{"report_id":"b5ba2361-6f2a-48a6-8e0a-959fbdfaadce","version":6,"status":"done","tags":[],"date":"2026-03-29T11:37:52Z","url":{"schema":"http","addr":"qfsvaultsystems.com","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":0,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"title":"Qfs Vault System : Most Secure Crypto Wallet App | Ledger","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"qfsvaultsystems.com","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":0,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T11:37:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-29","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube-nocookie.com/s/player/8e54e4ea/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.64.40.220","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-03-26T05:20:44.980442Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":608,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-03-26T03:45:12.774458Z","alert_count":0,"request_count":1,"received_data":18577,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-03-26T05:21:44.391557Z","alert_count":0,"request_count":1,"received_data":7689,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-03-23T01:36:10.547743Z","alert_count":0,"request_count":3,"received_data":1424673,"sent_data":1632,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"18.193.21.76","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-03-26T03:45:13.405541Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":531,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-22T22:38:17.64832Z","alert_count":0,"request_count":1,"received_data":63593,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.youtube-nocookie.com","ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2009-01-23","domain_rank":20734,"first_seen":"2012-05-31T06:37:10Z","last_seen":"2026-03-25T18:27:34.293689Z","alert_count":1,"request_count":8,"received_data":2143819,"sent_data":6711,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":5,"received_data":230027,"sent_data":2803,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qfsvaultsystems.com","ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"domain_registered":"2025-06-16","domain_rank":0,"first_seen":"2025-06-16T21:08:57.371484Z","last_seen":"2025-06-16T21:08:57.371484Z","alert_count":213,"request_count":71,"received_data":1799340,"sent_data":34831,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WPML:4.6.3","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"AB Tasty","description":"AB Tasty is a customer experience optimisation company. AB Tasty offers AI-driven experimentation, personalisation, and product optimisation platforms for user testing.","website":"https://www.abtasty.com","common_platform_enumeration":"","icon":"AB Tasty.svg","categories":["A/B Testing"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Yoast SEO:20.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-03-26T05:20:44.987666Z","alert_count":0,"request_count":3,"received_data":324625,"sent_data":1381,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-03-23T01:24:54.275978Z","alert_count":0,"request_count":2,"received_data":1139,"sent_data":1221,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":22043,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"55f6e24e1db281d6a822aac2fd90cd4a","sha1":"d79d62196af9ca2eca1266791995f813ed66d50a","sha256":"7cdef5521175d0520bc594f93a442b38e860c2c27582adde4055d2fe4677aa6d","sha512":"51e7c82cc604f6903c63ff97938cd3b350defe2bbad0f9a8c011f9b489dba956377ead9f820bd2c8b96c6a204a17f939e46c85d5e4095d0e6ac7e52e921749d1","ssdeep":"1536:zPwyYv07JCgmP/v1gKBIrjZiXQY3zwbWj7Er:gStG/tHB+j4XQw7Er","tlshash":"5c53f6cef2e2b7618df365f1406b110952bea024ecc8545fb905ebf46a7198b802ff65","size":62276,"data":"","first_seen":"2026-03-29T11:38:02.481389Z","last_seen":"2026-03-29T11:38:02.481389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/js/iosCookieDisable9a10.js?id=44730b5943875e2040d5\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c64b87aa832ef6e28500c0cf834f06dd","sha1":"6f1c6f6f737d19fac44695831ca9cc3acad4eb8b","sha256":"0b3a51c9a98ef23c4b4a0b92cab1898acbfec2b6135a965f4e928e18a3a5a270","sha512":"31126be085ce3ea6b944afd1c6573a6903b599448cf022caf32ba7576c16a9438df8553ebcd9839bf4313a7092e26b995c0cc3716aaec53cef64652cfc543313","ssdeep":"","tlshash":"b741638875e6b4749223f060597ec108b535a0c762cfdc81be0e78507fa6a3883b5b88","size":2115,"data":"","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.472063Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/js/globalisation-bar5e91.js?id=aff10185a0d3f46ab6d4\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2eeb3114eb01351bd518b29a2651936","sha1":"7345aaece1cc8c34370ad8bdd11c2fac36e0dbd2","sha256":"cb997566b8a23cd4772dce38b4661b0b3abbdbd573d4cf37f69de114c41030dc","sha512":"54605dd3722a5b7bc26019efc4e48790d386307d3e6d79953bf634339f34d51df684f67bd609a148a443699cadf3d07c6e02fc39f9e6ed387f5c4401817a4e7a","ssdeep":"","tlshash":"6251839668e10431905f605a6d2387487eb420c73d417d01ba2c19e18f9ed2edebbfde","size":2957,"data":"","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.441277Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6ee96911dc8ac303fb4d603b99d3d7ff","sha1":"27cde661b8d0ddf1c212bb336747f992cc190ac2","sha256":"bd39f56b5909312a96a9b0c7c842f620ad07948d4ef75236acef64f3579c64f3","sha512":"06b47dacfdbb6e92f1b084921b668f19d8046e15365cdc1297061c3300b94c0de69eeddb73feae0eb776a49fbbe4cc92255a5f623e09aaa652e348f5cc38e895","ssdeep":"","tlshash":"6ed09728f048b04dcd1a9f2a9c33e0394c2180412dc4cc4aa31a899434bfc0b80a78a8","size":247,"data":"","first_seen":"2026-03-22T09:01:44.929627Z","last_seen":"2026-03-30T07:00:38.087872Z","times_seen":1018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a75db90c17eee73defa78759aa75dfe0","sha1":"f7e221cbbe5c66d82ac2d5102b932b0ae99138e2","sha256":"98064706a301da49f894c64313d5a4513e19347a25db8082eb912bf45467ad8d","sha512":"679c01bc381381542441bcf6f4590110c5620e6fcec8b3e05be479a87abedc727b2d9560751212fced9a46a4d014768ec41111b130d05c1b2f4a38674121c4ec","ssdeep":"","tlshash":"c710000300000000000000000000000000c00000000000000000000000000000c00000","size":2,"data":"","first_seen":"2023-03-13T07:29:26Z","last_seen":"2026-07-25T03:16:09.766615Z","times_seen":1498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"09205aaedcaa25b2fb7bc0597f01e3cc","sha1":"6e8c8b7e530354563bb3f447b27afb81ef3edda6","sha256":"a401657ba32f21365ca2c4252f1b4fa7841735864a1a1f62865841f8c3858148","sha512":"7770b48262d272e15e65366cfa0d7f04b570c50d3090e8985e626595bd82ec047ae45aea92c529dfee93a5b72466ce878b74ab2e979cd68ec8af9051a6ec5224","ssdeep":"","tlshash":"bd8004441c057710435114317437f414c0d5140010c4403c54ccc4d405f05c77711f1c","size":38,"data":"","first_seen":"2026-03-22T19:17:48.852266Z","last_seen":"2026-03-30T06:58:36.800881Z","times_seen":437,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eeab06c71f63e6bd621c830e521e6b6c","sha1":"60d6fa758ffdfd0cb876d659863f3f1839e2e066","sha256":"bac68d6838d8689935de9289dfe65272ce1bc4412c519f89384eb54d319aa4c6","sha512":"40b32ed7807eb32b9719e4845f43588e76ecebf498f8a0f8d41dddaa81add2e05cdd88991a3f78f54ed6b57c0a36aba290214d5ed3a675366805065a58b1c372","ssdeep":"","tlshash":"979002054d508a3d48da1ac752d947c565901c9ee849205500a5a90919409d5a6606d5","size":57,"data":"","first_seen":"2023-03-10T12:47:25Z","last_seen":"2026-07-17T09:02:04.893323Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/js/mained21.js?id=adf58ed476de4b398647\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4c860aa7163271b04e73a4425710eae","sha1":"cccceb009bf1d7cc37e82d978eafc8ac78d7079f","sha256":"f531c5f5f56975c76753ce66b7f0d824098e6275b2261ab40ef6d8286fbad070","sha512":"29885a931e50bbc66ed1380986d1992ff3bce89395d46c32c44741c1a0539e4628cb5573cebc7a6ec45489eadf8953d097ff3c1dc8036aaf6405b611c718d08b","ssdeep":"192:QaG55R2lhCqTiYvJG58HOb0SYgilajEzBilIaUJRwakMaCQ6L3zSSRcwm4WBfMr:QaG5qfhJENoawYIaUJCajaCQm3zSXwmG","tlshash":"3c12532a56a414fd91bb782afa3f633432331513b604e9403d0e91a51f4aa7512faff9","size":9385,"data":"","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.50543Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6569ad796f6a04b21f89cd33ec466672","sha1":"7ab58c69f0bd1c9aefc85f98428c799ec2a934c1","sha256":"5f9ec829411d85ae02fc2ab6503475dc9b628f9dab77a184b6990ed9c1aec039","sha512":"f9ca68e7b35effa2a61fb39922e07c884c075bba9325f066893c15452d4926e48a4335f1590e74aca44fec19149210e477bc5e37261a67110e431ee3b0cd3609","ssdeep":"","tlshash":"81e02bb0370855fd3672b670d7d2a35c512fa240a35c34ea8010c2d2e26da04ffcc278","size":293,"data":"","first_seen":"2026-03-22T19:17:48.832603Z","last_seen":"2026-03-30T07:00:37.996604Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4aae7fd3c815b1cfa3660cb3227a214c","sha1":"4531c0c13ac8462f9dd8f0dff0e13b1c3e150bcd","sha256":"cca00c516ba05df351915a75df4db57659d685c5af3622cedbba3c6b626af2a9","sha512":"c2f67d5e011e7ad703ab55ea89f91fff91b4245f5294cb73ded819757eb158102fd038f24b175c1f6eae717100cd63d9e9529cc90d124cd90a26ab4a1f650d4e","ssdeep":"","tlshash":"4d50003c30003000c0c0003000000000303c000cc0c000c0003c03c0c00f0c00000000","size":11,"data":"","first_seen":"2026-02-18T03:26:52.257023Z","last_seen":"2026-07-25T03:46:33.154003Z","times_seen":81776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d43ef05e57cdeab7895fe8a3b6ee014","sha1":"19671e4e00cc9b5f8f6a6167c1ea8800ee539aeb","sha256":"b7893a0611b91f5fe47ce3889faf375eddbda47517f4e44c8c338eef6d2c41e5","sha512":"535346ebfe272e052e64dfa1845da29662c36e84fa5a946e52dcbb2cf4d894851a102180fb1c04603f86ec920d89fdfb62c1ddc14ea81ba4cec7d4723ad5598e","ssdeep":"","tlshash":"8db092a4a20c0b5812813919ad2b06e950e42704f82994884ac0ae2548e0a41568ead8","size":116,"data":"","first_seen":"2024-07-19T01:23:55Z","last_seen":"2026-07-25T03:46:33.158838Z","times_seen":188521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-25T03:46:33.082948Z","times_seen":183648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-07-25T03:46:33.146119Z","times_seen":175460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-07-25T03:46:33.085094Z","times_seen":294613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"79faf01ce57aa7f47d91b6503dfbe4e1","sha1":"34094f5020d4dc4bcafd37df2b8501f21e1b0e50","sha256":"1502e085a87940ec6fc206e86ea57d0a46b6376ab6539e4745da6ff0027e63f5","sha512":"66b935fc13b31d38b3bc7bffc8963792899479cdcf698855ffb005a81898c40c4da049da158f2b5c02d3166dfe530bac07652091f253c30a4ab8687b2c889aaa","ssdeep":"","tlshash":"1be0ebaad0a0020e62cf41c1c2e7f3c028230a1dcf4dac8084f70f841c621078e87018","size":305,"data":"","first_seen":"2026-03-22T19:17:48.932471Z","last_seen":"2026-03-30T06:58:36.83394Z","times_seen":434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-07-25T03:46:33.12208Z","times_seen":171096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-25T03:46:33.178188Z","times_seen":245047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"57cec4137b614c87cb4e24a3d003a3e0","sha1":"23eb4d3f4155395a74e9d534f97ff4c1908f5aac","sha256":"18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552","sha512":"4921de1edb2ecc8ca3a22823705194b902cfa471675f2d1ae8bf67d0c7b060a7c192e36ffca9f1a0d90ac2dbbdaf429ee1ec97e160eb00dc80b07000935304f3","ssdeep":"","tlshash":"c700000000000000c00030300000000000000000000000000000000300000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-24T23:23:22.73259Z","times_seen":44983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c62bc4fd3c4e105cb3fb62fb748d59c","sha1":"f6e2d1e74e35ec4c4740ba02e890b98bda11417f","sha256":"9f4a6a370cd350425d8ac08047e7646116468672e99765ca198e6d463ee5286d","sha512":"5cb125ce0b7fdde81c6df58f6e27943a130f0d9e2a366d94ea8ed926da635dfe2b2c5778a14ed99bb35c7b2a48dcd12090cbac18370611d1c0438e1c2621efb4","ssdeep":"","tlshash":"6cd0129b738060e3d797fea709580020c1ef0b8402d2753d42d5d51070fe9ce83461e3","size":203,"data":"","first_seen":"2023-06-16T07:31:00Z","last_seen":"2026-07-25T03:46:33.084564Z","times_seen":190115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4829322d03d1606fb09ae9af59a271d3","sha1":"608e01334f5575f10813efa40ce0102f2dc0a75e","sha256":"4d0282941aaf2d694ddaa24fca75e503c73ab16fff3884cac12f39f882bc60cb","sha512":"e883ed8ad70c466329fef7cbe60615f13a20254c12e369797c45d14734fe6fc32eee8fec31779de945481e759fb5e9c41944c347995864c8901227fd049bfff6","ssdeep":"","tlshash":"c7100000000000000000000000000000000000030000000000c0000000000000000000","size":2,"data":"","first_seen":"2024-01-13T09:19:18Z","last_seen":"2026-07-23T19:08:44.245662Z","times_seen":1609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2284743fe8a6178f117d584e3091d6e","sha1":"93d24c83d4a695e2a463bf66ea18a3e2147e9148","sha256":"8cf878073f71bf93dd67f56aab913b4a584f5ea15c56ea7030f96b9f26f23a4b","sha512":"7aa1cd340f7dc20e2259c9ef76fc6dd184133548d47ee9cf1c300e8ded20ae3e298748b874bb735dc639bb025be759096e3edfedd1c0396a094748bfe2734cf1","ssdeep":"","tlshash":"28c02bcf30c6da74817d001203179dc48107349f114b808743d040e400174908c1dcd7","size":138,"data":"","first_seen":"2026-02-18T11:53:38.7823Z","last_seen":"2026-07-25T03:46:33.159351Z","times_seen":76974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cc43ad532377e05783b919d86a896d9","sha1":"69e00bdb15ac21186c8d27764e6311759ba5b99b","sha256":"007cd5f5a967155b6963ac5de46c369ee23237414c3f576b4197fe46229808ce","sha512":"404182f4b51a22a4a35e58480d372a65db2465803ca23913e379199413edf84fa74dcf0f92026d8561dcc35bdff981cb98a38c8f50ae05f7224e5c7b42b30c92","ssdeep":"","tlshash":"2cd022c93c4978d20279238888ba01f7e2fbb8dc78068b40c32442002a3ca3a5464402","size":199,"data":"","first_seen":"2024-10-31T11:08:50.83142Z","last_seen":"2026-07-25T03:46:33.12163Z","times_seen":154456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"552a6744d3552d9dd833a2edbd265eca","sha1":"79202696d05603bf5ef6095bb34ee77128cbbcdc","sha256":"ece8229c938aa523c30b65ef56f8ce362a6cea9f8b6b3b9aeb512fd8e0883094","sha512":"04d158a0ec7ef975cec0a00fdd71199791b95ded9e7b4fe268f6c5d0b0da1d2166099f56640bb4492f7530f913ebd761437bc04ccccdb3909608f4886f455acb","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000030000000000000000","size":2,"data":"","first_seen":"2023-03-10T13:29:45Z","last_seen":"2026-07-13T21:26:36.897812Z","times_seen":3163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/js/ledger-livedb89.js?id=994d45aee2f84e122eca\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4567accf2fafb7c15652fc6488a35367","sha1":"0f9d451b024ebf20d0523d8030cbaf2e297531b6","sha256":"3a5e6534dfd77115927b5a0fbdc87f8e60bba68cb44dbb5dcab4c2f29e6c3225","sha512":"9bef4c97442a6dc2a35414d3e7340990228cffc44c523f9ee00aca9bd91e8121c915e76f7003abb8de1b3e295dc4a93cc257506a9da0ecb21dcbdf23a39ac215","ssdeep":"","tlshash":"52113a147590a0fd68373861be3f3354351b2483b755d3d07c0ea5a80f82d6822b5e76","size":912,"data":"","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.513437Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8b644cd5134d4a2c95f112c84649b4dd","sha1":"9363653ac297d15c019da81f6143d41389128146","sha256":"c9130c630ac19dbdb246e94ebf920e6c889ae523f8d6ba55c56b547d95fcb999","sha512":"c968c105cfbde47651f1f3c6422de670cb2af7378e68083dddeaaab2c0bf5bea30ad21f009a00c3c7066269fff9a9def075ea65efd5ed4ac707a02947cb77edf","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000300000000000000","size":2,"data":"","first_seen":"2023-05-20T12:47:35Z","last_seen":"2026-06-02T19:37:09.175345Z","times_seen":3438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"89f276f371be1e9fb1b41969b99a5687","sha1":"ec37375d13e2c3ffff33f30464f96889c5a5bb55","sha256":"65da634a413147cee8ebbaacb83e47589d9d47802cfb752014a6f17851787f41","sha512":"00be18dd3fbdc6ace5b632481de74751d573abac4009efed6596db27e057fb7b48f5324a057ba35e50666b5af96dbd71326673cb1f0aa81068fd6492a8aac957","ssdeep":"","tlshash":"aee0c6e30c6e823c909bc46008e23d0000cab0482baaa2064af0c1a424b0c4cbaca62b","size":331,"data":"","first_seen":"2026-03-22T09:01:44.919814Z","last_seen":"2026-03-30T07:00:38.066387Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6a70ff4f7ce576991dfb0b7d17349948","sha1":"baa9bb7de1d0bc1bbb883b3906503c2e9e34a03d","sha256":"d3fc2842ddfad4c8d3859f84d4439bfd396381a5c8a4806a7876bcefdc651587","sha512":"c6bf93a7813c4d9985a6ce54464bee09610bc20abf7ff6252967c5539282eb53972ff4f82fab0d06b1d2593349f83048a0123627bbc036ac409136ca9dd41755","ssdeep":"","tlshash":"c71000000000000c0000000000000000000c0000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T17:31:48Z","last_seen":"2026-07-25T03:16:09.744081Z","times_seen":6785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f85b375eb8fee8286cda306f225d9016","sha1":"0697f483ec690189d91d9f769cb2fc557901ab76","sha256":"0019384cf418d6c949e49a2dc1f2527e1dc040f85e17d8e3e70d05b2d4220513","sha512":"5f3a4304f4b18c9c9f8fd440af45c50a5b9e061a967a8ba43b79fc1ebb5de274c6ccd59cc4a3aee0f8ce3c5c131647cd7c9c0446e34b5e23cda4db09d22129b1","ssdeep":"","tlshash":"25c0808c5449f5693374693134bf4606178d71d061444d5c4847854135b3d87f075e74","size":161,"data":"","first_seen":"2026-03-22T09:01:44.866773Z","last_seen":"2026-03-30T07:00:38.076491Z","times_seen":1001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-25T03:46:33.171424Z","times_seen":234351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5c244fde4e6f1ade71beed5c11edb59","sha1":"6bc634a7f8505a2ce340807aecfa1e50c2a578b3","sha256":"d561924e4295103128924509bbe71b3eed6625592d75ba3cc35c365189d6081d","sha512":"6ed66e7a246ab961cedd150553b6a9aa692988813dd4ee30c8b7d78d80bb8765a828112c6860d08eb382cae34e22bdd76ecda5ee1c9c7ee25a49b1d2639474f9","ssdeep":"","tlshash":"966000300c000330c0000c00000c0000003300000000003003000c0000300c0000000f","size":13,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-07-25T03:46:33.130598Z","times_seen":173359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22bb32e46c38c018dc889f89e5f6adf2","sha1":"5d4d4fb55d1c18271adeed78832dc48ccd193218","sha256":"f2a193f4d43c8004b76389ee3c7702268aa32e63d5276db2a5476a575840ff96","sha512":"0bce6e2d9bbe3f8f24d000568391c38c667a3a72552063db6e3f10bce996e78f21c8c89e59cc681b1e663aec338ec31866a1184e6b68b39cf25547dc18c8a726","ssdeep":"","tlshash":"b3c08c192b011098d7a2220c38a74800aaf2224216091c00811040805820f45098ecc8","size":136,"data":"","first_seen":"2026-03-22T09:01:44.836251Z","last_seen":"2026-03-30T07:00:38.079078Z","times_seen":1067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3d1e97d18e692ca5484d1abfe617b6c1","sha1":"bb65d5af60f06ca654295bbce73e2d43310f732e","sha256":"2b12242f306cde1c5f3670f1ea20dd4d6390316bd23102f2cb9d640f48b174d7","sha512":"8b5a145634d58ba57be3926e56cf4b8cd89a365af5a653d16ef8e192656441e7308f6b98971b3cc29e4f931e32d4cf88b0e6d70f92a793e033ea9ffc0fa38e7c","ssdeep":"","tlshash":"c71000000c0000000000000000000000030000000000000000000000000c0000000030","size":2,"data":"","first_seen":"2023-03-07T17:31:47Z","last_seen":"2026-07-19T07:00:06.775744Z","times_seen":2470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8aed7b13501e351db8ecf73c4fa5e65e","sha1":"3497fa92599050f52a203ea8de5f8c78f9a4b549","sha256":"264627804ee7d36d353c5b8a7fd83380b95e1bf4e6b4ad734a3799c2fe3f68b1","sha512":"fe71c0da2b95ab239996b40f4e03938f2d947a5cb387de1f42a512494e48728291ecec0d31eccb647400a9f1be7944efe1cf3f887c96b7563e7df455d1637974","ssdeep":"","tlshash":"c71000000000000000000000c000000000000000000000000000000000300000000000","size":2,"data":"","first_seen":"2023-04-25T11:23:42Z","last_seen":"2026-03-30T07:00:37.99758Z","times_seen":2083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1c4de8909320461c7d3a7f3a2ddeac5d","