen":"2026-08-08T06:16:44.759146Z","times_seen":48,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":230,"dns":0,"connect":0,"send":0,"wait":99,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/uicore-framework/assets/fonts/uicore-icons.woff","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/uicore-framework/assets/fonts/uicore-icons.woff HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/wp-content/uploads/uicore-global1d25.css?ver=9337\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:37 GMT\r\nContent-Type: font/woff\r\nContent-Length: 11260\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11260,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 11260, version 1.0","md5":"1932aa932b3612314b204b0bb8e29fc6","sha1":"c6f8e2d59620c2c150b57e94f04066c6c57525cc","sha256":"22bee838ea6f3b6d855f48f1c8bae7e5f2140327a550e32efe8f2e8c050bfeeb","sha512":"081ce3be31ea920807240b7a36630f97f503e34a441629056efecdc38dbf9832507157a148a29573aae41e601de52f56664a081e44e7063e61468d13a41b2ef7","ssdeep":"192:TkHSmW7veWTQnq2Kmc/IlJHjeX6UztmmB0RYxZRRYVjtbUiOHQuvnnWsTK:AHSmWZyemCCeX3ZRYVjNYbnW5","tlshash":"79321a16e787cfaed965ca710daf53215ee2c632c73ec38244c61dd294248e84e396de","first_seen":"2023-11-11T16:42:42Z","last_seen":"2026-08-10T05:35:00.795728Z","times_seen":820,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/bdthemes-element-pack/assets/css/ep-fancy-list166d.css?ver=7.19.6","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:36.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack/assets/css/ep-fancy-list166d.css?ver=7.19.6 HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:36 GMT\r\nContent-Type: text/css\r\nContent-Length: 3668\r\nConnection: keep-alive\r\nLast-Modified: Fri, 16 Jan 2026 00:42:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3668,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3668), with no line terminators","md5":"56c2e12fc58f27d00aa0b2bfa9251698","sha1":"e877bb7f681edb724a2499d2c442acd4696210aa","sha256":"7ca630277a4abb31400406ada289dc786050699716864688c17a9c0edb7eee72","sha512":"f1b0eec563fa3fcd9506fa84c5c64be4e731e328d132b8cab9fd94f50442c01c6195f6ecd10aae01382e68e45b845af705f5df4a139d1fd4b9d1a8b2016d1f2b","ssdeep":"","tlshash":"1f7122284ea91c08e0c78152d3cc967591acfa03bd71cbffe6942f254ec74ce12ad65a","first_seen":"2023-11-18T08:43:10Z","last_seen":"2026-08-08T23:00:20.554377Z","times_seen":109,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":296,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerqfsconnect.com/wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js","fqdn":"ledgerqfsconnect.com","domain":"ledgerqfsconnect.com","tld":"com"},"ip":{"addr":"149.56.180.36","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerqfsconnect.com/","date":"2026-02-16T13:43:37.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerqfsconnect.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:43:21 GMT","end":"Mon, 13 Apr 2026 16:43:20 GMT"},"fingerprint":{"sha1":"C2:F1:FA:81:BD:09:F7:E6:EC:44:45:C5:A4:FA:13:47:09:5E:15:8D","sha256":"A9:0E:AA:B2:2D:79:D5:E7:15:B8:46:EC:B0:24:FD:DA:85:F3:87:58:13:0F:2C:6B:1D:83:6F:9B:D2:15:DB:FF"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js HTTP/1.1\r\nHost: ledgerqfsconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerqfsconnect.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 16 Feb 2026 13:43:38 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-10T09:01:05.165576Z","times_seen":146702,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"ledgerqfsconnect.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"ledgerqfsconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/youtubei/v1/player?prettyPrint=false","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-02-16T13:43:38.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"FC:29:4D:58:5E:E6:74:45:80:0C:2C:FE:14:2F:15:E5:F5:52:19:FC","sha256":"97:7E:CA:18:F0:30:B2:D8:F5:C6:F8:72:E1:CF:30:B5:CE:EA:5D:CF:26:AC:0B:BB:CF:17:23:E2:33:E0:56:12"}}},"request":{"raw":"POST /youtubei/v1/player?prettyPrint=false HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtrbjBvclJBQTFFTSiJvszMBjInCgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBa\r\nX-Youtube-Bootstrap-Logged-In: false\r\nX-Youtube-Client-Name: 56\r\nX-Youtube-Client-Version: 1.20260213.01.00\r\nContent-Length: 