sha1":"7ecf319b4f5cc1779e64034e5adf07b6eb049d4a","sha256":"ef35587909bf882340dc53dfb83c2c06e999638a27ced1012d8f769860e433b4","sha512":"995ca2316454b0f7930b56dabcc143328ef61c748e9edd549d94eaea3c35a5dde3b066c9bf72d1911bc64033fe82a1efad3697a321f6c33188858d754ac61d4d","ssdeep":"","tlshash":"e4e0c6e30c6e823d909bc46008e23d0000cab0482beaa2064af0c1a424b0c4cbaca62b","size":333,"data":"","first_seen":"2026-03-22T19:42:00.820308Z","last_seen":"2026-03-30T07:00:00.718026Z","times_seen":470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-25T03:46:33.085622Z","times_seen":258451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"553be1daf1d937416851f09e5c7744fc","sha1":"0f7f81d3bd53d50486242f31b427ba9176a00105","sha256":"29cbe181d2488b1fa66a37f3833ff3b83781de27ecd8b3f4368645b1b83a5bed","sha512":"0a5427bda3ef0a15ad5afd5fd78540c686bfcc6e75368a7028abc8f5d68d29c94bc1040fb87556c70d3383eb59edba38c8c2a7c6a1b15c1d3d8f91014a49707d","ssdeep":"","tlshash":"b790024530516924a1555520815b1015622b846505081569c14164c4b9b0614442263c","size":49,"data":"","first_seen":"2026-03-22T09:01:44.940724Z","last_seen":"2026-03-30T07:00:38.02418Z","times_seen":992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c44a6d7765b500fba3fff1adbd270778","sha1":"31c72f59fad9b6c8cab3fa79e09e07ae909289c6","sha256":"97a3d5cb14f577074993d5467dbcd0cccb961c9b62df39d77a7bcd65a2b4254f","sha512":"38d1ede654f40da51eb4a2e5f9784a9df1ea790ee67f5165c0179edcf9c4ab9ca67b83e90460b36a8d3eb29920712a3ec72cabb12e81f9ef6a1e1089c86f3b6d","ssdeep":"","tlshash":"2ad0233dd7440c9c72745173d41a613494905440628075207139c7c199f00363ed7a54","size":207,"data":"","first_seen":"2026-03-22T09:01:44.922021Z","last_seen":"2026-03-30T07:00:37.992667Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a77b5086eeab0759d659bc6ce2503b2e","sha1":"da0e8ebc61e9e864c4915b750372150ac2d9ecec","sha256":"ffd7c40faa7c0679e79a33b0554e86987bccca04268e48c98096c8f5f1262641","sha512":"8d006a65203962e634c6538ce8b9ab0783dcd44a4f7343e3e795827ca8708a308162fe0e8f85f93004a893844703e0013a70ad048bfc12c019ab7d7efefb308a","ssdeep":"","tlshash":"6aa022e02ce0300800003082800f8eb0e30388a3fc00c0008023ca322030b200cc8000","size":61,"data":"","first_seen":"2026-03-29T11:38:02.502487Z","last_seen":"2026-03-29T11:38:02.502487Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-includes/js/jquery/jquery.min5aed.js?ver=3.6.4","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5bd74fda89354489a9b05c9e7de9450","sha1":"7014f3e7aa6e5a53b5b98427b3cdc2574f062142","sha256":"4b6e3789b012d779631db3625e40468eef4c1e0d56701d09d22f99a09b31dddf","sha512":"79b3f183bf4c1f4651fb17f10f0956bf818195a8b3ee1ff38e337faa907b41995ce42cfa82dab857f2b9e227b17bd64139fa3d425c8c5489de2242e3e77d52ea","ssdeep":"3072:EMuXVgMQlgU2oQR1K4FURIu47b2WBIkehha9:7uWVgU2oQR1K4FURIu4GWwhhe","tlshash":"7ae37389b6e621319307f03e8d6fc809b276545f1a8ded05790c52a65f1883c97fafe8","size":151324,"data":"","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.510629Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e1671797c52e15f763380b45e841ec32","sha1":"58e6b3a414a1e090dfc6029add0f3555ccba127f","sha256":"3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea","sha512":"87c568e037a5fa50b1bc911e8ee19a77c4dd3c22bce9932f86fdd8a216afe1681c89737fada6859e91047eece711ec16da62d6ccb9fd0de2c51f132347350d8c","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000c0000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-07-24T23:23:22.756954Z","times_seen":63962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fbbe7dd71d340a081225491ff34ffcdc","sha1":"836f81504b01dad68a19ddaf9f2304156555e2d7","sha256":"6080213dc9e02ce73615ade86d8a7eb24f6927eb01bf1471daeb2d06fcfaed5e","sha512":"0c747f8aa9fd5249296ed249822039a598ac44fcc4dd3f980a36c2f26f30f277bd8940c7654c2e9c382e4203b7886c0f4a1947f4849a6f87d2d8f10b5dcaf0ed","ssdeep":"","tlshash":"5d41536a276d1c6d32fb20e3af5f5f4b5f2610031180e43ac9fa7a951872c91c2f9c88","size":2161,"data":"","first_seen":"2026-03-29T11:38:02.504738Z","last_seen":"2026-03-29T11:40:28.157213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-06-07T08:19:02.131151Z","times_seen":267242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-includes/js/jquery/jquery-migrate.min6b00.js?ver=3.4.0","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a38067d43fe7f9f4386f434d439a99b6","sha1":"006709121146dcf665315a271f0671a41ec048bb","sha256":"aca1201bc5295858b08a00d253ebbb108c86b7f1a027ff4486ce23fb394ffc87","sha512":"28d6fc9facc6790378c6a2de50f04b469724ed556f4f904bf68e48cb97721172db9fda597244ffba6f822c4933a36c61e59096f154e2c23c1e180cdcf69ecf1b","ssdeep":"384:avjxpoFKmTuFLslOg8FgPoj/EO9GLWKfKWR2GwKJcl3:isKYuFLlePozGLWsKjGwrl3","tlshash":"7882a52eb5f62a319567f179e52fcd4a7176048f168d8e00784c45a51f0d83ca3bafe8","size":18733,"data":"","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.440188Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"800618943025315f869e4e1f09471012","sha1":"e69f20e9f683920d3fb4329abd951e878b1f9372","sha256":"f67ab10ad4e4c53121b6a5fe4da9c10ddee905b978d3788d2723d7bfacbe28a9","sha512":"d21ec9146c3c327211b8b7fd44003916b938d751d458fece25ef51fa9c8896c97ceb22d032e6dc7388c6143a3b3157764949a7b2cbb062e005dd5f009310ab00","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000300000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-07-24T22:52:38.928275Z","times_seen":55700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a75db90c17eee73defa78759aa75dfe0","sha1":"f7e221cbbe5c66d82ac2d5102b932b0ae99138e2","sha256":"98064706a301da49f894c64313d5a4513e19347a25db8082eb912bf45467ad8d","sha512":"679c01bc381381542441bcf6f4590110c5620e6fcec8b3e05be479a87abedc727b2d9560751212fced9a46a4d014768ec41111b130d05c1b2f4a38674121c4ec","ssdeep":"","tlshash":"c710000300000000000000000000000000c00000000000000000000000000000c00000","size":2,"data":"","first_seen":"2023-03-13T07:29:26Z","last_seen":"2026-07-25T03:16:09.766615Z","times_seen":1498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7d5c009e4eb8bbc78647caeca308e61b","sha1":"636117b25f17da7e91194e091cdb8dc49769a815","sha256":"d3ef7de562f9a4a34a9a0b05a112955fdecdd0102c3faae5eeb03a195091a5e4","sha512":"763ad51788fb8f39a8a1d1d7c255577cdf834f9297a677273351a3f3969f9b3c675084847c14df4d38d147c0acf216bc65a8a221e3a6e2f8a1ae6910a0df272a","ssdeep":"","tlshash":"c7100000000c00c0000000000000000c00000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T23:24:28Z","last_seen":"2026-07-22T17:35:58.179692Z","times_seen":4874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"912a36a20f67b64018b52f0a79ef4fee","sha1":"1f1b527b454331258b36bca949fe73f5eee1dc24","sha256":"4806f5328a71d6b45729319674341e8e0f6320d859a068c9fb54fdd5e9977544","sha512":"78af7777f54797ddbee1d6b5c3ec637b8573b5b6fe5fee8448ca3ed2f9b0cb5b1840e62d381086362983d497ebdb31e34203258d062ca107866719d331a443c2","ssdeep":"","tlshash":"e4c012181e55ff4812d899f7d4a32479996110c2f7d8848dc02dc64363f01d43335cc2","size":137,"data":"","first_seen":"2026-03-22T19:42:00.869528Z","last_seen":"2026-03-30T07:00:37.998657Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-07-25T03:46:33.0941Z","times_seen":201082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.tgVis6b6ZfE.2021.O/am=AAAABQ/d=1/br=1/rs=AGKMywG4MgjSLdmolzhM4QATu6VPhNs6HA/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc3c8e53990e9b44a09c35142d758d5d","sha1":"aa32ba9a62713b0f012a07f3a500f2f4a8c73cf0","sha256":"0f198e9769d813c6be7c522abcce8647753a45cebf89149665a556d054755495","sha512":"4a00da3d5a85f922eccbc973bf97588ac67945cfa00db3d5dfb9d04553d6d13fa8c083a26d4281d938ab7730b1a85a287f19be8b4ab2df3365d2228f05bff96b","ssdeep":"12288:ZuHkZMcQTL4OOnGEGyDOqCELcjvFX4dp8EK3khA2vgYOwpJ4Ij1dingRK62bdPSv:ZuHkZMcQTL4OOnGEGyDOqCELcjvFX4dz","tlshash":"85e44be8729274778292f9e4903f0001b17a6856f54c8cbcf29c9ec26df994951bbf78","size":663685,"data":"","first_seen":"2026-03-27T15:13:36.11322Z","last_seen":"2026-03-30T17:21:16.487191Z","times_seen":2242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/RA-8Njw1GOs-8l48WIWmY8SfWQmxnm9SyxBiHm54LLs.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af196d7293353cc4b8692516f8d0cde2","sha1":"688115c0cc1e8d37fd677cdb2c1abea7a132f58d","sha256":"440fbc363c3518eb3ef25e3c5885a663c49f5909b19e6f52cb10621e6e782cbb","sha512":"5a889b1c44bb59269ae5d703867567c5043610b98d58d9778b5529d76629f456e02bd039f569fda74f888312f4e148c68d2cb9ebddae8895561ae7fda7f740d2","ssdeep":"1536:jSZwyYv07JkgmP/v1gKBIrjZiXgY3zwbWB7ET:HS7G/tHB+j4XgS7ET","tlshash":"065317cfb2f2b7718df365e1406b510952bea014acc8545fb902ebf46a7198b802ff65","size":62760,"data":"","first_seen":"2026-03-22T09:01:44.763594Z","last_seen":"2026-03-30T07:00:37.962707Z","times_seen":1075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7a52343ab80bc7da229b63998d8b8463","sha1":"d66dcb75735617bf5bb2aed8d57c7ffec9daebdb","sha256":"540598448584bf77de2df2e34aff23dfc5588892164cb45c7df642d526c51f63","sha512":"04899480cb3b7a19103de05513c02814dadafc9717b574624b6fc467ba5de38b3b05b5e5a0165e0220ecc3b47a77cbd85577c8bce8749ab2efd12fe21420089b","ssdeep":"","tlshash":"9bc08cd0b082a478c2e1ec73247686004caea816e70b8052c151f99ebf62a2b6c3ca12","size":173,"data":"","first_seen":"2026-03-22T19:42:00.871669Z","last_seen":"2026-03-30T06:58:36.831196Z","times_seen":450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5bbcfd78373cdc0f37fa090ce25dbfc2","sha1":"e1af5f070685f3a55b23661807a922a0dc56fb1b","sha256":"083bf2ce02b0cb2e34c793cd34ebb7ff89c32b4f3d63861dcf109c7ab2dcf2f7","sha512":"38591433b7d4ae10c5ccb84ec3a0d5180c316e8e06b571e20b0e7dc662bfb610892397dd0abd40f8df2e46b6f08db8ef984dfa3dc48336c6e9d6e773ec8fb791","ssdeep":"768:AjwhGD4LIWHwfGD6j/pkJlV4OrJ/mqVd8yo4Eu8Q2vGhW0WH9u/S4gIq:0jt/POrcyxEtQ0Ghq7Iq","tlshash":"7f6344240868a8768893e547deb9ff3e9cf416790bc99a6ebcb7835c01ec6510d9f413","size":69097,"data":"","first_seen":"2026-03-29T11:38:02.509782Z","last_seen":"2026-03-29T11:38:02.509782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3258b94e88317bd91386d1a97ecb7f5b","sha1":"25dac4163f417457832183005d3c6700cce6f8a1","sha256":"f79117529459460edaec6b717d15bb8357d3e48ec36a4d6bed842e76f82d274e","sha512":"6c572b9db57f0f372851e4930d866e936a7ba8d0a7923e65478d294d0bea2c54e2d13b2a17a4fcdfc3eb19b9a280e93ef55235bfa4d9f598ed31b3a5411a50e5","ssdeep":"","tlshash":"c7100000c000c00000000000000c000000000000000000c00000000000000000300000","size":2,"data":"","first_seen":"2023-03-10T13:21:31Z","last_seen":"2026-05-19T06:46:03.947347Z","times_seen":1326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cf7c03916ca20c3cdb0f279032709b30","sha1":"08f243e971c526eeb88b9e356caebd2b2e48100f","sha256":"a5b82fe802c0b4085684df0d257e0154e504b214a1d9a6b14acd1b1f61ec2641","sha512":"1647619643328a189e067f0f4c2d01dac25a88de03952564be846d417b1548f80fc6dc10aa6253c84af53b2aae36f60287da671967d3e09dc2f1c629907cece7","ssdeep":"","tlshash":"98e0ebaad0a0020e62cf41c1c2e7f3c028230a1dcf4dac8084f70f840c611078e87008","size":303,"data":"","first_seen":"2026-03-22T09:01:44.877615Z","last_seen":"2026-03-30T07:00:37.996114Z","times_seen":994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4a8a08f09d37b73795649038408b5f33","sha1":"84a516841ba77a5b4648de2cd0dfcb30ea46dbb4","sha256":"2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6","sha512":"acc28db2beb7b42baa1cb0243d401ccb4e3fce44d7b02879a52799aadff541522d8822598b2fa664f9d5156c00c924805d75c3868bd56c2acb81d37e98e35adc","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000c00000c00000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-07-24T21:55:24.302493Z","times_seen":76833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4be11d4e07711a857413c601fa3c50de","sha1":"739b826d2ef2ad94a50d36be3b1f6c22e01d0b40","sha256":"98914f67eb2d9cac71d2a272a697f90df2352d9a11f86b042ee5b0fb2b6567f3","sha512":"4a043c454141ebdf64bf75fa27295eaeb33d4146c1b5cbe93e5c453bbb4cc7659a4f1882da63d2559833cbf8f0e6687ca11ca42963726cab0d9dc3f71d6a3430","ssdeep":"","tlshash":"257000882c08200a08b3382a002bb0080322080200000800280300820eb080aa202b28","size":22,"data":"","first_seen":"2026-03-22T19:17:48.86714Z","last_seen":"2026-03-30T06:58:36.80138Z","times_seen":437,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"375417e7279883750fd33ad56cbfb377","sha1":"99453515ee8225f6f39f69cab26d649bf5d9245c","sha256":"73be8af52c83876d0ac4fb2986c6ba8960f6271554259fe81fbe0ad1349290d0","sha512":"4338de8245e586cd790c3b0fa45a11989639f8b67b9a762c28dba8346f52aa2fa8fd73b46589d58768c27d446794079f78d5ec02a15b9ffdab3b7b7220d338ae","ssdeep":"","tlshash":"29c022083a3a8c10ac29002086dbbe9b806da9a4c926320c40903d902c8102b484c10a","size":169,"data":"","first_seen":"2026-03-22T19:42:00.857627Z","last_seen":"2026-03-30T07:00:38.018254Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4d9e07ca8eb2bd7e2da00cf65f5d03d9","sha1":"07ff95813a8531f66d2af74a2839982f871495ee","sha256":"cb630afa30525216d1e0b7414e6cd06ea6c29aaa9dae20ef709bb4c77ab5ab61","sha512":"7f54e7d2f331a699cc447d7ef8ddec42436e6f2ba94f7900dd2334d5e218616bd36f58055874a38d26aa8b6240e7a7f009315a87a832725d2ef2cd47bee8bdd8","ssdeep":"","tlshash":"5b8004045c0c10044011545044c7004c001311743170441410f704d15f351451d01c7c","size":34,"data":"","first_seen":"2026-03-22T19:17:48.799859Z","last_seen":"2026-03-30T07:00:38.089612Z","times_seen":763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-25T03:46:33.178188Z","times_seen":245047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-07-25T03:46:33.087786Z","times_seen":110022,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dde0f2e4b04e6e113db4c59991c17afc","sha1":"453755845087d0a40786dc85c439f244a2020d3f","sha256":"74909fed8697c840f85153c2d6521e290542e686f85ec453de94a0aacaf08759","sha512":"3f687c1bef090208da6610bfad80a93f4387573d57454cd142de20fccf8d297f19e37d87652261b382f267d3354a7b468d5bb4e61174f40fcaedecaaaa29b91b","ssdeep":"","tlshash":"b0800000808038c220a0202233e0a0838ac3028808282882088cc38aafa3000c0c028c","size":28,"data":"","first_seen":"2023-03-08T07:01:51Z","last_seen":"2026-06-30T15:05:34.176413Z","times_seen":1220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/s/player/8e54e4ea/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e56cdd726aa7321c33ec624ef34b7ce","sha1":"d5b26037faf6815526db4cff5f62637c083f50b5","sha256":"88f7e832737fda68f706dcb349324e4572e19871cba8fc68bc8cbe6d3ebb4e4e","sha512":"9eb43f03bceebb9b0adb9d3ea20f61fec105f835df6dae332e413a2cd61b8c313b57442600aae0470ac49c3a8c17a028eb76977f8e1f119964c3f1bb87ae6b44","ssdeep":"24576:kYsvHs6ag6qR6dCIX3X9OVLcNAsOzbnt0ZaOFNU2L/W:XGHsTg6U8XAVLcNAsOzbn92LO","tlshash":"4b655b8572c3b86643f2d4e8146b1201f53e1858744cc5ecbabddaea6d61c0a717bfb8","size":1469932,"data":"","first_seen":"2026-03-25T12:13:47.117251Z","last_seen":"2026-03-30T15:48:36.758287Z","times_seen":3002,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-29","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube-nocookie.com/s/player/8e54e4ea/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5bee54523787da0bf920a147041b9fd3","sha1":"4538ef8e2987a534d7bfa160101f767152fa20e8","sha256":"2a9e3e23445193cebdf09a642d8192761e0496abb1a9a15a8f1a5a7bcf6ebb40","sha512":"43091dd52f174b8bca9b87b4c0c6145813aa5f73aca2a03345a072693e9e6ce20afad1d58bfd5f8ef88f10575cd3ac855615387a608f45ddddaaf043f9c415b2","ssdeep":"","tlshash":"cfa0220c0c08fb0002e00030888a002aa8c2200233ccc8eec00ef80003f02e03033cc0","size":79,"data":"","first_seen":"2026-03-22T09:01:44.845388Z","last_seen":"2026-03-30T07:00:37.992201Z","times_seen":999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-25T03:31:17.259816Z","times_seen":63444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0cc175b9c0f1b6a831c399e269772661","sha1":"86f7e437faa5a7fce15d1ddcb9eaeaea377667b8","sha256":"ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb","sha512":"1f40fc92da241694750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252aa5e74210546f369fbbbce8c12cfc7957b2652fe9a75","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-25T03:53:32.004023Z","times_seen":78769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-06-07T08:19:02.155739Z","times_seen":241207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"471c0bcdf0370b70cbe5ce5b0a25b915","sha1":"fcf55cda5faa2f56fb03054a49311aab18f41f3c","sha256":"9a0c5920d34c3389bae7eb831a03d27c03b8ad861fdd406f7ffca9827f806a2d","sha512":"5a08ef0d151679ac545ebf40e074d5a9fd4c204eabad4c92e2f2a2bf4e3460e7de4038211a7b883a8ec4932abee08b7774a8c36ab9e54c74edbb84093a218961","ssdeep":"","tlshash":"200144c2567d222ab3d223681efbcc2ea7557c244f050f0d41e168c565c0939c023f5f","size":707,"data":"","first_seen":"2026-03-22T09:01:44.939014Z","last_seen":"2026-03-30T07:00:38.05382Z","times_seen":988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1f0eb0985870635e62fa2f68a223b173","sha1":"e4b203cd2273969f31fad4df07d1acb0924a0619","sha256":"e9ed69a6ea08507ea7f2d93985c23588cc4c5bd46b0f9997f1193238542ca395","sha512":"ab93a2686cbd6fa04f71b1daf1ce7b8f90f3bddc3e663469fedcb7dc743734e6da5725872ad9bce353abd298cdee5018cbba1499e841e29ca9235b84458ea816","ssdeep":"","tlshash":"c7100000000000003000000000000003000000300000000000000000000000000c0000","size":2,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-07-01T09:03:57.476738Z","times_seen":1843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e836aa00caedd2e2dc32b4d21328aee0","sha1":"f5fa51ef582d6590b19a51a3d245d8fa03cb3f9b","sha256":"b078e513ef1ba4e50827effcee249aefaf1e72e49eef8773f5b8bf55612461aa","sha512":"d455aa3f02bc3ff66543b14472f91e0d46b6563561e51e776c7e9d58a46554c5fee60d1a51e9c9325a2dfc79bd5cbcb73c1f3eb7c892e8593cd61ddf00d9f5bb","ssdeep":"","tlshash":"2ad09506f4ce214a0a119bd60d27d11d543084442c4c4d8d330cc55035cf9cf30f7644","size":253,"data":"","first_seen":"2026-03-22T09:01:44.824618Z","last_seen":"2026-03-30T07:00:37.998117Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8aed7b13501e351db8ecf73c4fa5e65e","sha1":"3497fa92599050f52a203ea8de5f8c78f9a4b549","sha256":"264627804ee7d36d353c5b8a7fd83380b95e1bf4e6b4ad734a3799c2fe3f68b1","sha512":"fe71c0da2b95ab239996b40f4e03938f2d947a5cb387de1f42a512494e48728291ecec0d31eccb647400a9f1be7944efe1cf3f887c96b7563e7df455d1637974","ssdeep":"","tlshash":"c71000000000000000000000c000000000000000000000000000000000300000000000","size":2,"data":"","first_seen":"2023-04-25T11:23:42Z","last_seen":"2026-03-30T07:00:37.99758Z","times_seen":2083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"175306cac05bf6c8735e75d5629cd821","sha1":"f30d5cdbd722db72e57c2a71e1344369ea0008f4","sha256":"af19141023e94c8406197fb5b081ca5642e8ebfbcf13a6c20a32ba53e66887b6","sha512":"8bcec284fc33ec52d9577bd7299868be1d4649563eea0d5fb09537bbaaaeb47fb75356834df9dfad573ec041cb2292c142845845b791f690367e99e550d7265b","ssdeep":"","tlshash":"7ee0c2111b0c7eaa16f1d9d2d08ab118514e28f8d89caabb050ee9b1b6f19c57072d5d","size":305,"data":"","first_seen":"2026-03-22T19:17:48.847851Z","last_seen":"2026-03-30T07:00:00.729899Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9a6cd3908f25d13fc18a3f5adfd3d509","sha1":"53a450430bd284591cf0b85c3cf1bb0f872a4141","sha256":"cbc3b2e3b640df7ecd8bd89b3158ced9cbccc68deffe07f9263b361136778f27","sha512":"2c8831a87d791ef311f936930ca9c9e68316a08b3f265d29df98975cdd80041a05ad6a615c0f908a6eff1fa6cfa9812a490930035308136d3dd541aa52e112a7","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-12T21:29:54Z","last_seen":"2026-06-05T06:44:16.722047Z","times_seen":2124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"01cece45c90a71db7d3616eb1b64ee64","sha1":"51ec46279d524491393c8a9d3ef1835c8947b961","sha256":"3a62321995cd73f8e559e86048958d42a12bedd237f56310881e8eff6cfb4ca7","sha512":"952bfdec446a7acfef9800e976fd6c9e12cb56c988c854644015a5b446171d2d90a8ca5c0b42b6399a57e2f952db2b83aace4f2a1b608a7aaaacaa1ee89679b3","ssdeep":"","tlshash":"8f01cb9376d41439c0ad102273bf81a6f8b126e75d3261e0541edc458db0e081faeeb9","size":724,"data":"","first_seen":"2023-03-07T01:10:28Z","last_seen":"2026-07-24T05:34:44.612386Z","times_seen":4284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0c81391182d674304c36fe0313be76af","sha1":"797ee1091b0269feec4488324388581351daeade","sha256":"df5021889db416e69eedb6e3f9a4c3dd1deff18117bcbf6ad6a9216a40b517b8","sha512":"ee1e4e8bf1f61f79549ad16788933a2d9b0139d4caeeee15a111a0f81a018522ad1b3984b156b96812691825fb9a6d023466601b8dc3d7f779be6a88c443ac41","ssdeep":"","tlshash":"ded0eb6af75114004f978210142a20a2525d04223eae1190a30ef1282db102a02db9e0","size":273,"data":"","first_seen":"2026-03-22T09:01:44.883112Z","last_seen":"2026-03-30T07:00:38.05033Z","times_seen":987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c44a6d7765b500fba3fff1adbd270778","sha1":"31c72f59fad9b6c8cab3fa79e09e07ae909289c6","sha256":"97a3d5cb14f577074993d5467dbcd0cccb961c9b62df39d77a7bcd65a2b4254f","sha512":"38d1ede654f40da51eb4a2e5f9784a9df1ea790ee67f5165c0179edcf9c4ab9ca67b83e90460b36a8d3eb29920712a3ec72cabb12e81f9ef6a1e1089c86f3b6d","ssdeep":"","tlshash":"2ad0233dd7440c9c72745173d41a613494905440628075207139c7c199f00363ed7a54","size":207,"data":"","first_seen":"2026-03-22T09:01:44.922021Z","last_seen":"2026-03-30T07:00:37.992667Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7f0df7ffe032dcb53670b9b8a26ad0a6","sha1":"093136beed6e3934eabd5b36d33f071e80afde06","sha256":"ad652d8defca5353dfecffa5bb3aa072fddec25ede67bc8e8c1dc1700f328fef","sha512":"06fbe16582a148e16ede4a778adf22bb64ab2880bdf257322a48694215dacd2f13e99e032ded187560a5383bde725e83df0866635de033e1d7804ca63d261d89","ssdeep":"","tlshash":"a27000882c08200200a3b828002bb008032a080200000800280300820eb0c2aa022f28","size":22,"data":"","first_seen":"2026-03-22T09:01:44.858808Z","last_seen":"2026-03-30T07:00:38.029914Z","times_seen":995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"44c29edb103a2872f519ad0c9a0fdaaa","sha1":"511993d3c99719e38a6779073019dacd7178ddb9","sha256":"5c62e091b8c0565f1bafad0dad5934276143ae2ccef7a5381e8ada5b1a8d26d2","sha512":"ebecf27f9d01a31e1b7fde7d28befe992491ca5678e5c1faf59d688171ff0dc120e75c888213ce340cf8d3bae4c431fbfb6992719a4372b51b9dd88b81547f01","ssdeep":"","tlshash":"c700003000000000c0000030000000000000000000000000c000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-07-25T03:53:33.840402Z","times_seen":65520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3ddb6d13de55d5dcd8de752e4cb6b2e3","sha1":"70a4801b24d1a05e01d764d0f21f6d9b2d015f04","sha256":"b3798973abbc93974a5c8f6d4de42f05a734e8e1f3264316f91f64c6b2fa80ee","sha512":"2467339fe82c4c3e360df702723e0fb17cd832526a0d2411d4ff6e157ae5486b8667486e3b79a782fe0ec5009e76aac44c3b56bdbf12284506aa8d079fd83b95","ssdeep":"","tlshash":"e3e0d8a06d0c29c7b28a86a5d08f3290296ed3a59f066c616d37d7379d384079ae3189","size":370,"data":"","first_seen":"2026-03-22T09:01:44.902552Z","last_seen":"2026-03-30T07:00:38.00246Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-25T03:46:33.106417Z","times_seen":207139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ef212ee85e390692e7edf622178fc14","sha1":"b92ccb68e7b0fe7919451e9db7c31f0e788348a3","sha256":"232e91bbe47fc2e5ef96ade6f8cd1c682deaa6f567bc7e39eef7ba4b53b92087","sha512":"ac6935d1aa79da5357d894b8a7190eca7b5f8e9d69bc704300720678700ec0eb9f01c599adfc906f3a341fe27c3ab15653d7144a4b1f98d0b657f8ea9c11e205","ssdeep":"","tlshash":"51e0c0cb74120d7275ef8a7a23b0d524709325083c191c22feeec8646f5c58b486259c","size":390,"data":"","first_seen":"2025-09-26T11:46:50.773962Z","last_seen":"2026-05-02T17:41:46.911282Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8986d9bb10b80c6d853d4869a1ce221b","sha1":"990d9a0b0c7b862954d7a82dc8f338950c2b150c","sha256":"998107dbf713cc5caf21935e2b8fb698229d91f8e5c7f9a039d41c9c3276a93d","sha512":"fb724c208053423810d4db77c584f07ae66a166c4a53fbd4ea4b644be7c874bd1f8d9156ccf9f257eb585eaa6ac5be35c269ff8213472590e5a66200e2bd00d4","ssdeep":"","tlshash":"09f07d564d03827529c644287636e2c8647939433451d641758d6c408f02d123b73ef8","size":461,"data":"","first_seen":"2026-03-29T11:38:02.52727Z","last_seen":"2026-03-29T11:40:28.176451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-25T03:46:33.088871Z","times_seen":256508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2db55427d769698a21f97211014bc787","sha1":"33bc4b2d6ed17ee3f7de6ab09cacb572e729fdc6","sha256":"e0559fa5c45f25f267f5abcd767c207fe4799801ebb2435f5ba3bdcb5b3268d7","sha512":"618b0417253474773921b45b5e0a7536cd1e12b0855c809168ec0b15e7f8daf408b6a208cedf901b87445f80ff4580f4eaa88bd899bde81c11688f13c4415bee","ssdeep":"","tlshash":"7a8000382c0c20223002b82000eba008023220800000b80000a300c2bc3002b000ae08","size":26,"data":"","first_seen":"2026-03-22T09:01:44.893352Z","last_seen":"2026-03-30T07:00:37.991662Z","times_seen":1066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-25T03:46:33.133669Z","times_seen":338046,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"40e4be2366dafd05a89d06d7b547b8fb","sha1":"d37d73437bfdbd053970407ef63c4e61d826bdd9","sha256":"af0ae38cd19540f7d777224eb4085700d9abe869a33e681990b9af5674a36d52","sha512":"032ea2afd3b0e06c07652d7b3e300c56af5b2efee98d87ad7ce0d51d040322316a52020585642a78021ef206d56b3884e99014f77cfd7013eff6ebcf96dd7503","ssdeep":"","tlshash":"dcb0120c4c05f70807d09573f8916054008601405150c01e408cc15201f01d435b1cc5","size":94,"data":"","first_seen":"2026-03-22T09:01:44.864239Z","last_seen":"2026-03-30T07:00:38.012605Z","times_seen":989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"80bba906125e56b02ac22577d6e68593","sha1":"f79c03e2518788261cdc176f005c145a54f8360c","sha256":"1c073fea5b432a557c5a084e7f5a1eb1d0786d7d892bc4f0e40af7d50e4f7bf8","sha512":"e51d4751ca8d4108fe966fa010e5b1431b2cb4a3d79af3f2cd833386b13366419699edb4bd378ef3e1630a88850e4126b3a4f71d6c829600b6bd64537bf4a7b4","ssdeep":"","tlshash":"f7a0220c0c08fb0002e00038888a002aa8c2000233ccc0ecc00ef88003f02c03033ce0","size":79,"data":"","first_seen":"2026-03-22T09:01:44.86775Z","last_seen":"2026-03-30T07:00:38.028041Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e902839a655176d4f5a498cca16f4a4f","sha1":"917935e5273af633e85d917e7fe35c6af66ca171","sha256":"d6ddfc0c825255f594a58721d18cc095f24d0c6ac07fa6de39ba9ad20c414240","sha512":"71582fd45cfc3d36aa28da701d405d878b61399baba049ce0b4077ca66a481e60332a9da60f898031db96c5b41c3666dadf2d6de4675be93295b05f68b6fd667","ssdeep":"","tlshash":"1fe02d7adf833823c0748800182b8cde9528bd96bc3cad9cc8143c200600ec6cc4ce82","size":324,"data":"","first_seen":"2026-03-22T19:17:48.806991Z","last_seen":"2026-03-30T07:00:38.024704Z","times_seen":892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3b770ebe9b04f171f0ead0e07d8e2882","sha1":"380a4c847a577ff635238aa9418580f1a54981f4","sha256":"44ba554e17977b31413d531e0aa4e02e87a7a38115d3be3b33c95f85fac2a4f7","sha512":"a6163151a1a902063b3fa0a1ec8173389c318c0e063e615da222f0eb67f04a7dcc95f07ecd46e451ac08964854968a842d2af3500db884629d76a5ae2c164537","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000030000000030000000000c","size":2,"data":"","first_seen":"2023-03-08T08:08:46Z","last_seen":"2026-05-01T06:33:03.338076Z","times_seen":2280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"03114bad02eca9950be675bf31440796","sha1":"fa1bda226e396ed895bfc4ff9799608892ae7062","sha256":"6b58b9ddf1b8b96d8737da89dbeb136ea40855afd214aa2654cf908c3477fb96","sha512":"25e349651641370094f62f59920460927df5c57d2e628b3ea083735958db78d435f55ff2b2f3866cbc2ed89c3d2c390932a3e7c979542c5a6860405dc0d25da4","ssdeep":"","tlshash":"059022800c00220023c23cb0c803003003a2008a22c008020c08c38203f008020000a8","size":57,"data":"","first_seen":"2026-03-23T15:57:52.459004Z","last_seen":"2026-03-30T07:00:00.722436Z","times_seen":441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f502ac14e14405587d798139e860b5f","sha1":"b267cfc679f39f2d95f9d3fa41bca0eafb931aa6","sha256":"39d2483e41bf71db160191d9a148b4bc26c0739e732727e37be0f18bdc8cabca","sha512":"f5bc3d4834c9c4ed165d49476795fb1170fdc577b58fe4b21dfc67cfb4f6eebf045a3812ef48a2f15758e790ce7e111cf9dbd9ffcc3438288c7340e6eeb7661f","ssdeep":"","tlshash":"b1c022ccbb3e600d9121f90031f84e46cb4125ac4407ede3a70128b4448180aca1f406","size":194,"data":"","first_seen":"2024-08-23T10:18:17Z","last_seen":"2026-07-25T03:46:33.108148Z","times_seen":173308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec7e53845feb375870343182efd0b929","sha1":"63e71d0c5bcadc37a725d971054eb55e017f6989","sha256":"a2253e1fad60aa1ccf31416ca8cde6ffaa5af2510733c7186adc04a503346c5b","sha512":"339f50fe30462dd6204552b2d3d3fe5cbaeea2cadcfbde096f16b40f1d985a5a68ebb227dbbb9f37c9451a36376ed392b7fb50c6e661963124146bac7e03284a","ssdeep":"","tlshash":"cf50003cc00000c0000f03000300000cc0000c00c0c00300c3cc000c3c0cc00c000000","size":11,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-07-25T03:46:33.19468Z","times_seen":172210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a931635074a5017da74948b67e16c76f","sha1":"a6799582ad16a7c1ab8221c166268130df6691d2","sha256":"1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c","sha512":"7c96bb515bdba9ad60854b433d24e77982a321dd7ca71599fd8f79acee580802f56829a5dbb7f64932a51ad50d18a9438251a6ad8127ad2b2e332811033d2c7b","ssdeep":"","tlshash":"a5d023cc3941f262d06274b9041704dfd173384a1e1cdf4184154875667c5d9407f4c4","size":206,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-25T03:46:33.191468Z","times_seen":206842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e1671797c52e15f763380b45e841ec32","sha1":"58e6b3a414a1e090dfc6029add0f3555ccba127f","sha256":"3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea","sha512":"87c568e037a5fa50b1bc911e8ee19a77c4dd3c22bce9932f86fdd8a216afe1681c89737fada6859e91047eece711ec16da62d6ccb9fd0de2c51f132347350d8c","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000c0000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-07-24T23:23:22.756954Z","times_seen":63962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7dd95815c0866aa834edbaf6e7c1530c","sha1":"11cb05fa8a1cd0e9f12763e09bd5d0781785a7a0","sha256":"cc17fbe5513793e45cde427b99d3a7d334c9d2ce35a547b69bcdd0b69950d093","sha512":"15cab8f117eeeec09d13fff3e730f58e0189aec1b79882c0556bf4984db7dc2756026a8d1f530fdfc99fdc6e58eefbe7a7452aacf0d9979b8382c6973962fcde","ssdeep":"","tlshash":"53a012141c0130c407735513841a2004050810406188bd1080c8c71002700b4366191b","size":72,"data":"","first_seen":"2026-03-22T09:01:44.828673Z","last_seen":"2026-03-30T07:00:38.030372Z","times_seen":1066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e7eb9ffff1367ea5981101fa0b3a7fa2","sha1":"5f8790d7e19edc3f50080c54b193a016be531afc","sha256":"77acee03827ab2328159be7b534500d95fef1982e81ba688724518fcb0f3fda6","sha512":"c4ee824a98e5a6c27e4f759bd802e85fd8df57c9cb2da4645be26a7b1306cbc8a461c7ad860b28597c578e3d50c2e8c0d0d39b94555935c734b9d0f298284f0b","ssdeep":"","tlshash":"9bc02bc9630c07f1878a02e8c653426b440030bebed02f08d740e103db84b4700dfd2a","size":148,"data":"","first_seen":"2026-03-22T09:01:44.923368Z","last_seen":"2026-03-30T07:00:38.060508Z","times_seen":990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c614360da93c0a041b22e537de151eb","sha1":"b2c7c0caa10a0cca5ea7d69e54018ae0c0389dd6","sha256":"a25513c7e0f6eaa80a3337ee18081b9e2ed09e00af8531c8f7bb2542764027e7","sha512":"da45afb212b23100f45bd392293fc2f332b0bebc9b0cb5866c121743c045806b031758f0b88a728a7b344a8a41fe0bf07cb39967e04d6b652213fbe513f6317b","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:08:31Z","last_seen":"2026-07-25T03:53:33.809684Z","times_seen":70016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9a6cd3908f25d13fc18a3f5adfd3d509","sha1":"53a450430bd284591cf0b85c3cf1bb0f872a4141","sha256":"cbc3b2e3b640df7ecd8bd89b3158ced9cbccc68deffe07f9263b361136778f27","sha512":"2c8831a87d791ef311f936930ca9c9e68316a08b3f265d29df98975cdd80041a05ad6a615c0f908a6eff1fa6cfa9812a490930035308136d3dd541aa52e112a7","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-12T21:29:54Z","last_seen":"2026-06-05T06:44:16.722047Z","times_seen":2124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3533dc65658e59fc87e82dd68e5b42cd","sha1":"dd0694c5d801cfab2d6030cb589c99d4d535ea14","sha256":"805fc54cc465f47b82d9c1b75b2dff5e07ff3aad63d4d0203eb175b65ebe3c31","sha512":"bd53e686090e763475b222cf8ba14d5253658e3a92bd6b5bf4cf9bfa3004390ecd5db7355a316e83d7a5f4e85c23b8163ef1a2f306c4b3c9684ee5502dafbe79","ssdeep":"","tlshash":"e8c02bb41d11bd81f173b1d8f0ff294662e871206bcb4c404505c6303b033007f25400","size":140,"data":"","first_seen":"2026-03-22T19:42:00.835958Z","last_seen":"2026-03-30T07:00:00.729388Z","times_seen":451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-08T20:09:52.517882Z","times_seen":4265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e254ac0b31f8503c5b830585e0086e5","sha1":"c64abe5339d887889c8bb60374be59dfa45e156c","sha256":"4cd65b08b6e1753bae6b760215a8a117f585c749ae30818852aa8fee2df6bec3","sha512":"ffb5ea511f845c0a1ca128a8d669259f1d207ecaa0c437bb40673dd7897fc1dad7fb8323c5d7e08a258ef19736231e216cee05a18203c32a74703354744a9fb6","ssdeep":"","tlshash":"32c022083a3a8c10ac29002086dbbe5a806da9a4c926320c40903d902c8102b484c10a","size":167,"data":"","first_seen":"2026-03-22T09:01:44.928347Z","last_seen":"2026-03-30T07:00:38.019281Z","times_seen":991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d8fd23007416ae784c00a316dd2cbddf","sha1":"9fec56e00d3387b73ce95bdd324563c523ecdc28","sha256":"44922bcd5bafe368d3dbc24fe13c674569020f6d5e23dd81217314781f4d99c7","sha512":"a0d2217145fd6bb1d33a67ddf56fabe5b5f9ff349c923cf35c975afaba31a2d96b086053b36fe6feabaf931418b91e51258996aa0df50a8d2789ae57aa6900b9","ssdeep":"","tlshash":"fae0c681e73ad120b73be0cbdcefa58c12a9023020c0c42d934ae3300277ff48a98842","size":347,"data":"","first_seen":"2026-03-22T09:01:44.909325Z","last_seen":"2026-03-30T07:00:38.029415Z","times_seen":985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4f8e72feaecc751c683fbcee5af02cf0","sha1":"864316276f0fa38eabac0187633e46a5e341e93f","sha256":"ca15851eb45a6b905d3482d9196138459881f132677bd9b81564a6f5762d7613","sha512":"f1d268db1fbe7857cadb1a3088b9e907b06aef454e98e39053ae26b1c3eb8fdd741548f35fb39495e5d7845b7e6b5452bae07e5bc2d1fb89e4669d3357bc3dfa","ssdeep":"","tlshash":"b2f04c9bf18a20909ea9b316f88b4c553db5412441b88125817193f258d3eff7d6ce03","size":608,"data":"","first_seen":"2026-03-22T19:17:48.855946Z","last_seen":"2026-03-30T07:00:00.615302Z","times_seen":442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"00a4d6c67bae0a7d0283e2a2a5001555","sha1":"b70de26d7a164905202c176d89ed8d7eaa0dba6a","sha256":"85b6a3c7ac71c1bf7568f1a8e8d0d58f99daca084d16cd7485a72ec287f4061f","sha512":"0d8809fabfd726325826a1bcdf22081dbe4631edaad5318ee6911a156dc54dd20ff59521f5f66ce058878e487dd1d5e7903c0dec9cf5b58259793a04ff57a408","ssdeep":"","tlshash":"e7c09b43b530445f2485a125d7d60e8d7335954904369d293b8165df7db7f8c031d4a4","size":145,"data":"","first_seen":"2023-03-11T14:09:54Z","last_seen":"2026-06-14T00:24:39.532561Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"995e1d38e3f8f38a6f97e497955d4a7a","sha1":"bb636ac4f3d051fe6cab2a4b0af8bdd6157090c8","sha256":"59ce2c8e64db7e6a25a956cb858d9ef316906e2c18fabc555f857c17b3a2b693","sha512":"48e38e8dda8c9324cab6c33cd331addfb0a05b92b846ae6717635828157088a1977c4a58560802a1bcb5117d17cf248846cbfdd3a46eff3071b50c3d9e3f2e14","ssdeep":"","tlshash":"b280003e2f0e2002a083b02000ef800822a220002000380800a300c2ac320ab000ae08","size":26,"data":"","first_seen":"2026-03-22T09:01:44.894868Z","last_seen":"2026-03-30T07:00:38.075891Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-25T03:46:33.194195Z","times_seen":184294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8accbe65f279a89eae62915d7259255a","sha1":"f5aa72c9cc8e4694a5e1e1121d56cd29a3924779","sha256":"f668a9a7f553552f3518bbe6e1348e8b61962690407484758c008bf89051e551","sha512":"528914eae8cf08a50aae9cf11a35e267fbe6a720c19c6273ca486f1e6d78768603302a647a34bb85fab1b1eb55b0c544a4bc812382cea18a01f4367c0a47e7e3","ssdeep":"","tlshash":"2c1154fa36c764a61326646307bf400db3e537821b2a04f0e4a0d44d7f54e85666fb8c","size":992,"data":"","first_seen":"2023-03-09T05:10:08Z","last_seen":"2026-06-09T05:29:48.532077Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b43b0aee35624cd95b910189b3dc231","sha1":"4dc7c9ec434ed06502767136789763ec11d2c4b7","sha256":"454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1","sha512":"a882f0ac848b0b6b4ca7b42bfa1d266afd0ddeba9204ae57a984a69376d59816b1ef3f4d442ea8a70396067ff5b70e0ae8eab3935b617b8e366d8e35c3bfe14c","ssdeep":"","tlshash":"c700000000000000c00000300000000000000c00000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:42:46Z","last_seen":"2026-07-25T03:16:09.791309Z","times_seen":58854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5a84d0ba96cb07a3bddce34e99435d17","sha1":"adb8686043413def3436ce98b44203f96e96b674","sha256":"0c8f82b34421ec0afdfbe8c563f675463bcd0ae0dba0a0fedc04b3703d0bb283","sha512":"93a55f7587239662267bfa185f685f7a5446976b9a83fe93c8e6849802346f106111e5437141162be24d0d39256105f5a298957c99da9e43e70a485045b45f74","ssdeep":"","tlshash":"0ef023c2e212e4708030ed30c11b048cc04843635208393e7807c5fa4d32d35b8f7bb1","size":440,"data":"","first_seen":"2026-03-22T09:01:44.930465Z","last_seen":"2026-03-30T07:00:38.001977Z","times_seen":983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1f0eb0985870635e62fa2f68a223b173","sha1":"e4b203cd2273969f31fad4df07d1acb0924a0619","sha256":"e9ed69a6ea08507ea7f2d93985c23588cc4c5bd46b0f9997f1193238542ca395","sha512":"ab93a2686cbd6fa04f71b1daf1ce7b8f90f3bddc3e663469fedcb7dc743734e6da5725872ad9bce353abd298cdee5018cbba1499e841e29ca9235b84458ea816","ssdeep":"","tlshash":"c7100000000000003000000000000003000000300000000000000000000000000c0000","size":2,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-07-01T09:03:57.476738Z","times_seen":1843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6a70ff4f7ce576991dfb0b7d17349948","sha1":"baa9bb7de1d0bc1bbb883b3906503c2e9e34a03d","sha256":"d3fc2842ddfad4c8d3859f84d4439bfd396381a5c8a4806a7876bcefdc651587","sha512":"c6bf93a7813c4d9985a6ce54464bee09610bc20abf7ff6252967c5539282eb53972ff4f82fab0d06b1d2593349f83048a0123627bbc036ac409136ca9dd41755","ssdeep":"","tlshash":"c71000000000000c0000000000000000000c0000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T17:31:48Z","last_seen":"2026-07-25T03:16:09.744081Z","times_seen":6785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-07-25T03:46:33.130078Z","times_seen":166509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66a4d9708fdb6dd5597f3bbc7d624","sha1":"e10a66fa8a836f6f948941262b70e1fc928a446e","sha256":"3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89","sha512":"06c25bc4dba52367cbe19252c1a013e1714a198141d139939944422266aaaed60ea3953c5d0f890a7f9ce7887c5f2a4cbb47173d06f829d50ac33f6f353c015d","ssdeep":"","tlshash":"ebd023cb729c1114574337141eef0448bc64b4d70dbc941d8649581058011ede03aecf","size":195,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-07-25T03:46:33.107063Z","times_seen":206875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4306a04670067b5b27e766335d3d40fa","sha1":"864c42e4812107549051cc416d955594591a65c6","sha256":"d8689b62711dced3f13e45048ffff01759c9f65cc55206b3e95c054826f7f596","sha512":"dfaadfa10ff8c210247f519dd58cb92d0c563bb85fcc6085c31336bbd763b4e0b00af40ac216ff6950fa5cb997fcaa6255243086ae4062c3f5989fb395fff3d1","ssdeep":"","tlshash":"c710000000c00000030000000000000000c000000000000000000000000c0000000000","size":2,"data":"","first_seen":"2023-10-20T22:06:41Z","last_seen":"2026-06-10T06:57:39.610232Z","times_seen":1530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ff40a6dd42495f48e830c0b0eeda8655","sha1":"63c42f3bcab4aa23ba5921f920461d1d62aa2dd9","sha256":"bd96c8cfd3b139854cc7548c8a946a45ed5e415da6a42562126efe12a08ff975","sha512":"3166f7150f059f301d9ef2f9f27838dc13bade35b17a9b115b8c2604965cdaacee722d6d7783b6b7f20ade21a51a81af2ab847e365a99dfe68fc6897af433e6a","ssdeep":"","tlshash":"3770002c2c082282082a3020002b8008003200800002a00000220c820e3020a3002a08","size":22,"data":"","first_seen":"2026-03-22T09:01:44.916473Z","last_seen":"2026-03-30T07:00:38.086079Z","times_seen":986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7d5c009e4eb8bbc78647caeca308e61b","sha1":"636117b25f17da7e91194e091cdb8dc49769a815","sha256":"d3ef7de562f9a4a34a9a0b05a112955fdecdd0102c3faae5eeb03a195091a5e4","sha512":"763ad51788fb8f39a8a1d1d7c255577cdf834f9297a677273351a3f3969f9b3c675084847c14df4d38d147c0acf216bc65a8a221e3a6e2f8a1ae6910a0df272a","ssdeep":"","tlshash":"c7100000000c00c0000000000000000c00000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T23:24:28Z","last_seen":"2026-07-22T17:35:58.179692Z","times_seen":4874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DKnwhA04.