3674\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3674,"data":"{\"videoId\":\"2Sd1lGBTLrg\",\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"remoteHost\":\"91.90.42.154\",\"deviceMake\":\"\",\"deviceModel\":\"\",\"visitorData\":\"CgtrbjBvclJBQTFFTSiJvszMBjInCgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBa\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0,gzip(gfe)\",\"clientName\":\"WEB_EMBEDDED_PLAYER\",\"clientVersion\":\"1.20260213.01.00\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"originalUrl\":\"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\",\"platform\":\"DESKTOP\",\"clientFormFactor\":\"UNKNOWN_FORM_FACTOR\",\"configInfo\":{\"appInstallData\":\"CIm-zMwGELHJgBMQiIewBRCUg9AcENbc0BwQ4-vQHBDT4a8FENnE0BwQlLbQHBCL988cEK7WzxwQ4IKAExCY3dAcENjX0BwQjOnPHBDx4dAcENr3zhwQ-s7QHBC36v4SEJX3zxwQvYqwBRDJ968FEImwzhwQwY_QHBD2q7AFEIeszhwQgc3OHBC45M4cEMCq0BwQ9tbQHBDGxs8cEMOq0BwQvbauBRDevM4cEPrc0BwQlP6wBRDxtNAcELyk0BwQyPfPHBDM364FEJmNsQUQ0MKAExCe0LAFEKa20BwQjbDQHBD8ss4cEPCcsAUQ3OrQHBC72c4cEL2ZsAUQ9seAExDildAcKkBDQU1TS2hVaC1acS1ETGlVRXBRQ25BN01CYmJQOEFzeW9Ld0VBODNfQmN1M0J2c211TjBHOWdfZDh3TWRCdz09MAA%3D\"},\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"acceptHeader\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"deviceExperimentId\":\"ChxOell3TnpRMU9ETXhPVFUwT0RJMU1UZ3dPUT09EIm-zMwGGIm-zMwG\",\"rolloutToken\":\"CJDo_N_SmcydqgEQvfXQopLekgMYvfXQopLekgM%3D\",\"screenWidthPoints\":568,\"screenHeightPoints\":500,\"screenPixelDensity\":1,\"screenDensityFloat\":1,\"utcOffsetMinutes\":0,\"userInterfaceTheme\":\"USER_INTERFACE_THEME_LIGHT\",\"timeZone\":\"UTC\",\"playerType\":\"UNIPLAYER\",\"tvAppInfo\":{\"livingRoomAppMode\":\"LIVING_ROOM_APP_MODE_UNSPECIFIED\"},\"clientScreen\":\"EMBED\"},\"user\":{\"lockedSafetyMode\":false},\"request\":{\"useSsl\":true,\"internalExperimentFlags\":[],\"consistencyTokenJars\":[]},\"thirdParty\":{\"embeddedPlayerContext\":{\"embeddedPlayerEncryptedContext\":\"AD5ZzFTxiK-xWMpRntZOqkqC_C3ZOB8j3bXuQR01Ybj4MBqus3JNOUbGhE2eMyBaPSOI7eZVgwIBcmjq6NxAaWZxfF_0v1b2XzCuBw7ACZ7DwHuILpRxGihC4wGlIPkpOwKwTNaDZA\",\"ancestorOriginsSupported\":false,\"ancestorOrigins\":[],\"autoplayBrowserPolicy\":\"AUTOPLAY_BROWSER_POLICY_ALLOWED_MUTED\",\"autoplayIntended\":true,\"autoplayStatus\":\"AUTOPLAY_STATUS_UNAVAILABLE\"},\"embedUrl\":\"https://ledgerqfsconnect.com/\"},\"clientScreenNonce\":\"NjTH4H5mybyyXQCn\",\"adSignalsInfo\":{\"params\":[{\"key\":\"dt\",\"value\":\"1771249418019\"},{\"key\":\"flash\",\"value\":\"0\"},{\"key\":\"frm\",\"value\":\"2\"},{\"key\":\"u_tz\",\"value\":\"0\"},{\"key\":\"u_his\",\"value\":\"2\"},{\"key\":\"u_h\",\"value\":\"1024\"},{\"key\":\"u_w\",\"value\":\"1280\"},{\"key\":\"u_ah\",\"value\":\"1024\"},{\"key\":\"u_aw\",\"value\":\"1280\"},{\"key\":\"u_cd\",\"value\":\"24\"},{\"key\":\"bc\",\"value\":\"31\"},{\"key\":\"bih\",\"value\":\"-12245933\"},{\"key\":\"biw\",\"value\":\"-12245933\"},{\"key\":\"brdim\",\"value\":\"0,0,0,0,1280,0,1280,1024,568,500\"},{\"key\":\"vis\",\"value\":\"1\"},{\"key\":\"wgl\",\"value\":\"true\"},{\"key\":\"ca_type\",\"value\":\"image\"}]},\"clickTracking\":{\"clickTrackingParams\":\"CAAQru4BIhMIy8bRopLekgMVM8tPCB1g-B3TygEEqcODPw==\"}},\"playbackContext\":{\"contentPlaybackContext\":{\"html5Preference\":\"HTML5_PREF_WANTS\",\"lactMilliseconds\":\"73\",\"referer\":\"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\",\"signatureTimestamp\":20494,\"autoCaptionsDefaultOn\":false,\"autoplay\":true,\"mdxContext\":{},\"playerWidthPixels\":568,\"playerHeightPixels\":500,\"ancestorOrigins\":[],\"encryptedHostFlags\":\"AD5ZzFQpw6ttOWazKiRmOIXfuXSJzpgv2Sl_wmzGZJc42k_fJoUubbAsswGGf54RfZZ3cBplTl0aMZUeUTAJYpIQ-yn29gNmqhoLoQVAkoeDPSwnBPSLBMNLvPLz82Zr77-5\"},\"devicePlaybackCapabilities\":{\"supportsVp9Encoding\":true,\"supportXhr\":true}},\"cpn\":\"qx_2YSvtnQPsT_sm\",\"serializedThirdPartyEmbedConfig\":\"{\\\"disableRelatedVideos\\\":true}\",\"captionParams\":{},\"serviceIntegrityDimensions\":{\"poToken\":\"IggWYRZgf_IJaw==\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Mon, 16 Feb 2026 13:43:38 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 719\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1547,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5f00d35cabe4ea9e978da34c59d29408","sha1":"5d77f3c5befadd3c527dda431cc92cb749bd2693","sha256":"2f027b56aed15c27ccaad94347c66bd578d15bc21ca4b80808418b68c586ac1b","sha512":"5ec939d6ed5fb6b9552ae0f3b7207d06affb9c005d368dd350fa6760d6e05695094af265f778aae12e8ab661800a0e1faca62539e37481f6e2b0b23d6e70bce6","ssdeep":"","tlshash":"2031ff5e74d198bf07919b88b8076c3b377a37a859dda68c02b5d7c42f98e1c1916cc2","first_seen":"2026-02-16T13:44:05.173035Z","last_seen":"2026-02-16T13:44:05.173035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