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"04d0691ef560adb488e4b6f4644c5265","sha1":"703691dce49d4244b1c58dc10ab8a285e19b2942","sha256":"b1f432b4a9c8585760646aeb5a5e9686154ca139027818dd7ad9744e290ac647","sha512":"af80daf0b9be2e06be01828c6be6eda731cd8f1ab5f767eec9359f247367758117387dd844c0e725415cde1ef33f7e62cd579a1d9cb6d0fdd569bebf417073cc","ssdeep":"6144:QsJU8SN+jtxVR/ZgQu2W/rLEPhCWVcq9kNE:QwU8SNr2W/rLgjV3uE","tlshash":"b0544ad47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283592,"data":"","first_seen":"2026-03-26T09:27:08.846862Z","last_seen":"2026-04-23T05:43:00.852938Z","times_seen":1023,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"304917b92bc3dc0953aab8356f74c02c","sha1":"15f51444be75bc88e935c57ef2ee7477dc73a64e","sha256":"c3bd7d9e8b2caee8082be02695f8268ea6ec6292b1c06407f04874a40415155d","sha512":"ebf4e5fa064b08dc501d95265d9736856b4502be5d3e377f6e520505265ee1e235f16bdaca6e4b2f8bd7f7d74e50d7eb4bb3814bd08c1dff769c011ecbc8e523","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000300000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T10:00:13Z","last_seen":"2026-07-17T16:20:22.552923Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9149972db29c62b9850358eaa963474b","sha1":"6a596580b27c78bb5bc467688e92a7cece1f1e30","sha256":"2b0f53168fb7761fbe225b041434cf3fc737d0ac900d5a49a9478697467380ab","sha512":"84e58498df34910567a9b9e7db211d778b3c3a6517b10252b422736ebe255e35b9627b758c5b73497effd28c30ed46510ee327de6bfbc6149e46fe5e3f49bd4f","ssdeep":"","tlshash":"547000282c08a282082a3020002b8008002a00800002a000000208820e30a0a0802a08","size":22,"data":"","first_seen":"2026-03-22T09:01:44.838173Z","last_seen":"2026-03-30T07:00:38.001068Z","times_seen":987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"af496f26d7fbd73debf555bee2d0b03e","sha1":"81c867995cd3704ba2f5a80ff4d0c2a72713bbb8","sha256":"269fe8b0e78781632f2d98b79460b8b2ad33ba6567f73636c349838fd631dd55","sha512":"37732085e260ed82467857050fa074a4a015e21bf5de89740b6d6543e43e078b292cb81ba7c57b30a02ad960ca61ceecbfe13bbc7f3b9e6d1ae643dc035c2441","ssdeep":"","tlshash":"2ff0a3e7e9912c0d93fa43dedb653a7b24ef9531f91048911510dfd46330b13a824f61","size":459,"data":"","first_seen":"2026-03-22T19:42:00.890971Z","last_seen":"2026-03-30T07:00:38.077059Z","times_seen":448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4a0680b27223be8c760333645ce7375","sha1":"801ebbd9375c5bca4af82342ea5d5379ab88a59f","sha256":"1d004f8b0f8f1d95d1c6a11d7a5bedfaa4576456730262eb5b226e9fe67f8d46","sha512":"53cbcb6235538a40862d0dd31cf875c18ca920e059b5e0f055b95219f13e49d6a1633ee95305991e8eac7eb1231f892049b14a50a7c0b25368a96adff008db08","ssdeep":"","tlshash":"baf0780c06046d9ca8069cdccac5a7619b9c9277ba413125f82f054ebae3beb5930547","size":648,"data":"","first_seen":"2026-03-26T23:59:28.082814Z","last_seen":"2026-03-30T20:54:36.875091Z","times_seen":3018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/plugins/contact-form-7/includes/js/indexf2b4.js?ver=5.7.7","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb3ff82f097fdb2ecbb2a47ab18480f9","sha1":"e2a75fdc9cdab432948756d5e1b4bf9a7d251fda","sha256":"f2658ebc6c575fa3bab8b5174b08b21fe93b8f2bf82e4fb18499043039d204ae","sha512":"a1c791efe58f13e132bb0d43edac3d3fd48f0dde9cb9874593ebd16fe8dcb5fc493309e310fdc67138443ee48cda7db5fd6d1dba7d993f58e7e1f61bd0ca8995","ssdeep":"384:wekPylaqVRFYMwTSeMFUZjwxW31O4TpGQ:wekK4qVRFHn6JwxW31O6","tlshash":"5292b45712f10431077360b64a9bd641b325301b98cecf543e4cda581f9cebaa9f2bea","size":20593,"data":"","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.478823Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d25d4c125cb06c6b0b777901329fbe32","sha1":"37ca6c9a2330aeecfab5b261c74daa69d61d5d4b","sha256":"c9ee38bf81095ef51d88b1211bef92cb6285ffcb3e4f10b17540e23b56b4ac7b","sha512":"e1028c7da3365d9dabaadd1df383cff23953c61b9e8b16b7cc1f13d8057bf36918aba1b281756ef1039b27521c2432b8a38ffc54994d56e519fbcd3e4650e742","ssdeep":"","tlshash":"7bd0a7761227c40010e252873b5c6504606961137441b9523e1c12044fd690b91b6370","size":271,"data":"","first_seen":"2026-03-29T11:38:02.548377Z","last_seen":"2026-03-29T11:40:28.205314Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"468997343ce63c21a110f1c739546318","sha1":"8f3023e362a6924ee2665883b3236b3a984ed55e","sha256":"75d847562311e41f07cfc1c99c899efce3f8f9c132ce8856da8c545a1c7f533d","sha512":"36c750da2f4d110e2a90b7b95a0b313dddc6a7b1fbcc440472d8a3e9283c65143c216b389c733c7f5a510c85d59b7c855906557ee98533f24ccf8d6a4fef226a","ssdeep":"","tlshash":"80c02b19d7c1df5521f1c3dd235cb231716656038c179b97e5cc47804feb064c054255","size":149,"data":"","first_seen":"2026-03-29T11:38:02.549432Z","last_seen":"2026-03-29T11:40:28.214508Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a848fcc735999c9bf67a15bf2263a2a","sha1":"371f038184bcf4098cb285f774bc8f493896289f","sha256":"314421a8a03b22cc4ef5a2ace370f9cec31d4c4bd84d306e287af4f3b00f1d8a","sha512":"560b7e1f61060a416d557d47ddc790f0b8fa0850245eba87fa90391fb18b35e368b3e2e0961f8aeb0f605dad4d8e0195c3d67329d1f73f519362d3b48c126185","ssdeep":"","tlshash":"12419d2c2ae81075b1073139d5bf5048b572a29b6b4ded50380ca5645fa1e344ff9bdc","size":2113,"data":"","first_seen":"2023-03-13T20:44:19Z","last_seen":"2026-07-19T08:58:45.688089Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"08c7e965981b84c7c3ba560c349be8ae","sha1":"232d278e02daf8eba7b804fde9eefefa7f746f2f","sha256":"9aea142738247dc3cc5402dc05d12062db87f8ab4f2e0d879beb9d3bc4994248","sha512":"a96fe0078153a09f3c0147cb1d06362bd1fe4da37399e7c99939a36f47bc711985d07317ba165741df2dcd3a6b38f1fd736d9467a0148984c5511b578a51e528","ssdeep":"","tlshash":"0ce026e49820251e95cf85a4c2e7b3c12d638669ef0e9c94c9f39f59ad71507add3048","size":351,"data":"","first_seen":"2026-03-22T09:01:44.892115Z","last_seen":"2026-03-30T07:00:38.084277Z","times_seen":985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4a0fd04a9b9787a6949c8bd2f6996de2","sha1":"e083b83c44fb3b71f6a4adafd278285c8bfcdfed","sha256":"9405d9655f9866a22670ef47cff53c23e577956a62a05e370c5da419ae227a4c","sha512":"93d342998a0228a36ce5978c2364f6eac3ef0716742c8f60f62f2f9ec6034a6392844f7a9ddd5105c1bbdb559eb9c5b16e3b9dfa0dcdf2ea695f8a82c86f540f","ssdeep":"","tlshash":"6cc022e278b2c8b892e0ac23083b124048882c82f3012073d200f91efaa19970868541","size":190,"data":"","first_seen":"2026-03-22T19:17:48.798428Z","last_seen":"2026-03-30T07:00:00.616452Z","times_seen":429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"defdb22ec8189420871b221328484ca8","sha1":"69a75c5a695e120f86909a650d08bc14e4cbdd8d","sha256":"a7d53e58236584b66c64327dfd43854cfa7eac0f5bc31cf019d2fc714d710407","sha512":"2235ba6ae259898d0d76a9c05aca56977c5ac607b39061566496f044ecc5dd3633bdbc083d1ec12640b952a64b16479d1c7323e3d7eddd653ce7f30c938f3f77","ssdeep":"","tlshash":"f4b012004884bb0805a2d173dc6b00252065026411dca204804dc15103d00e57130fdf","size":94,"data":"","first_seen":"2026-03-22T19:17:48.815082Z","last_seen":"2026-03-30T06:58:36.798348Z","times_seen":436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2e034b8fd6f3d8364e047c83dbf30899","sha1":"d23ac737209b60da13e9c11e537b69561a88e381","sha256":"05297de90f39ad307f59a055aca09290e2526f70d9d92e6629e5643336222637","sha512":"b3db3710d42ab200dd1769083ea76b4e2f8d796844d0ba503c56432177212f474f650f41189962413a201c0175b51bdae35d11bcb1d562d033547621d2d620b0","ssdeep":"","tlshash":"c6a022a82c20f0e838b0ac28c88b002a00af00a3b2c28023080ac20302e0f303003008","size":67,"data":"","first_seen":"2026-03-22T09:01:44.847819Z","last_seen":"2026-03-30T07:00:38.06697Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9ba1d30f07bcaeb5c609a26140bb95ac","sha1":"dbded3103e0909792db9baf0704a11eab16dc231","sha256":"7a519d6ce4e4a47d1429fd30bf2946a59cd9fda33cf995b005143b22125614a2","sha512":"0bdca1aceab0626574f2b0bb7a86390ba5771c27d7d773ffbcfba03869a70e2908a830901f3699b3851f6589a7fd340c9d0b5e87bc8b0393db3768755ffff538","ssdeep":"","tlshash":"5d11eb81b190366e7c943fc9457bf01441a8e249fe8e5159a543c6e08324a83586f68c","size":1088,"data":"","first_seen":"2026-03-22T09:01:44.944606Z","last_seen":"2026-03-30T07:00:38.008706Z","times_seen":999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"16b61f0a66eadd0df84d0a1e3f27f7c8","sha1":"cd9bf8d81ed9b56a52a358221d3becba4cab973e","sha256":"4fc4895f18a7379e9e2ce45fb4797a3078ff7f547136e282e2054d8c9049d364","sha512":"d4a4184a4a314a364b50cde5c01fa573a41322e63bb3afd76b19a4e559aef84594bde1dd084212929005b17b748c7e02f80a7c85372fe7c93081d45c8eecb35d","ssdeep":"","tlshash":"fec012d57696d478f391d89314335350588a2ec5f5064251c281f81fe9556160c2ce40","size":181,"data":"","first_seen":"2026-03-22T09:01:44.915582Z","last_seen":"2026-03-30T07:00:38.022275Z","times_seen":994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"66bc43b0e3886ff1768baa614f4fd58c","sha1":"1b0931777ea345beb497b74e842140145990a773","sha256":"17d3690849f1ccf4916355e30bea48eef6f86f638ca83846e5b6899a4d064af3","sha512":"eb01e87721371674e16d6e7e1e75bf907445fc861f9ac5937e1cd437fc5708e6a34847d4af85089e5c2cad27ad1def4ef1eb3fe5ee35ef5bba4d12b122704dde","ssdeep":"","tlshash":"7be0c681e73ad120b73be0cbdcefa58c12a9023020c0c42d935ae3300277ff48a98842","size":349,"data":"","first_seen":"2026-03-22T19:42:00.858461Z","last_seen":"2026-03-30T07:00:00.585868Z","times_seen":433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/js/language717d.js?id=42b28e76f4a089e15d01\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d961de7235753ab72a0aa01b15b13bc5","sha1":"2379d4776128dec41af3edf7165623d482e04f40","sha256":"334cb30667bf337d7d64d84450813bf72b89bcfc45e2893d89dbb119c88907fe","sha512":"d2e50b30dad77885aeee9858ab3f164dd6ce43fd33c2f2853f92fe237223ea253b925286c9f2a0dad7bb9a4a8e104e5caf76c95f0f8dbdf5787b97bab47118b0","ssdeep":"192:p7r/yqWVRtI8VKM6GSgICgCpNqCy4TeeetsbLruQjnVc9VnEVasqmh:ZNStnYCZNbLSmVGVnE0uh","tlshash":"8a02805eb9f264701213b03d4a2fd908b236244b5a9cfe013e0ca2a15f5593a57f8fed","size":8367,"data":"","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.457498Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e836aa00caedd2e2dc32b4d21328aee0","sha1":"f5fa51ef582d6590b19a51a3d245d8fa03cb3f9b","sha256":"b078e513ef1ba4e50827effcee249aefaf1e72e49eef8773f5b8bf55612461aa","sha512":"d455aa3f02bc3ff66543b14472f91e0d46b6563561e51e776c7e9d58a46554c5fee60d1a51e9c9325a2dfc79bd5cbcb73c1f3eb7c892e8593cd61ddf00d9f5bb","ssdeep":"","tlshash":"2ad09506f4ce214a0a119bd60d27d11d543084442c4c4d8d330cc55035cf9cf30f7644","size":253,"data":"","first_seen":"2026-03-22T09:01:44.824618Z","last_seen":"2026-03-30T07:00:37.998117Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1815235d384d2912d4668c73298f1e52","sha1":"6f3981282623eefd0db62ab8102d5317684c0a32","sha256":"ef73fb8e44f0424f578fb883f7fa96f5d198781a117215755119a433496222b9","sha512":"56d9afd149484add3ed4ffd6bdb620e27b4dabcf315fd840a6487d90a23375d0e2da82ee77f869692a9661ff5f1b63ae923c1d56ce840ec6f856e577ba972e47","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000300000000000000000000000","size":2,"data":"","first_seen":"2023-03-12T19:39:41Z","last_seen":"2026-05-20T20:32:31.952458Z","times_seen":2186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-07-25T03:46:33.102167Z","times_seen":265571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6ee96911dc8ac303fb4d603b99d3d7ff","sha1":"27cde661b8d0ddf1c212bb336747f992cc190ac2","sha256":"bd39f56b5909312a96a9b0c7c842f620ad07948d4ef75236acef64f3579c64f3","sha512":"06b47dacfdbb6e92f1b084921b668f19d8046e15365cdc1297061c3300b94c0de69eeddb73feae0eb776a49fbbe4cc92255a5f623e09aaa652e348f5cc38e895","ssdeep":"","tlshash":"6ed09728f048b04dcd1a9f2a9c33e0394c2180412dc4cc4aa31a899434bfc0b80a78a8","size":247,"data":"","first_seen":"2026-03-22T09:01:44.929627Z","last_seen":"2026-03-30T07:00:38.087872Z","times_seen":1018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0b8d5d774322f84bc4ba3bf738141470","sha1":"051f2d0f8b42c544534e88491bf1f03429cff42a","sha256":"395a990410367001e57446d0797a4bc4f6041d573ad203076175c40e4dde0a42","sha512":"e5d495b68e089dffb2bd7dd0c15741ab405e6e06e7da55eb305b12499c26eca9875b8188826b13ef2d8819753cfc8b22442be32ba08991f9ba28abac146da149","ssdeep":"","tlshash":"a5c02bca630c07f28b8a02e8c653426b440030bebed02f08d740e103db88b4700dfd2a","size":150,"data":"","first_seen":"2026-03-22T19:42:00.816347Z","last_seen":"2026-03-30T06:58:36.903491Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-07-25T03:46:33.128224Z","times_seen":174331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7ae264290ab1f6eda123f2d5ee4c385","sha1":"13e6c9fb0f165fdc5f4ae9c5c7acbc513a66452a","sha256":"7fe89f5db88503bf95301fcc4f0ff354a3e44d19288e7138ed4e620645d6f82b","sha512":"1686627be0f9db379acbe43cbcda81fb844ebb97edc3da8541245b70b3f742231b06e9089b0f3cbdd48cb35915b28d3fc10b0c41c1af0b26eddc7893f2f3e693","ssdeep":"","tlshash":"e611000ca032250790afed8b424ba464ee42ad774c39c62c9809c38c746020e0d6f7b9","size":878,"data":"","first_seen":"2025-08-11T22:26:50.581535Z","last_seen":"2026-05-02T17:41:46.92687Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"26652d91bcd6beee3afeb783c34cd38b","sha1":"9144f0001af5f37b01a76738fe34d589bd55587e","sha256":"a171e692c683d57a5dfea8c6d8b2611bbc3d0c4e35d6fa61cb2e3a9c3edf8302","sha512":"d5f5673b167d64d56a214410568681ffbf3c95ebd97a3a0ce987ed8d6095e283ab71d4a0b125af28e7bf57917b342a4cc95c823faa6e88115918854079135d27","ssdeep":"192:yzEjQfb/44Tmlavb+Nvyv8kYh0sxVjocbVW27sTM73Mc3Udq6bRXnLNy9nwQiFJX:+OQfbwxavBv5YisxVMcU27sTMDpXiFJX","tlshash":"9d22b70fa39579fcd7c15598b7a36b036cf4821b53082b1988cba0582cddf5942ab9ed","size":10007,"data":"","first_seen":"2026-03-19T22:23:51.236573Z","last_seen":"2026-05-07T21:22:57.902944Z","times_seen":34607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8277e0910d750195b448797616e091ad","sha1":"3c363836cf4e16666669a25da280a1865c2d2874","sha256":"18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4","sha512":"48fb10b15f3d44a09dc82d02b06581e0c0c69478c9fd2cf8f9093659019a1687baecdbb38c9e72b12169dc4148690f87467f9154f5931c5df665c6496cbfd5f5","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-07-25T03:16:09.799682Z","times_seen":57553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"30d186b84e0712017e616d952601920a","sha1":"0aecd87f9fb385dc2b0e63b7d2423dab3c6ed4af","sha256":"8ca43c40c5254076a5888399e6988b48d9fa3e762807ea0262eac59b4ab01fff","sha512":"00ac9be2d8997791857bba9e4abadb61009f7061a98b3b010934d4ab1023761ddf99a05b569b3ec77e797fbec301a01f1d6a1677e65dc46a4a9f982fe3330f66","ssdeep":"","tlshash":"3cc022e278a2c8b892e0ac23083b124048882c82f3012063d200f91ef9a19970868541","size":188,"data":"","first_seen":"2026-03-22T09:01:44.94151Z","last_seen":"2026-03-30T07:00:38.086938Z","times_seen":996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6155950af5c08f3b4d4fd6cafe323a83","sha1":"b8e05fc2888b36d1627f6e53e03570906b0f303b","sha256":"931dffe0e82bc8b6a0b490709f7afccbda9d56410c45c7be5ec80e4da9380072","sha512":"0598b336f8ac188f90a953136d2c531f0eed3872bd1688f49c0b71fd29636fd59fc8db56910fc6854a299ccac43bd70b74fca9a4c9dc792e2fcb64070e0c36fd","ssdeep":"","tlshash":"74a0220e0c08fb0002e00030888a002aa8c2000233c8c0ecc00ef80003f02e03033cc0","size":79,"data":"","first_seen":"2026-03-22T09:01:44.91111Z","last_seen":"2026-03-30T07:00:38.025748Z","times_seen":1003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"552a6744d3552d9dd833a2edbd265eca","sha1":"79202696d05603bf5ef6095bb34ee77128cbbcdc","sha256":"ece8229c938aa523c30b65ef56f8ce362a6cea9f8b6b3b9aeb512fd8e0883094","sha512":"04d158a0ec7ef975cec0a00fdd71199791b95ded9e7b4fe268f6c5d0b0da1d2166099f56640bb4492f7530f913ebd761437bc04ccccdb3909608f4886f455acb","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000030000000000000000","size":2,"data":"","first_seen":"2023-03-10T13:29:45Z","last_seen":"2026-07-13T21:26:36.897812Z","times_seen":3163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6974e78371168f8c68003a97d00d8e00","sha1":"8e61a6f43e299c7508be170ccff120c737337e20","sha256":"20b92f0f72f52c1494762cadcf6810869d3d56868b3b568a8e65edf206f080c5","sha512":"943dc16866098af077af0f8e95c03bcb68b809428d7b101cf055a21161a2ab35a3dca5c5cfc57aab2185246b8e2fa2d39b9a70d1c84025299aed65735aef0584","ssdeep":"","tlshash":"19d095b88e5c204b9ffd9df1c093d51d015130c33194b4d1011bc17224f29f13552544","size":254,"data":"","first_seen":"2026-03-22T18:12:16.09323Z","last_seen":"2026-03-30T07:00:37.990069Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fdaedf8d2f02698002ef7a2c6439b32d","sha1":"15e9e841fe03c9ac965131e54a07ce5b65a1a293","sha256":"ef1066dc8d440641a2222db57afd7f332c4a6ea46ac0d98d2b8abb18bf75112f","sha512":"b30ae600dc35412756c38323a8780ebe48d9d322f7a2b7a7f5c403cd453a8ea9f39c72efcfa66f9c3bd54857ef4470123d4c072a8c1623e69fbb2c1f64707cd7","ssdeep":"","tlshash":"498000382c0c20020002b02020fb800800a228020000a8202fa200c20c308aa0022e0c","size":26,"data":"","first_seen":"2026-03-22T19:42:00.854105Z","last_seen":"2026-03-30T07:00:37.999129Z","times_seen":455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cedc59a40f029b9ffcc737f48ed4b133","sha1":"4cac2dd48b2072cf05933fb2567ae6b5805ca56e","sha256":"07fcf697d13d322903f7eb0fe3603d38645fee446fb778ecefe5d3f920e3531d","sha512":"c59840e8ddea295904f843bd77fa6a1c02bdcc5f616cf7a704e6ff1677e4d4b2b5101987a01a76d6d4f5e1300f6834f298fb3bf5e069477dcde181bdb2cf5d4f","ssdeep":"","tlshash":"12a02208c8823e8230f2acbe328c208002c302880a20082008ccc30f0e8b08a80ebb88","size":68,"data":"","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-05-02T17:41:46.927733Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/plugins/sassy-social-share/public/js/sassy-social-share-publicc251.js?ver=3.3.51","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"67c590a7e54f7b59c7c10779654355ff","sha1":"5c37ee785cceef50ec1b846e278199b7aac5ec6c","sha256":"7bd91eb0294583e5e6de8515a9500590a8d3f7deffa385d1ed44a14eae6d7c3d","sha512":"985b5eb8e3a22284e3b35a6735f93d0fd00a0364d03524966a2df5bb1552f840114caf40213afe6b9fea6e9abd13bf0b7f0d0085790b6664f49fca2d1021e134","ssdeep":"1536:69jbzSHNX/OWQgmCnBNo5FZ20bkSNbJkRwbciq2+0wZRNddU4yddPd4:6hbzSt2dg3BNpFRwbciq2+0w/Jel4","tlshash":"54d30a99e350615ca87b8f6cff3a814cf21b61afd585428df47d92282f725d0f882d68","size":137228,"data":"","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.485147Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-25T03:46:33.090752Z","times_seen":253174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51351e748798e4749259f93148f504f5","sha1":"ff395a9321684d042a3b766a9133cc436330c3ac","sha256":"55e98acb5da3703a2087b3996127ab07ed4c909ec1cc796bf63c73cde54409ab","sha512":"b36baceb4678dd23ed81a9aac61d3832725dd7be5946c833be435944f673a7644d4949dd1d8d44dc1b77c2f85ffb690858ca0284129b5c8f6a2f593695260e15","ssdeep":"","tlshash":"c710000000000000000000000000c00000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-04-03T23:55:31Z","last_seen":"2026-07-16T06:45:59.020131Z","times_seen":1572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f548d1b152495526ffc12088b8f62e15","sha1":"f7719fd6807d437cae0e56e8cb84967f6251b279","sha256":"5eff191b281984a7e35a14ece7b51a9109d1c4e0aa0842ed92aca1ee22c2d305","sha512":"193a35eb1d671bfba5d08b4127008cfce4402ac3db9c99110bb723fdd910d1eec8be4d687f37f984aa6637d37e3c36a25747bfdd63d794b402e96ac5b052ba3c","ssdeep":"","tlshash":"c710003300000000000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T10:00:13Z","last_seen":"2026-06-05T11:49:58.387315Z","times_seen":1915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b84d0fc88ee746bc068e680be4efb695","sha1":"d2cd6428c4ea5fd4c914595efc0966a233106561","sha256":"6e92bc7ba4fdaec76c974745ba1179d7996900474b9af1aa702b30309c8f0da7","sha512":"bc150b278eee50568de6f3c538136f335c6c0d6e39a62ce4e358ed36e891c65023a0f46ec42cfe7829c7e5415bf6e8f5578d4a380c8c385941cd86884e6687c1","ssdeep":"","tlshash":"65c08cc0b082a478c2e1ec63247686004caea816e70b8012c151f99eaf62a2b6c3ca02","size":171,"data":"","first_seen":"2026-03-22T09:01:44.938202Z","last_seen":"2026-03-30T07:00:37.989522Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"baa4d74d407e879ee2aa5f7b7b2a2050","sha1":"29eb847577b719f45c6eeb54f5d6ba7675ea81d8","sha256":"f194fc42ad09bce93f67840b3026c98d6134eeed20ec50cd1ebf41f106b56a4b","sha512":"84785d3f7644db9b2c55468cdc78f06a9b2fe2eef14850b446a835416eb050450c2b08d2a7aa7d2dc643839df679ec50e04539eb8c33093f91c01a9b86132e8f","ssdeep":"","tlshash":"f3d0eb6af75114004f978210142a20a2525d08223eae1290a30ef1282db102a02db9e0","size":275,"data":"","first_seen":"2026-03-22T19:42:00.811996Z","last_seen":"2026-03-30T07:00:00.661956Z","times_seen":436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4196a65f824bb84751c09552fce361fc","sha1":"87d0d698baed41843c2b304ade08eb14afb4c3cc","sha256":"6220ecc22cfea43276cbe5337c1ef9338229a50ae39898d45b48f8fc711f058a","sha512":"6fae52f0f40afb3c6c51e2d3da16816dc2fda80c7658b011b8ea1a9c331b3db322eb8ade765671ecaeef3a85aec82a355b3c720280632fb32f36a746d28d8c9e","ssdeep":"","tlshash":"6ce0f13c3c30805447b310b4c1bbf2387d1a30700081de938497d8b96cf0fc96d01995","size":418,"data":"","first_seen":"2026-03-29T11:38:02.565516Z","last_seen":"2026-03-29T11:40:28.23053Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffb1b4919c6a08877c11cf7f6fc99c46","sha1":"e7a68222a8c64518ee65c9a420788ac2ade4b7ef","sha256":"393c1ef711fd1ac2420f73bdf517d8d383c55a0f40a26e641a9c96f934535b55","sha512":"c2996a094e4695aa5585d38e0addfe01d992e62c23252c31a9deeb0c0271d29a5d0700e1564388061784a02aa80107a866485ab4f1ec173cfcd765671d9b360d","ssdeep":"768:e6S2lYgoYI56ECa5R0ZhePEp+Ng+wIrYvpq/3AZVh6/reSaM69RqnInrlr10ZVn:ogwxCaEZwPwIoIrYvMyeiSaMk8nelr1s","tlshash":"98f2f25ee2e3d0e3d0351f23f53f6aac085555b54048dcf188d2958cea4e906b8af7a4","size":36804,"data":"","first_seen":"2026-03-29T11:38:02.566562Z","last_seen":"2026-03-29T11:38:02.566562Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d5ed678fe57bcca610140957afab571","sha1":"ae4f281df5a5d0ff3cad6371f76d5c29b6d953ec","sha256":"df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c","sha512":"848b0779ff415f0af4ea14df9dd1d3c29ac41d836c7808896c4eba19c51ac40a439caf5e61ec88c307c7d619195229412eaa73fb2a5ea20d23cc86a9d8f86a0f","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000030000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-07-25T04:06:56.647023Z","times_seen":78726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ab0fd361fde5c3625fe76007f204cc04","sha1":"586822f22eba580f677299d56e4913a55a00b000","sha256":"0ed29ae2b9f4305d89a6f89d79fbf774b3dd476a78d7bafbb18e1a00fefc7b1e","sha512":"516314ff7c5ec61e927b12c39f1c70a26c4bb1bde7f8fea69535921e27247151f5b28d340b1d3029642831799bd5155ecb9727812fc253afdd5546fd3f26c850","ssdeep":"","tlshash":"c71000000c000000300000000000000000000000000000000000000000000000000030","size":2,"data":"","first_seen":"2023-03-25T22:10:31Z","last_seen":"2026-07-19T07:00:06.89953Z","times_seen":3898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"83c2d09a5dd1d1c5f4f7f484450be380","sha1":"47c9e4065f052692f4a295c4a92267f1d194622f","sha256":"56f8921507e0f67c48d43947aedb1470fd561233db3c6daea747f8894ef412cc","sha512":"1518b7325b06e7588e96d730c6070268a76c0eef566bfaeceefc14a7a9933d5268da3a55670365012d20d374c8b304fc84e1ed0066dd20e575376803c88fd29e","ssdeep":"","tlshash":"c710000000000000000000000000c00000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T23:10:38Z","last_seen":"2026-06-22T13:05:11.70233Z","times_seen":2897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"26d6559ed250f985e13f279c594037d1","sha1":"03f5078102b69665202e9f0e98665dc5855e3f30","sha256":"63d32300c8f5a5de5ac1bbb78f181a353c00b29ce05ce6bb1a321ca9638e29b3","sha512":"1817b23abb708e6452808f19a9dffd6407011cc9a2dd504d3f6fa4f8a1d2c6ecd96b1b0236b037e4151dc5cf854f16874581a3cc2188fa41399a984fb2f0cbd2","ssdeep":"","tlshash":"d37000282c082a82082a3020002b8008002200822000a00020020c820e3020a0003a0c","size":22,"data":"","first_seen":"2026-03-22T19:17:48.84643Z","last_seen":"2026-03-30T07:00:00.658689Z","times_seen":453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"45b64151df690390d817b291a4a8a8ae","sha1":"011cda6fdc1a212960b033bc3a6ce963b637487b","sha256":"0f51b35ba47540f2d840030664adfe6586335be0ac864f0fcc11c1fca818f5cb","sha512":"e7d2cfec5e223991a26619defd5f61abb03a4d57dbe0d2d833ebe50ebd50f37216fd53ec4a071a05379ef1e4fe5f3822798bf844d453ba7c243975083533a79d","ssdeep":"","tlshash":"c7100000000000000000000300000000000030000000000030000000c0000000000000","size":2,"data":"","first_seen":"2023-03-10T18:32:14Z","last_seen":"2026-06-19T06:58:37.960999Z","times_seen":1515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c9de7cf05728348bce5c2a676474704f","sha1":"1fafeecb291d5370b942b7739879f4596c79a079","sha256":"9c77cd48e1e783a6b6beec93172141d9376b12b15fa81b0619b782166c5665e1","sha512":"ab2f812d1f631f3d17c809fc5f22c66b9f647a743fc0e86ccc42449a7514c3a999259e075697729a81cef17efa5ac454d8a451381f16a321bfe848d792e6f8a9","ssdeep":"","tlshash":"49a022080c22308822f3e8f8c88f0000c0b8c0c3e3c0a0c0008ecb0303f00a8f0e0c0b","size":77,"data":"","first_seen":"2026-03-22T09:01:44.917714Z","last_seen":"2026-03-30T07:00:37.995657Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a27264dcbf32d3c1071fe8fe2ee35c1c","sha1":"f01734a94ca54a27ef82ec42ffa06076e3114281","sha256":"cb95e82fe042e08515141d74303fc5f0a84bf1e0606090a8ec73468f211f6d90","sha512":"26728bfb13524e1bc35adc4663556b397aa748ecffdbbdfa3473ce042b3a7737f96ad4acc0172e9c0c80ac68e8bb14e90d088961c0b054df51a4bb5851ad42e8","ssdeep":"","tlshash":"c3c08076978df57412310e73685ec11501e55248b5924c29f359c55003f8dba17336d0","size":184,"data":"","first_seen":"2026-03-22T19:42:00.812796Z","last_seen":"2026-03-30T07:00:00.665582Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"478f595480d7f7b559efa688998b6020","sha1":"2ec2fa2a19d1911eb49d4305f6329c6b4fe15ce7","sha256":"d9442b84ddc96e359603eed03095f5947596468ffe75050bcccc2313b1e1f54e","sha512":"89cd797b979452fed64460b8d44c17f1eab71c2df39c32de644fb81218f962add4c86d6eba278e7cd5c6541aafedeac1518c4d6b4ab71148f16b05aaa20f79ab","ssdeep":"","tlshash":"4c7000282c082282882e3020002b800c002200800020a000020a08820e3220e0022a08","size":22,"data":"","first_seen":"2026-03-22T19:42:00.853214Z","last_seen":"2026-03-30T07:00:00.689427Z","times_seen":446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","size":4,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-25T03:46:33.158317Z","times_seen":277819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bfbfba58031e93393ac148b34d0c36bd","sha1":"c7392cdd6269c49300e1bc1d0ef10794fea85da3","sha256":"92fcc87c1d878a2875c222baf4f897ad6275d67858c6fb590139b68a39aef38e","sha512":"89b1c35200e9c3602d34ac325e3a80f5b994da4137789b5d1c5555e78110b4a1e433be874865e8598843d8651885a1ab2b8154de5216c478c5696952ae297d35","ssdeep":"","tlshash":"0fa00263c529c567003d55605da73116e1185764c816a10c035a960975ea46bfe9859b","size":62,"data":"","first_seen":"2023-12-22T03:52:09Z","last_seen":"2026-07-25T01:49:36.932933Z","times_seen":4953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.tgVis6b6ZfE.2021.O/am=AAAABQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywG4MgjSLdmolzhM4QATu6VPhNs6HA/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23886725470aa035229c5d05edcc06f7","sha1":"2f63618cce5861f04c2218d9c77ec14057344edd","sha256":"1af5f25bdd28f8eb08da4dd18e6c7018ed21038999dbeb782b7c622f5b582838","sha512":"a6159b1843545177d868cb91131e8f803d25269347cdd4d87e9cdc80f0730993a61886b41a5b01a108d92fd007595efc8c8779cab2d6d2a5c1bb8ddc137d1dc3","ssdeep":"12288:ThgX465iludU4xzvjNLovWaVmtx+0WDcFKVsYg1QlhA01GePlDxxPvmSDq1IxC4e:ThgX465iodUWzvjNLovWaVmtx+0WDcFL","tlshash":"eba45ce0b291f5b98b425cabf97b8003717e5d42f2054464e4fd6eac18f8e4ca177b29","size":462482,"data":"","first_seen":"2026-03-27T15:13:36.10256Z","last_seen":"2026-03-30T17:21:16.397295Z","times_seen":2236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1 HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_other/allowlist, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: report-uri https://csp.withgoogle.com/csp/youtube_other/strict;base-uri 'self';object-src 'none';script-src 'nonce-SRLzp5toyINMWKvhskJbXQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval'\r\norigin-trial: AsnbWYr3bqK88n/C2BgXPMpBC+msV4jf6vsgnAir+gFnHw3zXZEKmz271E4vhxTja+7SD2q3dr2BxZlHzvj9HA0AAACBeyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUtbm9jb29raWUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_other\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_other\"\r\nreport-to: {\"group\":\"youtube_other\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_other\"}]}\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":132359,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52079)","md5":"59085bae47cd93b701fe771ad3dbbe76","sha1":"ef1fe8432c6430f3f21ab3f9131ce747bf4f7ecf","sha256":"0c26d462892c7fb986b1116936dff6a7d41abbf291db0414c580026f692bd2df","sha512":"e37da7916cbe0b5be73c3883e47ec26aa778bac8d6acbf19c6343f5033c603c28c2f5a347a5bca469cd2f8c6c2a5f0e3fc454503a51cc01a5b1f87da4250318b","ssdeep":"1536:1jt/POrcyxEtQ0Ghq7Ifd4jU2wg50gwxCaEZwPwIoIrYvMyeiSaMk8nelr10ZV:KIyBCQv2wgFwUwPwILDiEPetW/","tlshash":"16d31a250858a8b6c5939447edbaff3e9cf8023907c995adbcbb935c05ec6510eaf413","first_seen":"2026-03-29T11:38:02.405471Z","last_seen":"2026-03-29T11:38:02.405471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":170,"dns":80,"connect":21,"send":0,"wait":110,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:32.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:16:49 GMT\r\nexpires: Fri, 26 Mar 2027 02:16:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 292843\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-25T03:51:54.168061Z","times_seen":944770,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2021/11/Ledger_favicon.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:33.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/Ledger_favicon.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Mar 2024 19:01:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53007\r\ndate: Sun, 29 Mar 2026 11:37:33 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53007,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 313 x 313, 8-bit/color RGBA, non-interlaced","md5":"6cdea008edbce86abf9905ce10a905d1","sha1":"f27afb06b9c7595492638524a9abe7a158037c14","sha256":"0f5b4246b7da5a03afebd35be8f126619fb98387ffeef849ea8281b73813acdb","sha512":"4fe6d111ef3e71ea93910fee1c1cb800b7aa265288905a888a64ba22860014c6fa9d5ed55bd82adae2da40c05cce9a42cb6a6ef482c00ee881f2f7555273f9c7","ssdeep":"768:pkAbWXGU41zz0eTUDKW7IZujm4CLgCDl9J8L0GmXB/N0c7DJ9nPx5+fN4pi:iA62RJzHTU3IZ8ns1w4XB/NR7nPxAfR","tlshash":"a03302c7d309342cbe82247605378a90914b30cfe1e7d5204bcf91a69796e89bbbe197","first_seen":"2025-09-26T11:46:50.688611Z","last_seen":"2026-03-29T11:40:28.097213Z","times_seen":4,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:34:08 GMT","end":"Wed, 24 Jun 2026 10:34:07 GMT"},"fingerprint":{"sha1":"C2:80:24:A2:B9:B5:FE:08:D5:9C:54:4B:3A:9A:8B:58:11:03:59:30","sha256":"4F:89:7D:DE:1D:14:7D:79:28:01:77:E4:A2:61:C6:AD:B2:D5:1B:97:99:F3:76:01:2B:E0:9D:C7:39:4A:42:7C"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e153-4684\"\r\nexpires: Sun, 29 Mar 2026 11:40:53 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:23 GMT\r\nx-77-nzt: k8sKQZA7+na2WuuDjjLq96KAlKqfnFw+envh63oU6zlvM55H87SF6PQxZ17r5W1P7xDOpdY\r\nx-77-nzt-ray: e2f75420c186c447fc0ec9690eef3f37\r\nx-77-cache: HIT\r\nx-77-age: 38\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-08T20:09:52.517882Z","times_seen":4265,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":46,"dns":19,"connect":7,"send":0,"wait":7,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/css/live9f3a.css?id=b7078b1ba1260bc03971\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/css/live9f3a.css?id=b7078b1ba1260bc03971\u0026ver=6.2.2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5281\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43510,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5eed6e9e313a106a4865bb29667aae36","sha1":"0594547d0fe63e81500bdc1fbb8346e4b5a89219","sha256":"5a51abd059f31e8ce8118548c8184819a40891935291317373e4b4cda0bfe22e","sha512":"fdb26c3afba14580079effb21ad439987adf187d96dd970cdee50b653596fdce974302020d8bfbcfb1a1ed0c6a25b28e9b0025a67fbf75ec64ea65f4198ca15f","ssdeep":"768:1iEQZRvFyN698iZuVZYp+hOiKhG1lsCNQe2iftOulEsVy:1iEQZRvQ698iZuVZYp+hOiKM1lsCN92v","tlshash":"21131e5b99f36a1c1d5fa229b97e21b4a2344403a74f8fb93ccd6309ef883744535e89","first_seen":"2025-08-06T15:40:06.608696Z","last_seen":"2026-05-02T17:41:46.88204Z","times_seen":12,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/plugins/sassy-social-share/public/css/sassy-social-share-publicc251.css?ver=3.3.51","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/plugins/sassy-social-share/public/css/sassy-social-share-publicc251.css?ver=3.3.51 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2429\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12265,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (464)","md5":"1b180d51c60a3b655e8ed742596da5bb","sha1":"82b958cb735a2247473b94e6842fcc85a51ae129","sha256":"2f4bd0cb0d2573365e586099a31efbfc78fe5337c1f0c5c3cfb3268a84b5a04c","sha512":"cda2bdeb2a4439c2f11f2b71b86631645f84048d5ee90f7c00df3fc966a4e1d82851562b0670328f0c261aa94914f27c6359780fe54f9c841e2404322a592ca2","ssdeep":"192:nBXYF6J4+NVsclRKi3KJdB4q58OYDy7FZTRqV24et3zG5TYIOquLUc2fTFsTUT5r:+F3x7F9RSmtDAkIc2f2QdHgBrGaDb7/w","tlshash":"8342f21aefa7096a7427ccf7672777acb92418430b4bcc7dbe40f36c4f4264a45a5648","first_seen":"2025-08-06T15:40:06.63857Z","last_seen":"2026-05-02T17:41:46.659254Z","times_seen":8,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2021/11/logo-visa-s5e1f.png?v=2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/logo-visa-s5e1f.png?v=2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 214\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":214,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"17f5243c3a84075f32bbe70a9f0b12f7","sha1":"f3c8446d6406670dd229c0e025176bb4e2897b1a","sha256":"5adf5cd3e127ec2fabeed953b364b02451f6c0e1aa705419de3b03ca0091419a","sha512":"e2a6cc5baee6362131167586e8351b936d7fb113be07832de0bfca135174b42e4ce7730fa9d36d70c2b724398a9021e162ce66aa2a9d5e50274a95e66755f70b","ssdeep":"","tlshash":"3ed0233d76fc22450f253d074b615d5a71051864a4178948b57d1c1c3f54ca05fb5544","first_seen":"2023-05-28T00:04:53Z","last_seen":"2026-06-09T05:29:48.519348Z","times_seen":86,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/translate.google.com/translate_a/element7876.js?cb=googleTranslateElementInit2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:31.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /translate.google.com/translate_a/element7876.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/cdnjs.cloudflare.com/ajax/libs/Swiper/9.2.0/swiper-bundle.min.js","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/Swiper/9.2.0/swiper-bundle.min.js HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:33.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:33:12 GMT","end":"Wed, 24 Jun 2026 10:33:11 GMT"},"fingerprint":{"sha1":"D0:0A:A6:39:E7:85:DF:64:B0:13:66:E3:06:E8:BF:2D:3C:AE:EA:7A","sha256":"70:D5:91:24:1D:F0:F9:7F:57:55:99:71:1F:A5:15:C2:B9:C7:21:65:6B:42:A2:34:4A:6D:A7:53:70:BE:C0:7B"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://qfsvaultsystems.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 11:37:33 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69c4f8c4-7b0\"\r\nexpires: Thu, 26 Mar 2026 09:24:15 GMT\r\nlast-modified: Thu, 26 Mar 2026 09:13:40 GMT\r\nx-77-nzt: k8EiVC0FJoqyJqh4nsvMmU7KCZfJkx02hx2VJWXT30etDXyQKQf01sAe9TJgYKGALXM03ko\r\nx-77-nzt-ray: fdb541230aecb222fd0ec9695e64460c\r\nx-77-cache: HIT\r\nx-77-age: 45\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c90dc4144123441dfd1880b64a38850","sha1":"3542d9742c4d15ebd275a7f4d00fdeaab0bf2811","sha256":"3f96750d0608315f91b97aa38ed18ba3172c6205e3bae64070fdd3b1ecd96055","sha512":"85219432d56f6d5daff42ab232594e813a0a26d63b22bd8b2de79a3f6cc650f5b4d00035a356cee95137c30b588d3882f294d3e42a7cd1dc90c2ac3ed5a1a010","ssdeep":"","tlshash":"b9411593c4f80d531b9c522bb8944a015d50c3c7e8893d0d36ad8a6f2f0ceba15e67ad","first_seen":"2026-03-26T09:27:08.856479Z","last_seen":"2026-04-23T05:43:00.886942Z","times_seen":1025,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":52,"dns":25,"connect":8,"send":0,"wait":13,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:34.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1820\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1820,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$4H85fxtRAAae9WspvvXey2gwh12cXMGnAEABEArZ1HUQzGJCTU_I_NMSUZwiRn_gJUrQ1fr4D1qSSkxSbrj1SRWaBNakGgczYderQvk8qgYwpceIW-T0Ub1hngAAARfOAAAAKPQBB-IAUvJw2_AviaeU_b-61nmH4yNKWK5d89YTLfWgAY-Qeyp9Be5eoRVHrwJI82IUSOVhRbxtnhhFGVoaUJBstC_QsCnhqDrJGkFsUtFOfF6Mp-D0RmYFBIH3eMAlTk3MOSBGaw6LGORvroG4iuYZgMb6E6fJraWy-Jerdu4Oxp7VAQVxRZb8pbsZ7dbqblDv4QWr4Ncp2XG20Op-saZJlFZwg-RPB5jfMX2jIfjaqfz6fX9Cvxwx3q2wzQZ57V0ERGhMYcux9kTnsVLexkAjmZ8qwYSAHG7GA20BgoNb0QWWx_sieCXrx6lB7OTTfyOyv7LM1cksckyd5DWK0agKUCKlQ6hanbWmpyTdo7xb9iMd2JaIGmSFforWslRgpLwVsUG1se4lfloACXGc3p0JBpBq694TPmcgF4KMPLlo8ycEPrnDjnQlBBpkpGWTPUUgGye9iGGYQd5i-1M-c0knWZb7yRLjwRQURTJ7CUMxt-ATmomqF2ngxIdkuPuTwE25_OllmnAcQssoBdN7A0qXQTGbYqqHaHE6YXrVQCFj11GN0HbFDZyVe15DvfOjS5UZH_LvAm8FGpF8l2ZVAaSfmZDVlaAqR-ke0KSENJ5IggjSA-eId62knlvR2CAYC3erIoRj103IytiNKkaw7IUzbfGEqo9Y6qU2k04QImwVrz0a5c9QouLVPF-3mdMsp2NfW3OkkiVqMCJvuEK15OOUmX0aq8xtgQX0yqRaDrUlLnGUpCOdrxPHk9cHTb1qB0YNE8gAgClRcLfh-hji4ycrCuT4r0_X57ELbi7CvT9djfYBVJ1kzT9rb2xvMai8V9mn0_X9FP5z9_6dUHrc51KcL3EDIHfLMpYW7hGLGHULnHyG1B8u3ZLvS0zsGR04XZhhfpUEp0GTFwPwKweNd4pQyDGa_NPxCfYNasjl6X7v9IR5OWvq2aHUAsd4agTNlzqQ76dduvD15v81wl57ujOfH2lgdgVlKFBNc5VqJ7p3plYx7TCi9ACSc4rgzU6ttiMOfq0cX-Bn2d8uXLX-0XzfhQD9zar3OxrUuby60pgJfE7Kqe6u0v9rUrb3UecCjk4qFcn0mQaqelHQKyUqtmDZSjfdJFTdvCPuvjxeK0Epi3hKcZMHKfjNPslTB_98wdp-v7ehTI54qOyCoweLhwwFPyTf2QtWNln-kRw_7C6Dm9ThRKQijoECiMuTMkprg_i3DSzNJVRUN5sJloI0MWX8XBR8uf4r3iPqy_yZyq6twQ966DhZmcX0dHqMvjhZvtP68PClRBdvPGUX3svLqVdXx7n7gC5il4YLphO2GJGcctZoiXcOK_CrHtQhe6UfF2Jr04xA5hXZ9aY1-ckyxRl56mSAOQji2Ycp77El9o_Ax3pVXxv3cURvZ28V4DgNezbUuctYzf_eDH9c3zMGH8L0XH2Q7HFiCa7VqJOYZAeit9DFNG5to1qem4e9IFsajxw5j91WipbpWODPlhHjZXlnL6mBO0MOtna6rZrgAFUYbURSHAE4LWQXaNeqrVy2faSg7XOQ4dMyB4BQaLvLW047kSopVF9kf4xVmhlOuF_q5Y4bpbRPc_jYSX6btZPhTuJsOsqS3r1t9rse7ZA5PhnjxlRwslPrz5Sl1eM0st_FXQAMsXIrTpVlcNPy\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sun, 29 Mar 2026 11:37:34 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube-nocookie.com\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"8acfc0c0b14e00997bc2dc9a66ee4518","sha1":"5ea07fc1bd46592f23f09faf1e3d86a3bc68f6fb","sha256":"7c1b930b92482c2e5badab3f26a7ce36dbde3c5b29c3b1116d331f52989d0e75","sha512":"0b2292aef9671f9e0003b08ee7496bf0f3e984a1305f2c3b7dd0a51f8d515fb2256095a0a92e2859d772e6633a78948d2a62b62f204024718154b6abd14afa58","ssdeep":"","tlshash":"f3b0123929c504913b166ed42abd99b879194588072c03114cb33bee244b7b7b035175","first_seen":"2026-03-29T11:38:02.413627Z","last_seen":"2026-03-29T11:38:02.413627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-includes/css/classic-themes.min.css","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-includes/css/classic-themes.min.css HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 180\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f0e4c2b663e303c18fbf043c6dc00a63","sha1":"ef789c701887c5b113c161979777c9965fdacb15","sha256":"ffb31c70dabe3f5d5fea70335e465705b14f52839bceacf5deeacb2a5ff0124d","sha512":"3b8fc0db3e224c8abe4d00d8e97a9a05afad474d9f41f358ca84af8025b07fe8ab0d0691e7dca2c339b749842619d60e7b87dbe742bc0827ce26f207c4a1951e","ssdeep":"","tlshash":"3de0d8c1f7a74ec1300a8a9c4a1b878412741543c8a3dae5b755a1999fa81b419f8a8a","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.468788Z","times_seen":22,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2021/11/logo-crypto-s1bce.png?v=6","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/logo-crypto-s1bce.png?v=6 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 568\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":568,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"7323e3aecf408bb7e2292af110673995","sha1":"70b7a3cdfd2c6728ec9f075c0af6267f51413f96","sha256":"e1b5fc7020fd6871c8317bcd6bf58d9b5243f2a8dcee83325a931e84a13a9290","sha512":"1fbca261720ff5c44815023f24c1a45a34bdda9906e5c842b2f335801be1c175143845e194b7b4e9a655a2099f5eec3ab1c53b0ee2aac06c070a8c721c7af083","ssdeep":"","tlshash":"d3f09636a67a44565951bc44ef3cf63c09a404374f1ceb00926e3c090eff402000074b","first_seen":"2023-05-28T00:04:53Z","last_seen":"2026-06-09T05:29:48.443473Z","times_seen":86,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:32.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:16:49 GMT\r\nexpires: Fri, 26 Mar 2027 02:16:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 292843\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-25T03:51:54.168061Z","times_seen":944770,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/ll-features-4-swap-mobile.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/ll-features-4-swap-mobile.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9142\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9142,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"d84cca6cc94e3f43880f34531180078a","sha1":"1b2c651179f2110236b918306e0ac7eb64a3ea09","sha256":"3271dbb5e6ad3c58bccdf703c9e6ef30a86bf46a98769294095a8c62a295a59d","sha512":"d8cebae7f705abf4c1518a7ffb8f55d15a6a374ef36dfd622322001c394f380da6ec47e0383d11ffd06264debdfc39e4d5617f41140d5cc46c08d8908e754615","ssdeep":"192:BXBWsXELsvth4nXG2ao4RlD0J4/RXotPl0jVF39W5Xiz9Mzq:50sXEkkXGk4DAQXo4H9cpO","tlshash":"0a129e5c6a956afe8cb95c0549bfec0e2473bf3b0260e151b954ccca3f166de92b004d","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.487979Z","times_seen":41,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/cdnjs.cloudflare.com/ajax/libs/Swiper/9.2.0/swiper-bundle.min.js","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/Swiper/9.2.0/swiper-bundle.min.js HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/try.abtasty.com/2f64c37290a95967d11de606157a17ac.js","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /try.abtasty.com/2f64c37290a95967d11de606157a17ac.js HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/fonts/HMAlphaMono-Medium.otf","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/fonts/HMAlphaMono-Medium.otf HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/wp-content/themes/ledger-v2/public/css/main81e4.css?id=c82d46bde76f30a48ac4\u0026ver=6.2.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/otf\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 98\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98,"size_decoded":0,"mime_type":"font/otf","magic":"ASCII text, with no line terminators","md5":"b0866bb88fdd972a95ae7108e2a30df8","sha1":"8980761189184c6b068eb6dde7dd0c939e3f57eb","sha256":"1490fd96e5830b3d939896d825693896e0f0345bcb9fc0ab7cc7b7a2b738b6fa","sha512":"eac3b145133c8cd6bcefc67c510f3c2affa14fed98828efde51fa56b0b3115a75dd52343d9ff99b7716fc1b3b0cda8a49a5fd2ff95c3501507e956de7d689aed","ssdeep":"","tlshash":"a0b012f3261641000b0c96522024ba40c2231414fc89c1dd9242115d85f866023647e9","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.410297Z","times_seen":20,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/youtubei/v1/next?prettyPrint=false","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:33.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"POST /youtubei/v1/next?prettyPrint=false HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtiR21lc2xMYzc4byj8naTOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgHA%3D%3D\r\nX-Youtube-Bootstrap-Logged-In: false\r\nX-Youtube-Client-Name: 56\r\nX-Youtube-Client-Version: 2.20260326.04.00\r\nContent-Length: 3451\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3451,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"remoteHost\":\"91.90.42.154\",\"deviceMake\":\"\",\"deviceModel\":\"\",\"visitorData\":\"CgtiR21lc2xMYzc4byj8naTOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgHA%3D%3D\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0,gzip(gfe)\",\"clientName\":\"WEB_EMBEDDED_PLAYER\",\"clientVersion\":\"2.20260326.04.00\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"originalUrl\":\"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\",\"platform\":\"DESKTOP\",\"clientFormFactor\":\"UNKNOWN_FORM_FACTOR\",\"configInfo\":{\"appInstallData\":\"CPydpM4GEMuD0RwQyPfPHBCe0LAFEN68zhwQ8ZywBRD79tAcEM750BwQoI_RHBDc1NAcEJfVgBMQ9quwBRCKhNEcELvZzhwQvZmwBRDGxs8cEP7_0BwQ8bTQHBCUttAcEL22rgUQ2YnRHBDa984cEMGP0BwQrtbPHBDM-dAcEJr50BwQ4IKAExCU_rAFEIzpzxwQgc3OHBCJsM4cEKiB0RwQtJHRHBCZjbEFELyk0BwQtrWAExDK_tAcEIeszhwQlIPQHBDM364FEJ_PgBMQvYqwBRDQwoATEKz10BwQuOTOHBCL988cEJjd0BwQ_LLOHBCmttAcELva0BwQ3N7QHBCDiNEcEJiQ0RwqTENBTVNNeFVvLVpxLURNZVVFcFVDbkE3NUZiMEdXT1N5OEFzeW9Ld0VBODNfQmN1M0J2c210dVFHeVpVRXp2d0JoV1h1bXdZZEJ3PT0wAA%3D%3D\"},\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"acceptHeader\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"deviceExperimentId\":\"ChxOell5TWpZME1ETXlNRGM1T1RJeE5EVTROQT09EPydpM4GGPydpM4G\",\"rolloutToken\":\"CNCl4uGg8Y2M2AEQl4eox4LFkwMYl4eox4LFkwM%3D\",\"screenWidthPoints\":704,\"screenHeightPoints\":554,\"screenPixelDensity\":1,\"screenDensityFloat\":1,\"utcOffsetMinutes\":0,\"userInterfaceTheme\":\"USER_INTERFACE_THEME_LIGHT\",\"timeZone\":\"UTC\",\"playerType\":\"UNIPLAYER\",\"tvAppInfo\":{\"livingRoomAppMode\":\"LIVING_ROOM_APP_MODE_UNSPECIFIED\"},\"clientScreen\":\"EMBED\"},\"user\":{\"lockedSafetyMode\":false},\"request\":{\"useSsl\":true,\"internalExperimentFlags\":[],\"consistencyTokenJars\":[]},\"thirdParty\":{\"embeddedPlayerContext\":{\"embeddedPlayerEncryptedContext\":\"AD5ZzFRSWl7iRPV_H9gPV7PZBsSZnXy4-2FMQhi4gbrXqjK_V0cvMQoal177tyCh2LeceiWZhdxj16ltb8tHZEDAf2hf9Cy8mogarcHfR-xTbjgtgUs0S2yWAQCcaniUkPwF8feV\",\"ancestorOriginsSupported\":false,\"ancestorOrigins\":[],\"visibilityFraction\":1,\"visibilityFractionSource\":\"EMBEDDED_PLAYER_VISIBILITY_FRACTION_SOURCE_INTERSECTION_OBSERVER\",\"autoplayBrowserPolicy\":\"AUTOPLAY_BROWSER_POLICY_ALLOWED_MUTED\",\"autoplayIntended\":true,\"autoplayStatus\":\"AUTOPLAY_STATUS_UNAVAILABLE\"},\"embedUrl\":\"https://qfsvaultsystems.com/\"},\"clientScreenNonce\":\"6ZryPBIy1UhLG6TH\",\"adSignalsInfo\":{\"params\":[{\"key\":\"dt\",\"value\":\"1774784253069\"},{\"key\":\"flash\",\"value\":\"0\"},{\"key\":\"frm\",\"value\":\"2\"},{\"key\":\"u_tz\",\"value\":\"0\"},{\"key\":\"u_his\",\"value\":\"2\"},{\"key\":\"u_h\",\"value\":\"1024\"},{\"key\":\"u_w\",\"value\":\"1280\"},{\"key\":\"u_ah\",\"value\":\"1024\"},{\"key\":\"u_aw\",\"value\":\"1280\"},{\"key\":\"u_cd\",\"value\":\"24\"},{\"key\":\"bc\",\"value\":\"31\"},{\"key\":\"bih\",\"value\":\"-12245933\"},{\"key\":\"biw\",\"value\":\"-12245933\"},{\"key\":\"brdim\",\"value\":\"0,0,0,0,1280,0,1280,1024,704,554\"},{\"key\":\"vis\",\"value\":\"1\"},{\"key\":\"wgl\",\"value\":\"true\"},{\"key\":\"ca_type\",\"value\":\"image\"}]},\"clickTracking\":{\"clickTrackingParams\":\"CAAQu2kiEwjLuuLHgsWTAxW3ivQHHde4Gn8=\"},\"activePlayers\":[{\"playerContextParams\":\"Q0FJU0FnZ0M=\"}]},\"videoId\":\"2Sd1lGBTLrg\",\"racyCheckOk\":false,\"contentCheckOk\":false,\"autonavState\":\"STATE_NONE\",\"serializedThirdPartyEmbedConfig\":\"{\\\"disableRelatedVideos\\\":true}\",\"showContentOwnerOnly\":true,\"playbackContext\":{\"encryptedHostFlags\":\"AD5ZzFS34jukg0EIYMwmenRbDgXhrabwn_XgmugbiL3bX4qMHn9-YmPgzC80wJXC5em9Bf8FpJbbxJ-g24OtfTqVkXqAoVpJsHZmtNRgF--DJugPusFJ-AYQzQllPqdQQrI\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Sun, 29 Mar 2026 11:37:33 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 1688\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7219,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0a6bc8d8f3190c17553ab07affebb55c","sha1":"778594d93f3fc77c293ea73a98bfd8bb071fc555","sha256":"c1d4127c7b425e74c1fec899387fb6c9b31f88a0d5fafeec9278fcc7a9ba12aa","sha512":"828618c879dbacecb3e998a35c7fcccade166c6686babdc66b21aa0dbc565fcee30ccbc871c1640bf7c098cd5131c66ee5670968f0f5cdf02e5e1f1f7562e21a","ssdeep":"192:zUkdzdrQz0UvgV/d3MdjTyX7JR6zeNuCgld3Mdjdxvx7Bd3Mdjrvx7H:zrMgUvgMSJQKNuCggdxvxArvxD","tlshash":"bae131693606f9ef0780d142d24eec7f366eb11dd2c83d6aa5997a5c0faee5c240c582","first_seen":"2026-03-29T11:38:02.418483Z","last_seen":"2026-03-29T11:38:02.418483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2021/11/layer15e1f.png?v=2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/layer15e1f.png?v=2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 128\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":128,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e998e2600fa77ac935404a353a79f54d","sha1":"24cedb33fdaeb973cf1e49304b1e09869a8b06b4","sha256":"754c05d78b3e25b5a87f5fb5e7eac4ef07c85aeccc0e0d37d64bb6abfc1dfd97","sha512":"e04eb854333d1c0132ad29018c7305afc9b6b684f4bb76daf964e33543c12601b81509b62267c014216968219540f42d1574ecb324bc2d7a17c236e47f9dbb2b","ssdeep":"","tlshash":"43b02b60bb0380c410901408543307331811609503808ac1416912320339030f2eaf21","first_seen":"2023-05-28T00:04:53Z","last_seen":"2026-06-09T05:29:48.518334Z","times_seen":86,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/s/player/8e54e4ea/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:32.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /s/player/8e54e4ea/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 440090\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 09:17:33 GMT\r\nexpires: Thu, 25 Mar 2027 09:17:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 25 Mar 2026 04:34:34 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 353999\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1469932,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (925)","md5":"7f924a9b08de70bd86d137a886610f6a","sha1":"a7da035fd981b6c8288e2c4dde1e0aecdba27f34","sha256":"20e03b1e6d3fffdc07ab6db675f666207a5448791937bda662afe566044d5ce9","sha512":"27b6e894220be0c949820f694c13e853320bbca6cfc642c70adff9b6b7a293491fb2a999c59e139b4bff48a71132711d70c3a28ad5d8acf3bc405a084a553afa","ssdeep":"12288:kezSAsvHs6VlGg6yJR6dopMCPQX3X9glVLcNAsOu4biq4A:kYsvHs6ag6qR6dCIX3X9OVLcNAsOzbnX","tlshash":"072539c872837a6683f3e4a4146f2205b43e4815744cd9dcb7e9caea7d6180a617bf7c","first_seen":"2026-03-25T12:13:47.017347Z","last_seen":"2026-03-30T15:48:36.523971Z","times_seen":3033,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-29","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube-nocookie.com/s/player/8e54e4ea/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:33.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:30:49 GMT","end":"Tue, 23 Jun 2026 10:30:48 GMT"},"fingerprint":{"sha1":"FE:60:F0:6C:13:88:B2:39:2E:11:67:71:2A:8F:58:11:3A:45:30:5D","sha256":"BB:F8:AA:87:AE:AA:9D:E7:CC:47:F2:E8:98:89:5B:12:D2:33:6C:16:8E:C6:CA:61:CB:25:84:42:51:47:56:17"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsvaultsystems.com/\r\nOrigin: https://qfsvaultsystems.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 11:37:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 8c24f22b7a25c47a9569bda5231e082542b28321\r\nx-77-nzt: k5Xztn8adTXAk1IRukaT10cjq3HR3unycqeyhoB9SPGGmodY8Qeyg0ccQhX5kB0LZ/5uKi4\r\nx-77-nzt-ray: e2f7542075439359fd0ec969f42b5419\r\nx-77-cache: HIT\r\nx-77-age: 147\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e15688e9d2d002a9ed39b75b69eaf60","sha1":"8334c28b880997b2a4391aafde10a4b7463dfabc","sha256":"b094c3b5945028f864269d3d5af31e88f984e7ee5119a61ac716801e948caab7","sha512":"87c5e8e52504edf16fd6f7669e17287c6d8eace783fcbd020158b273c01dd38e75088c20f4b204c12906d7944507b6a120403cf63ab2307361cf844b821f8c92","ssdeep":"192:Ccdft/hc4l6WKHSY8pZcqq+jT0UHAfoW/YmzW:CgF/hcbWbYKZcF+jhqoWQmK","tlshash":"fce1b64f9a144ea987c6438276cfb84675bc807352509d7afd8cc8b842697cda3e3b94","first_seen":"2026-03-04T14:01:17.972897Z","last_seen":"2026-04-01T05:39:45.260246Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":45,"dns":21,"connect":7,"send":0,"wait":9,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/plugins/contact-form-7/includes/css/stylesf2b4.css?ver=5.7.7","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/stylesf2b4.css?ver=5.7.7 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 887\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3162,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"48cafaddb37929154ca800dbacb14e40","sha1":"032d578608bf6a3f3fab297a160933e6dfd9cee8","sha256":"bb3e74e34e968f361b5d8030f1320adfb3586b2ed5a26c3e0e866b61b71c316e","sha512":"d8542bce8a6f5a6243e9490888413c75549ed87b6dcdea3cc9d8ba545b34d1b20ed8a68ad88034bba31c15146ebf5c755fe93807c954043fcacdb92160fca7f7","ssdeep":"","tlshash":"c251e1a06aa318415efb83d62bbe970433656483c11befa97ac9176c4f383456123f5e","first_seen":"2023-08-12T17:19:57Z","last_seen":"2026-06-25T15:48:07.634314Z","times_seen":22,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/www.googleoptimize.com/optimize8179.js?id=GTM-TB9Q5T5","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /www.googleoptimize.com/optimize8179.js?id=GTM-TB9Q5T5 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2021/11/logo-bitpay-s1bce.png?v=6","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/logo-bitpay-s1bce.png?v=6 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 374\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"fdde823411765785d76a01fd7b31d6c3","sha1":"332a301e5f9b3fea0b2385b746a1d77044d50a9b","sha256":"16f5dc03b0de5c5299e7ae200a8e6d583a09f639f1f322271574d4beeefcb4ab","sha512":"4f5a7a84e72d29a0f78f89462025b116ee86ec1213cd7ded3835b23ea20ec03bccbd08f348d57ca3dc2d41b6715235ea8243aad990cacff61182962525c96196","ssdeep":"","tlshash":"5ae0ca71c29b4b5735c03515734466b3c67c691f5dbf1b130e2f47197be11c96115c91","first_seen":"2023-05-28T00:04:53Z","last_seen":"2026-06-09T05:29:48.4441Z","times_seen":86,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/plugins/contact-form-7/includes/swv/js/indexf2b4.js?ver=5.7.7","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/indexf2b4.js?ver=5.7.7 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3224\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14399,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4377)","md5":"529aa0192347aaac5920d86dd012d128","sha1":"f8dfdeb22fcf6a0e087890817ab092fb6f7db796","sha256":"366a54a5cb0ac8099fada9209b5f7bd3196f57d8cda4ab1433b1ac4d727e4436","sha512":"f48a31a9efd3f2978f3e9f301b871a8bedb8c062c28a13f027351e45332083ee5bbd96ae983bd7e39abfb70a52715c999a7b1a5924608a321f22184a647f23b7","ssdeep":"384:qsF3CkC/VxeIfmbYMQfT/YxgwZQkHSefWi0:qhVveLQr/YxgwZQkyu0","tlshash":"fa52e1e6a1f3ac72474334b84a47c015773e826ead89dd147b0c89589f8d53b43ba7a8","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.477959Z","times_seen":15,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/js/mained21.js?id=adf58ed476de4b398647\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/js/mained21.js?id=adf58ed476de4b398647\u0026ver=6.2.2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2410\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9385,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (387)","md5":"d4c860aa7163271b04e73a4425710eae","sha1":"cccceb009bf1d7cc37e82d978eafc8ac78d7079f","sha256":"f531c5f5f56975c76753ce66b7f0d824098e6275b2261ab40ef6d8286fbad070","sha512":"29885a931e50bbc66ed1380986d1992ff3bce89395d46c32c44741c1a0539e4628cb5573cebc7a6ec45489eadf8953d097ff3c1dc8036aaf6405b611c718d08b","ssdeep":"192:QaG55R2lhCqTiYvJG58HOb0SYgilajEzBilIaUJRwakMaCQ6L3zSSRcwm4WBfMr:QaG5qfhJENoawYIaUJCajaCQm3zSXwmG","tlshash":"3c12532a56a414fd91bb782afa3f633432331513b604e9403d0e91a51f4aa7512faff9","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.50543Z","times_seen":21,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles4698.css?ver=4.6.3","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles4698.css?ver=4.6.3 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6815\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68211,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7533b5007d358c19d43cf2236e3b96b4","sha1":"d0acceb663bb74aacbda7a9572a7245fac4abcf3","sha256":"ac4f4e75af31adf3fc915c68d0525c6d443ec4fab336a776bc23d0791332f641","sha512":"f25f07aa3cf35a35cfb6a8c1f48b6cb7ff3fe8de2ebcac383aa19b9c3df16d8f212976116fe376f6014bf6ae2c70db7eb6017239bcfde790c0da2982d280e1aa","ssdeep":"768:u5j2lVu7pt/3Ss9VY9mVOmYPpfs//uQtsgvrf1cUv5j2lVu7pt/3Ss9VY95:uP9YPpfs//uQtsgvrf1cUvPk","tlshash":"4463321097b24de8d42e83371fea7930a162d493c50fea99b9d2f7446f8f14441a3f9a","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.495047Z","times_seen":12,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:31.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 29 Mar 2026 11:37:31 GMT\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21357,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"787a45188d51c7f3cdb55e9c60662eae","sha1":"38b7694ca27373bddda317155327ac89c4422f6b","sha256":"8d333d46730f094bf6a18804144c2c2cc72578202ec607775e99f31c95714c91","sha512":"a933834658c26193f0910a4a50ef0875758d2f68082e334eef2cab48b746a4a15160d222e03dd54b605f56618f48ab05d7246aef02501154b1a0e0e2090cc41f","ssdeep":"192:W7Nm797K7O3t737xY7rNl8RO3MixzANineO33lxopNP6TO3Kkxx2NkdIO3tPx+PR:Whm5W4tDyN/mkYVOKczmIIpO+k","tlshash":"92a26b92002be40067931dc363cf7e39aece5088a086d5796bfd1dc99cead66537436e","first_seen":"2025-09-10T23:38:39.81453Z","last_seen":"2026-07-25T03:05:39.68086Z","times_seen":3154,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":164,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/fonts/icomoon7b85-2.html?ovw2pd","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/fonts/icomoon7b85-2.html?ovw2pd HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/wp-content/themes/ledger-v2/public/css/main81e4.css?id=c82d46bde76f30a48ac4\u0026ver=6.2.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 708\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-24T03:47:49.536748Z","times_seen":7572,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/css/main81e4.css?id=c82d46bde76f30a48ac4\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/css/main81e4.css?id=c82d46bde76f30a48ac4\u0026ver=6.2.2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28412\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":189400,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"47f5366dbaff59af3384d1f157fb160f","sha1":"cb75566c1342aa578e8d85766f55045dd7365552","sha256":"54d10fe7b0e822c799b8ec8e19db7661510f2bec17a7a6793ade22376f07b8c9","sha512":"b6d21f37c6288caaf79b8e859f1e6cc09aba52f9aa2c71945d595f247fb1145e3d5bd06791d3666354078485fc224c88e407c324ca0ce0ca93a1857def1e61f9","ssdeep":"3072:o7eVKebF9OoO1RuGQ5uQSHvXS7lhsZttU:o7eVKeGoRGQ5uy","tlshash":"1904a4565ef31808551fa069abae225477648043d64fdeeabe8cb208efc93744572fcc","first_seen":"2025-08-11T22:26:50.484684Z","last_seen":"2026-05-02T17:41:46.859187Z","times_seen":11,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/widget.coinlore.com/widgets/new-widget.js","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /widget.coinlore.com/widgets/new-widget.js HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/kit.fontawesome.com/f8a71d88c0.js","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /kit.fontawesome.com/f8a71d88c0.js HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:31.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qfsvaultsystems.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 01:37:59 GMT\r\nexpires: Fri, 26 Mar 2027 01:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 295173\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-25T03:49:32.374141Z","times_seen":245893,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":67,"dns":1,"connect":14,"send":0,"wait":15,"receive":21,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DKnwhA04.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:33.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:33:12 GMT","end":"Wed, 24 Jun 2026 10:33:11 GMT"},"fingerprint":{"sha1":"D0:0A:A6:39:E7:85:DF:64:B0:13:66:E3:06:E8:BF:2D:3C:AE:EA:7A","sha256":"70:D5:91:24:1D:F0:F9:7F:57:55:99:71:1F:A5:15:C2:B9:C7:21:65:6B:42:A2:34:4A:6D:A7:53:70:BE:C0:7B"}}},"request":{"raw":"GET /assets/main-DKnwhA04.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://qfsvaultsystems.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 11:37:33 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69c4f8c4-453c8\"\r\nexpires: Fri, 26 Mar 2027 09:19:15 GMT\r\nlast-modified: Thu, 26 Mar 2026 09:13:40 GMT\r\nx-77-nzt: k/9ENWm7a03joZIP6zymIfpXN3iGOhQJ6C9GqPp7k5eGywK9m9pS2GoaumhVv+aSish7SK0\r\nx-77-nzt-ray: fdb541230aecb222fd0ec9694bb43410\r\nx-77-cache: HIT\r\nx-77-age: 267484\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283592,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"04d0691ef560adb488e4b6f4644c5265","sha1":"703691dce49d4244b1c58dc10ab8a285e19b2942","sha256":"b1f432b4a9c8585760646aeb5a5e9686154ca139027818dd7ad9744e290ac647","sha512":"af80daf0b9be2e06be01828c6be6eda731cd8f1ab5f767eec9359f247367758117387dd844c0e725415cde1ef33f7e62cd579a1d9cb6d0fdd569bebf417073cc","ssdeep":"6144:QsJU8SN+jtxVR/ZgQu2W/rLEPhCWVcq9kNE:QwU8SNr2W/rLgjV3uE","tlshash":"b0544ad47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-03-26T09:27:08.846862Z","last_seen":"2026-04-23T05:43:00.852938Z","times_seen":1023,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/fonts/icomoon7b85.ttf?ovw2pd","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/fonts/icomoon7b85.ttf?ovw2pd HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/wp-content/themes/ledger-v2/public/css/main81e4.css?id=c82d46bde76f30a48ac4\u0026ver=6.2.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:32 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94,"size_decoded":0,"mime_type":"font/ttf","magic":"ASCII text, with no line terminators","md5":"5bb949d08adf51c66efe8e97d1864ffb","sha1":"fb5c54994868975c3b614aa3d84f49d72dc4582f","sha256":"81602f30b8981195748c6d0fab8ce73e00c0d55d1282a6b364bffee362fcfad0","sha512":"64bffd151877db48279078cb38a5dbfdb64f533496a6f3401ac8fe85e08725b95d4bbe94c6c39005614b0802fa331b49ff844f37a27e4889a9fbab989f00a5c5","ssdeep":"","tlshash":"44b01263570e40210b48d3453021b144c1130014ec99d18c8183054d42f051062946a5","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.481508Z","times_seen":51,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/11/Academy_1Inch-1-13.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/Academy_1Inch-1-13.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79630\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79630,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"b122437ea7dc0f1f1f9b81972b6cb27b","sha1":"f0d3958bb96e198e2ed8c1d53c93aba620f7324e","sha256":"927e587669a449c13702a32db7dcc708fbb37c392b6892b2884098290835df2a","sha512":"5dac514974dbd9360d67f7e9b2d8ab42809567590d46145a85920335d9b0fe6113ad9af05a47576444598463721a7a5f352a500b9f96598aeaef4d39d08b3b38","ssdeep":"1536:eNh9HlUNooNLtLA4Yts2aO5cPdwZRZxT8VrSGgUBEgjITZodEkZFCotep+XoS/tR:eNnFg1rYSPtVwZRZtObXBEpfqM+XoyHx","tlshash":"6c730214c7209d896ec4a63f0c9b15d8c1ec24c6d569a7af5368bf7fb512bcb425d304","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.476317Z","times_seen":42,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-KNmfGZZQ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:33.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:33:12 GMT","end":"Wed, 24 Jun 2026 10:33:11 GMT"},"fingerprint":{"sha1":"D0:0A:A6:39:E7:85:DF:64:B0:13:66:E3:06:E8:BF:2D:3C:AE:EA:7A","sha256":"70:D5:91:24:1D:F0:F9:7F:57:55:99:71:1F:A5:15:C2:B9:C7:21:65:6B:42:A2:34:4A:6D:A7:53:70:BE:C0:7B"}}},"request":{"raw":"GET /assets/style-KNmfGZZQ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://qfsvaultsystems.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 11:37:33 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69afcbd9-9217\"\r\nexpires: Wed, 10 Mar 2027 07:48:53 GMT\r\nlast-modified: Tue, 10 Mar 2026 07:44:25 GMT\r\nx-77-nzt: kzewDYVRcMoVWq2zfEFzwAsqEY9Ya5p7tAd7hjoKKRdCauHNS85+6GT4M+pbUrbLV6aGUnw\r\nx-77-nzt-ray: fdb541230aecb222fd0ec9694bbb3810\r\nx-77-cache: HIT\r\nx-77-age: 1655301\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37399,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37398)","md5":"e0e19bc0ef5c8a7be30d687ff72b1d44","sha1":"103123375bbaaca149d026b729eaf3ef58d2d602","sha256":"f471612283039dacc9bbab82dafd8e35ed37c4fd9d099a7af946c41231daac21","sha512":"1be4a4bce5fd32ddc8843fb781a28a642c4815fbbb891ec33e5d5ee29d1555c7338eb07e4965a7dbb4ddbc26d45381178b973a26a8f8de0ce7ea10029ab11a6d","ssdeep":"768:E8CQgTcCWYtomXFbxrnSJPHs245q+ggFgZ:E8dgTcCWYtdX3uPF4X2Z","tlshash":"35f2a75daad5093cec33c166e3f8e58c9229f591df321adaf6433a048ac27bf1987514","first_seen":"2026-03-10T08:00:57.31215Z","last_seen":"2026-06-02T08:09:59.912194Z","times_seen":3597,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/www.googleoptimize.com/optimize8179.js?id=GTM-TB9Q5T5","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:31.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /www.googleoptimize.com/optimize8179.js?id=GTM-TB9Q5T5 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2021/11/logo-maestro-s5e1f.png?v=2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/logo-maestro-s5e1f.png?v=2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 264\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":264,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"bf2f9a0a02e5f4640b12b43139b75916","sha1":"27b527c5333f24894e31590998d66d846f813e70","sha256":"4bfe9ee414b6f7715c32d642b535f11d88ae2f9fac79f18f46caac4f18868c84","sha512":"33e4571f3e417e95c0109b91f68bc6282db376b7f1e29c9c773ddeafba0f2c46ad0f9e9a160511f2079827da22e206f28971d1f88daf3e62247c5c7fca3da4b5","ssdeep":"","tlshash":"32d02bace8ccfe74ca5129028ba18968591cbf186595ea61c3a486605527b252a4de01","first_seen":"2023-05-28T00:04:53Z","last_seen":"2026-06-09T05:29:48.507119Z","times_seen":86,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2023/06/dapps.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/dapps.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 50812\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50812,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"b12668d289c710b3cafc4c389632d977","sha1":"802d37ee8832456a0ee328ad10ae5ffcdeb5daf7","sha256":"ed18d495533962cb844758c10f83d814693de1c3db87f0fde949504831585125","sha512":"9b540fa2c99e29849449e5ec1e7b644b3591a35baeee02e8729398c38f218d54a94629f94179a7a026ccef9931a458f7001b7df6fd24260517a3a7189400c49d","ssdeep":"1536:15pCuvckWwbfFaWL927ip9BvyIdDnZDMwNHztx8:158ktzJ2qbDMwNTz8","tlshash":"4d33f272fdd9130b2767ecc67204ce6944739257970ee7252e482282259cae749c379d","first_seen":"2023-08-24T17:25:43Z","last_seen":"2026-06-09T05:29:48.438697Z","times_seen":42,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/youtubei/v1/player?prettyPrint=false","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:33.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"POST /youtubei/v1/player?prettyPrint=false HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtiR21lc2xMYzc4byj8naTOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgHA%3D%3D\r\nX-Youtube-Bootstrap-Logged-In: false\r\nX-Youtube-Client-Name: 56\r\nX-Youtube-Client-Version: 2.20260326.04.00\r\nContent-Length: 3693\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3693,"data":"{\"videoId\":\"2Sd1lGBTLrg\",\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"remoteHost\":\"91.90.42.154\",\"deviceMake\":\"\",\"deviceModel\":\"\",\"visitorData\":\"CgtiR21lc2xMYzc4byj8naTOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgHA%3D%3D\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0,gzip(gfe)\",\"clientName\":\"WEB_EMBEDDED_PLAYER\",\"clientVersion\":\"2.20260326.04.00\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"originalUrl\":\"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\",\"platform\":\"DESKTOP\",\"clientFormFactor\":\"UNKNOWN_FORM_FACTOR\",\"configInfo\":{\"appInstallData\":\"CPydpM4GEMuD0RwQyPfPHBCe0LAFEN68zhwQ8ZywBRD79tAcEM750BwQoI_RHBDc1NAcEJfVgBMQ9quwBRCKhNEcELvZzhwQvZmwBRDGxs8cEP7_0BwQ8bTQHBCUttAcEL22rgUQ2YnRHBDa984cEMGP0BwQrtbPHBDM-dAcEJr50BwQ4IKAExCU_rAFEIzpzxwQgc3OHBCJsM4cEKiB0RwQtJHRHBCZjbEFELyk0BwQtrWAExDK_tAcEIeszhwQlIPQHBDM364FEJ_PgBMQvYqwBRDQwoATEKz10BwQuOTOHBCL988cEJjd0BwQ_LLOHBCmttAcELva0BwQ3N7QHBCDiNEcEJiQ0RwqTENBTVNNeFVvLVpxLURNZVVFcFVDbkE3NUZiMEdXT1N5OEFzeW9Ld0VBODNfQmN1M0J2c210dVFHeVpVRXp2d0JoV1h1bXdZZEJ3PT0wAA%3D%3D\"},\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"acceptHeader\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\"deviceExperimentId\":\"ChxOell5TWpZME1ETXlNRGM1T1RJeE5EVTROQT09EPydpM4GGPydpM4G\",\"rolloutToken\":\"CNCl4uGg8Y2M2AEQl4eox4LFkwMYl4eox4LFkwM%3D\",\"screenWidthPoints\":704,\"screenHeightPoints\":554,\"screenPixelDensity\":1,\"screenDensityFloat\":1,\"utcOffsetMinutes\":0,\"userInterfaceTheme\":\"USER_INTERFACE_THEME_LIGHT\",\"timeZone\":\"UTC\",\"playerType\":\"UNIPLAYER\",\"tvAppInfo\":{\"livingRoomAppMode\":\"LIVING_ROOM_APP_MODE_UNSPECIFIED\"},\"clientScreen\":\"EMBED\"},\"user\":{\"lockedSafetyMode\":false},\"request\":{\"useSsl\":true,\"internalExperimentFlags\":[],\"consistencyTokenJars\":[]},\"thirdParty\":{\"embeddedPlayerContext\":{\"embeddedPlayerEncryptedContext\":\"AD5ZzFRSWl7iRPV_H9gPV7PZBsSZnXy4-2FMQhi4gbrXqjK_V0cvMQoal177tyCh2LeceiWZhdxj16ltb8tHZEDAf2hf9Cy8mogarcHfR-xTbjgtgUs0S2yWAQCcaniUkPwF8feV\",\"ancestorOriginsSupported\":false,\"ancestorOrigins\":[],\"autoplayBrowserPolicy\":\"AUTOPLAY_BROWSER_POLICY_ALLOWED_MUTED\",\"autoplayIntended\":true,\"autoplayStatus\":\"AUTOPLAY_STATUS_UNAVAILABLE\"},\"embedUrl\":\"https://qfsvaultsystems.com/\"},\"clientScreenNonce\":\"6ZryPBIy1UhLG6TH\",\"adSignalsInfo\":{\"params\":[{\"key\":\"dt\",\"value\":\"1774784253069\"},{\"key\":\"flash\",\"value\":\"0\"},{\"key\":\"frm\",\"value\":\"2\"},{\"key\":\"u_tz\",\"value\":\"0\"},{\"key\":\"u_his\",\"value\":\"2\"},{\"key\":\"u_h\",\"value\":\"1024\"},{\"key\":\"u_w\",\"value\":\"1280\"},{\"key\":\"u_ah\",\"value\":\"1024\"},{\"key\":\"u_aw\",\"value\":\"1280\"},{\"key\":\"u_cd\",\"value\":\"24\"},{\"key\":\"bc\",\"value\":\"31\"},{\"key\":\"bih\",\"value\":\"-12245933\"},{\"key\":\"biw\",\"value\":\"-12245933\"},{\"key\":\"brdim\",\"value\":\"0,0,0,0,1280,0,1280,1024,704,554\"},{\"key\":\"vis\",\"value\":\"1\"},{\"key\":\"wgl\",\"value\":\"true\"},{\"key\":\"ca_type\",\"value\":\"image\"}]},\"clickTracking\":{\"clickTrackingParams\":\"CAAQru4BIhMIiP6ox4LFkwMVJc17AB1RqTx0\"}},\"playbackContext\":{\"contentPlaybackContext\":{\"html5Preference\":\"HTML5_PREF_WANTS\",\"lactMilliseconds\":\"100\",\"referer\":\"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\",\"signatureTimestamp\":20536,\"autoCaptionsDefaultOn\":false,\"autoplay\":true,\"mdxContext\":{},\"playerWidthPixels\":704,\"playerHeightPixels\":554,\"ancestorOrigins\":[],\"encryptedHostFlags\":\"AD5ZzFS34jukg0EIYMwmenRbDgXhrabwn_XgmugbiL3bX4qMHn9-YmPgzC80wJXC5em9Bf8FpJbbxJ-g24OtfTqVkXqAoVpJsHZmtNRgF--DJugPusFJ-AYQzQllPqdQQrI\"},\"devicePlaybackCapabilities\":{\"supportsVp9Encoding\":true,\"supportXhr\":true}},\"cpn\":\"SPH6Da_lyzxnD7yq\",\"serializedThirdPartyEmbedConfig\":\"{\\\"disableRelatedVideos\\\":true}\",\"captionParams\":{},\"serviceIntegrityDimensions\":{\"poToken\":\"IgjOxc7EpwzAOA==\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Sun, 29 Mar 2026 11:37:33 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 1002\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2400,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c3e14e677a6c757039dadbac9d36147d","sha1":"807073e27afdce8fcf41b0c9cdd37e05157c4894","sha256":"dbdc7e7ad6dbbe0b90b238657a480bc07a04b13a9dc82507b306cd05748fe526","sha512":"ceee673e05e1e392f74634e809ec8ca296f3f63ab122ef5782ce218ef9a0ad64c0b80e57f588e90dad705dfbeaa37c397f4a389f80e5e645882de9c000f43515","ssdeep":"","tlshash":"7c41029d79d4acbf0bd1aac5744b6c3f3b76329465c8a5c904a8e6882fece4c0617cd1","first_seen":"2026-03-29T11:38:02.436088Z","last_seen":"2026-03-29T11:38:02.436088Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/js/language717d.js?id=42b28e76f4a089e15d01\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/js/language717d.js?id=42b28e76f4a089e15d01\u0026ver=6.2.2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2233\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8367,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (340)","md5":"d961de7235753ab72a0aa01b15b13bc5","sha1":"2379d4776128dec41af3edf7165623d482e04f40","sha256":"334cb30667bf337d7d64d84450813bf72b89bcfc45e2893d89dbb119c88907fe","sha512":"d2e50b30dad77885aeee9858ab3f164dd6ce43fd33c2f2853f92fe237223ea253b925286c9f2a0dad7bb9a4a8e104e5caf76c95f0f8dbdf5787b97bab47118b0","ssdeep":"192:p7r/yqWVRtI8VKM6GSgICgCpNqCy4TeeetsbLruQjnVc9VnEVasqmh:ZNStnYCZNbLSmVGVnE0uh","tlshash":"8a02805eb9f264701213b03d4a2fd908b236244b5a9cfe013e0ca2a15f5593a57f8fed","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.457498Z","times_seen":21,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/generate_204?eeg0pw","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:34.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /generate_204?eeg0pw HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 29 Mar 2026 11:37:34 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T03:51:41.729741Z","times_seen":17520440,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/ll-features-1-track.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/ll-features-1-track.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29664\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29664,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e3f225404b8849c456264e216ab0dfe3","sha1":"b59d0b7ad9fcd8ba4ba049743ae1dc867174d2f0","sha256":"d4d218d1770ce271663e1986c11f372cf1ec1d062a0174cf0d40fb8e41b280b6","sha512":"561f7d93aa946d25c07dc42d8939ea039f6f02c5678fc622e3bc4178949546c44f709e61e044205c5e090ab681042a0531a1b4bdf30d14ed7263d0fce77e781f","ssdeep":"768:TGawBJQyYHGjbL6w1Oj6dxUbVuNFiWvyw63hLhf:1wHiGjbL6GOGSB3Wzeh9f","tlshash":"c5d2f103225ffd07c914131133fdd8a5cc2a6ac5a69ac21bb87f7b5ce9226b14df4a49","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.467212Z","times_seen":44,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/ll-features-6-manage-mobile.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/ll-features-6-manage-mobile.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14836\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14836,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"3f0412ee8e79ecb04429772a245d6138","sha1":"10cdd5c6fba345d336d1fef924a6fb79e40e74d6","sha256":"cb5d274da78dc6639e46dd41d82f87e8e02350d64f7de8b525c108359fdfd8e2","sha512":"08abc64d27e5f43c1406392083ba2527e506d5f89c309125c911bcab350def1fd833eb73b068bbd552d5f141d762d2f7f2389014b1bff93bf34816108a14db51","ssdeep":"384:Xu217W2hH5JPM2fuD2g1rm7UHavMuJW9y0BPi9A:+miaKm7kavpQ9yKaC","tlshash":"c362e18b54713ec6c6c7705fde1d51637a5c88342fa11e87883eb0737b283a510f9606","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.448895Z","times_seen":40,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/plugins/sassy-social-share/public/js/sassy-social-share-publicc251.js?ver=3.3.51","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/plugins/sassy-social-share/public/js/sassy-social-share-publicc251.js?ver=3.3.51 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 39466\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":137228,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2757), with CRLF line terminators","md5":"67c590a7e54f7b59c7c10779654355ff","sha1":"5c37ee785cceef50ec1b846e278199b7aac5ec6c","sha256":"7bd91eb0294583e5e6de8515a9500590a8d3f7deffa385d1ed44a14eae6d7c3d","sha512":"985b5eb8e3a22284e3b35a6735f93d0fd00a0364d03524966a2df5bb1552f840114caf40213afe6b9fea6e9abd13bf0b7f0d0085790b6664f49fca2d1021e134","ssdeep":"1536:69jbzSHNX/OWQgmCnBNo5FZ20bkSNbJkRwbciq2+0wZRNddU4yddPd4:6hbzSt2dg3BNpFRwbciq2+0w/Jel4","tlshash":"54d30a99e350615ca87b8f6cff3a814cf21b61afd585428df47d92282f725d0f882d68","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.485147Z","times_seen":13,"resource_available":true,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/ll-features-5-earn-mobile.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/ll-features-5-earn-mobile.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15710\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15710,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"24948462561cf5e7762cc9c07f8d41b7","sha1":"734392ea7defbf28ae85733a96f8c6bced5db5c5","sha256":"819ad56409d544bc802b1ecdc83a470f56c982398a453a76a4cc8664a7cac685","sha512":"6025456ff0c7c07b7541897bb6e6488ba1b4dc69abe603e5a81f7cd1f4bd1c2cb7a4215f6f45cf1dc54fee6881919018039506411d651b1fd013c93f2a863c07","ssdeep":"384:l6EvyXkGRuzWIA/CJcL73C024F58WPCpiwTsVl6HFC:llGQeqcX5F8aCp3g/GFC","tlshash":"1262d0a3a2f94fa1d7d21662ec2d529e37099464f02a0fbf2261541eba340e9fe74d11","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.436547Z","times_seen":41,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2023/01/Ledger-Live-App-Download.webp","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2023/01/Ledger-Live-App-Download.webp HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35818\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35818,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32e92a91c89f9eb93aaa5aea7e608efd","sha1":"a897db443fb4ecb239eedb31426688b11c4423bf","sha256":"ed76479a70d4fa7c22257e0a12887dacc79db47140ef6326e2a4380e54617474","sha512":"a04e38e94b5e89f463e10f75c83a10251e274fd8477f5baf745e9288f6e16ffd5a0d4275ee0ef72147314656874141428ce3939dd8418643314fe7af826672fe","ssdeep":"768:KTU568rbDRDD4IUrdkM5AmuhfOHT9+UC8BFA2l:/kwDRIIURkZWFDXAw","tlshash":"2ff2e1eb3f902243f45a233d42a4de9a4e3bb654ed27bc70ba74b0dc57c21b508917a5","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.480565Z","times_seen":36,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.tgVis6b6ZfE.2021.O/am=AAAABQ/d=1/br=1/rs=AGKMywG4MgjSLdmolzhM4QATu6VPhNs6HA/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:32.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.tgVis6b6ZfE.2021.O/am=AAAABQ/d=1/br=1/rs=AGKMywG4MgjSLdmolzhM4QATu6VPhNs6HA/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 212028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 12:41:11 GMT\r\nexpires: Sat, 27 Mar 2027 12:41:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 26 Mar 2026 13:12:34 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 168981\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":663685,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"fc3c8e53990e9b44a09c35142d758d5d","sha1":"aa32ba9a62713b0f012a07f3a500f2f4a8c73cf0","sha256":"0f198e9769d813c6be7c522abcce8647753a45cebf89149665a556d054755495","sha512":"4a00da3d5a85f922eccbc973bf97588ac67945cfa00db3d5dfb9d04553d6d13fa8c083a26d4281d938ab7730b1a85a287f19be8b4ab2df3365d2228f05bff96b","ssdeep":"12288:ZuHkZMcQTL4OOnGEGyDOqCELcjvFX4dp8EK3khA2vgYOwpJ4Ij1dingRK62bdPSv:ZuHkZMcQTL4OOnGEGyDOqCELcjvFX4dz","tlshash":"85e44be8729274778292f9e4903f0001b17a6856f54c8cbcf29c9ec26df994951bbf78","first_seen":"2026-03-27T15:13:36.11322Z","last_seen":"2026-03-30T17:21:16.487191Z","times_seen":2242,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/ll-features-8-access-mobile.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/ll-features-8-access-mobile.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13074\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13074,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"2e04b4e06322af1fdfcdc944a4dcfaac","sha1":"09ae68b57e9d5aa5ab4dd2f8ab2c24d1153fa781","sha256":"aa7397bcaf6bd3977d4dd343515eba44358451296752ca76d0e5f5c0bd43b777","sha512":"9908832646c8d6b4eb2f49ea42ab12086a0e57b250cb1dbeb07cd1487fed0c66b2bdfac9e90dd1c9c8dabf879cfc7649363badf0477937102e1260361ad04d19","ssdeep":"384:JRprnCZrOvK7n/4rjPlXYXF6pAkimmg/RBpm8E1v3VQ:1rnCO8MjPl44imTRBpw3O","tlshash":"9c42d04e81e45b4990167c964b9eeaed3b5e76a84362ede7035b00302fa9f11c1398f7","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.474805Z","times_seen":39,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/api/stats/qoe?cpn=SPH6Da_lyzxnD7yq\u0026el=embedded\u0026ns=yt\u0026fexp=v1%2C23848210%2C156434%2C27005591%2C53408%2C34656%2C106030%2C18644%2C117689%2C9252%2C3479%2C13030%2C23206%2C15179%2C20222%2C33146%2C32155%2C9720%2C2887%2C2498%2C25059%2C4174%2C29683%2C764%2C13516%2C5189%2C1734%2C19703%2C4571%2C5236%2C5802%2C1978%2C13109%2C2978%2C9404%2C23826%2C9500%2C1840%2C6971%2C5634%2C8105%2C1764%2C11771%2C1365%2C516%2C9590%2C13159%2C5792%2C8738%2C5214%2C1448%2C187%2C141%2C7376%2C763%2C8629%2C3922%2C391%2C11098%2C2852%2C1170%2C3099%2C390%2C952%2C2754%2C3358%2C1489%2C4995%2C2490%2C298%2C144%2C3795%2C3174%2C1179%2C2105%2C1439%2C459%2C9723%2C481%2C14067%2C1491\u0026cl=888952760\u0026seq=1\u0026event=streamingstats\u0026docid=2Sd1lGBTLrg\u0026cbr=Firefox\u0026cbrver=134.0\u0026c=WEB_EMBEDDED_PLAYER\u0026cver=2.20260326.04.00\u0026cplayer=UNIPLAYER\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\u0026vps=0.000:N,0.043:B,0.165:ER\u0026cat=streaming\u0026cmt=0.043:0.000,0.165:0.000,0.165:0.000\u0026ctmp=pafmtstr:t.155;s.,pafmts:t.155;isManifestFilled.0\u0026vis=0.165:0\u0026bh=0.165:0.000\u0026qclc=ChBTUEg2RGFfbHl6eG5EN3lxEAE","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:33.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"POST /api/stats/qoe?cpn=SPH6Da_lyzxnD7yq\u0026el=embedded\u0026ns=yt\u0026fexp=v1%2C23848210%2C156434%2C27005591%2C53408%2C34656%2C106030%2C18644%2C117689%2C9252%2C3479%2C13030%2C23206%2C15179%2C20222%2C33146%2C32155%2C9720%2C2887%2C2498%2C25059%2C4174%2C29683%2C764%2C13516%2C5189%2C1734%2C19703%2C4571%2C5236%2C5802%2C1978%2C13109%2C2978%2C9404%2C23826%2C9500%2C1840%2C6971%2C5634%2C8105%2C1764%2C11771%2C1365%2C516%2C9590%2C13159%2C5792%2C8738%2C5214%2C1448%2C187%2C141%2C7376%2C763%2C8629%2C3922%2C391%2C11098%2C2852%2C1170%2C3099%2C390%2C952%2C2754%2C3358%2C1489%2C4995%2C2490%2C298%2C144%2C3795%2C3174%2C1179%2C2105%2C1439%2C459%2C9723%2C481%2C14067%2C1491\u0026cl=888952760\u0026seq=1\u0026event=streamingstats\u0026docid=2Sd1lGBTLrg\u0026cbr=Firefox\u0026cbrver=134.0\u0026c=WEB_EMBEDDED_PLAYER\u0026cver=2.20260326.04.00\u0026cplayer=UNIPLAYER\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\u0026vps=0.000:N,0.043:B,0.165:ER\u0026cat=streaming\u0026cmt=0.043:0.000,0.165:0.000,0.165:0.000\u0026ctmp=pafmtstr:t.155;s.,pafmts:t.155;isManifestFilled.0\u0026vis=0.165:0\u0026bh=0.165:0.000\u0026qclc=ChBTUEg2RGFfbHl6eG5EN3lxEAE HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nX-Goog-Visitor-Id: CgtiR21lc2xMYzc4byj8naTOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgHA%3D%3D\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 418\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":418,"data":"error=0.165%3Aauth%3A%3A0.000%3Aec.auth%3Bed.1%3Bes.This_helps_protect_our_community._Learn_more%3Ba6s.0%3Br.Sign_in_to_confirm_you_re_not_a_botsr.This_helps_protect_our_community._Learn_more\u0026session_token=QUFFLUhqbUtRTDhXU2dmTnhlTmlVTnVfNnBySWgtNkg5QXxBQ3Jtc0ttQnV2aWxwcmxJcUZMVFc2bmZaQjVza3ZfWFR0RVJoQU1Kakp3dVhQWjVHRllkaTFsdVhTajg1aGRwUVpHSVNBbC1pM25LNmFRQlVIdVJZUkNkZ1I1R1ViUUpMcVRKMXY1cll5NzNIX1VjN1UzSjZPYw%3D%3D"}},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 29 Mar 2026 11:37:33 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nx-content-type-options: nosniff\r\nserver: Video Stats Server\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T03:51:41.729741Z","times_seen":17520440,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/ll-features-7-oversee-mobile.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/ll-features-7-oversee-mobile.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14758\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14758,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"9f8cf19230691e50ab110501f3ad61a9","sha1":"5a7de2255da24e30eb835b9a956f66411c12f743","sha256":"d72cce87e1fefa1279603924db0c214ed82b4d7ec2426d08b9ec029093d8dcfc","sha512":"300a3f176d5baa464f71d6baee8be8171b3593ef73cb0dacf2c36aab4bc2bea5af6566f6ce5a75380b37a72d068b72280c4c3d3dca67a5627e9c8844d4c40d0e","ssdeep":"384:gAMvavPsXIqnce9GlrZ5FP0rAgwRpIU1Ut9dk6TJb:evavPsXTcHfFMrSROtt9yMJb","tlshash":"7762cf00c3ce7c8450d47e5c02644f253a589e94791ba76fe0369691aa89ac0f6f7dbf","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.437221Z","times_seen":39,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qfsvaultsystems.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 01:37:59 GMT\r\nexpires: Fri, 26 Mar 2027 01:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 295173\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-25T03:49:32.374141Z","times_seen":245893,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":107,"dns":1,"connect":16,"send":0,"wait":15,"receive":10,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/try.abtasty.com/2f64c37290a95967d11de606157a17ac.js","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /try.abtasty.com/2f64c37290a95967d11de606157a17ac.js HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2021/11/Ledger_favicon.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:33.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/Ledger_favicon.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 25 Mar 2024 19:01:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53007\r\ndate: Sun, 29 Mar 2026 11:37:33 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53007,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 313 x 313, 8-bit/color RGBA, non-interlaced","md5":"6cdea008edbce86abf9905ce10a905d1","sha1":"f27afb06b9c7595492638524a9abe7a158037c14","sha256":"0f5b4246b7da5a03afebd35be8f126619fb98387ffeef849ea8281b73813acdb","sha512":"4fe6d111ef3e71ea93910fee1c1cb800b7aa265288905a888a64ba22860014c6fa9d5ed55bd82adae2da40c05cce9a42cb6a6ef482c00ee881f2f7555273f9c7","ssdeep":"768:pkAbWXGU41zz0eTUDKW7IZujm4CLgCDl9J8L0GmXB/N0c7DJ9nPx5+fN4pi:iA62RJzHTU3IZ8ns1w4XB/NR7nPxAfR","tlshash":"a03302c7d309342cbe82247605378a90914b30cfe1e7d5204bcf91a69796e89bbbe197","first_seen":"2025-09-26T11:46:50.688611Z","last_seen":"2026-03-29T11:40:28.097213Z","times_seen":4,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/images/logo1.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/images/logo1.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Jun 2024 15:35:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 241492\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":241492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1877 x 688, 8-bit/color RGBA, non-interlaced","md5":"41225b3c8d69f53771d401145c72d99b","sha1":"ac6a45e50f833710938a8af423eb4ecdd433baaf","sha256":"b81017eb642c2c18bd9d17a4351f0cf993f71e615e18e449bfc4c1815b0e2305","sha512":"bcb8dbed5a18d47213384c209e96f8bac5acf7cd2e1e61180cafea5c62ddba1c12ebd8b531c910024851b9e4655dda36bd89d785e4071288add40b96baaa2537","ssdeep":"6144:qsN/SFcNONRIaD8lz4oVFVVuPKYerpdkoBvhswXaU:qsNqnNV8l/HbdlflvqwXp","tlshash":"2d348b98a310143335ed71a575624a8a4a723c33b286ec5846c7b1ff2b56f772c34e7a","first_seen":"2026-03-29T11:38:02.449388Z","last_seen":"2026-03-29T11:40:28.134568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":444,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2019/01/Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917%402x.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2019/01/Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917%402x.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2826\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2826,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"7d77a582714210623793596a4f8ca087","sha1":"cda7dfdf1231ffab2e278080f0a279329d129d15","sha256":"1c4c358b39f9b48de0b73a7158a6c12b751697805c224f4e8579efec285cc98b","sha512":"145c8356d183c397497f1e8c0a20e3b0afbecc3558e65f57c29425b2d78c7ad3ac96817480e22de240e6fa45eadafd75211ed5dd4fef850a119fca59dbe91cd2","ssdeep":"","tlshash":"77515ccd31dd947067085f71dac3063a91e90f1203e268261311f33b01a921dffd45ad","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.447962Z","times_seen":37,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/gtranslate.net/flags/blank.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:31.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /gtranslate.net/flags/blank.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/ledger-live-block-1.jpg","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/ledger-live-block-1.jpg HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 206566\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":206566,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 1081x1052, components 3","md5":"2d52a84c700fc3056cfe32a96a3453bd","sha1":"994691053171148e5a21ff0282a499625bff2a2c","sha256":"60f7caea5f2e79f17c87d0ae742e3147e9af17af8407b8310013bad5f5f83ed1","sha512":"12f5c9f48d1fe0d16ef34a4556bd5d077d2fa6e99065ee235ccb9c1bbb6428734e4baeaf73f23b41f6d41f07b52df9fc194ea1a2889caba27763e57d6cabff6c","ssdeep":"3072:+WBO5UD1PYlbZpd7b9E/rJ96qr2CzwQdsgHLiUHHJ+4RP3P33WSpeammFlltEd0I:LDpYrnX0LZzv2kJl/33W2/v8niRS","tlshash":"d71412eb6bdc3676e1723f372212c0d6dd49355bb7a2820623607d1bd5a07cf299c14a","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.508093Z","times_seen":41,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:36.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1774784256337\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtiR21lc2xMYzc4byj8naTOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgHA%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260326.04.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 889814532\r\nX-YouTube-Page-Label: youtube.embeds.web_20260326_04_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1774784253069\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C704%2C554\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 13525\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13525,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260326.04.00\",\"configInfo\":{\"appInstallData\":\"CPydpM4GEMuD0RwQyPfPHBCe0LAFEN68zhwQ8ZywBRD79tAcEM750BwQoI_RHBDc1NAcEJfVgBMQ9quwBRCKhNEcELvZzhwQvZmwBRDGxs8cEP7_0BwQ8bTQHBCUttAcEL22rgUQ2YnRHBDa984cEMGP0BwQrtbPHBDM-dAcEJr50BwQ4IKAExCU_rAFEIzpzxwQgc3OHBCJsM4cEKiB0RwQtJHRHBCZjbEFELyk0BwQtrWAExDK_tAcEIeszhwQlIPQHBDM364FEJ_PgBMQvYqwBRDQwoATEKz10BwQuOTOHBCL988cEJjd0BwQ_LLOHBCmttAcELva0BwQ3N7QHBCDiNEcEJiQ0RwqTENBTVNNeFVvLVpxLURNZVVFcFVDbkE3NUZiMEdXT1N5OEFzeW9Ld0VBODNfQmN1M0J2c210dVFHeVpVRXp2d0JoV1h1bXdZZEJ3PT0wAA%3D%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://qfsvaultsystems.com/\"}},\"events\":[{\"eventTimeMs\":1774784252901,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252905,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252926,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252926,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252926,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252927,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784253103,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784253104,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252433,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252139,\"latencyActionBaselined\":{\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252324,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252433,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252462,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252150,\"latencyActionTicked\":{\"tickName\":\"ndnss\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252231,\"latencyActionTicked\":{\"tickName\":\"ndnse\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252231,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252322,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252254,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252322,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252634,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252660,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252615,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252757,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252614,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252688,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252615,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252738,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252615,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252701,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784253111,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_WATCH\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"resourceInfo\":[{\"resourceCache\":\"ecj\"},{\"resourceCache\":\"ecc\"}],\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784252881,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784253114,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784253117,\"latencyActionInfo\":{\"serverTimeMs\":75,\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1774784253171,\"screenCreated\":{\"csn\":\"jn8V_EG5og9Y1qDY\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"_A7JafeNFev0v_IP7ubmqAo\"}}}},\"context\":{\"lastActivityMs\":\"26\"}},{\"eventTimeMs\":1774784253172,\"latencyActionInfo\":{\"clientScreenNonce\":\"jn8V_EG5og9Y1qDY\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"26\"}},{\"eventTimeMs\":1774784253172,\"screenCreated\":{\"csn\":\"6ZryPBIy1UhLG6TH\",\"pageVe\":{\"veType\":27240},\"implicitGesture\":{\"parentCsn\":\"jn8V_EG5og9Y1qDY\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"27\"}},{\"eventTimeMs\":1774784253172,\"visualElementHidden\":{\"csn\":\"jn8V_EG5og9Y1qDY\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"27\"}},{\"eventTimeMs\":1774784253172,\"latencyActionInfo\":{\"clientScreenNonce\":\"6ZryPBIy1UhLG6TH\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"27\"}},{\"eventTimeMs\":1774784253176,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"32\"}},{\"eventTimeMs\":1774784253205,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"59\"}},{\"eventTimeMs\":1774784253205,\"latencyActionTicked\":{\"tickName\":\"vir\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"60\"}},{\"eventTimeMs\":1774784253205,\"latencyActionTicked\":{\"tickName\":\"ps_s\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"60\"}},{\"eventTimeMs\":1774784253247,\"latencyActionTicked\":{\"tickName\":\"psns\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"102\"}},{\"eventTimeMs\":1774784253261,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"SPH6Da_lyzxnD7yq\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"116\"}},{\"eventTimeMs\":1774784253263,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"119\"}},{\"eventTimeMs\":1774784253314,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"170\"}},{\"eventTimeMs\":1774784253316,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"172\"}},{\"eventTimeMs\":1774784253317,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"173\"}},{\"eventTimeMs\":1774784253320,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"175\"}},{\"eventTimeMs\":1774784253330,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"6pJNHv1Ce2kIR1m3\",\"clientScreenNonce\":\"jn8V_EG5og9Y1qDY\"},\"context\":{\"lastActivityMs\":\"185\"}},{\"eventTimeMs\":1774784253330,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"6pJNHv1Ce2kIR1m3\",\"clientScreenNonce\":\"6ZryPBIy1UhLG6TH\"},\"context\":{\"lastActivityMs\":\"186\"}},{\"eventTimeMs\":1774784253343,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"198\"}},{\"eventTimeMs\":1774784253343,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"198\"}},{\"eventTimeMs\":1774784253355,\"latencyActionTicked\":{\"tickName\":\"ps_c\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"210\"}},{\"eventTimeMs\":1774784253359,\"latencyActionTicked\":{\"tickName\":\"psnr\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"214\"}},{\"eventTimeMs\":1774784253361,\"visualElementAttached\":{\"csn\":\"6ZryPBIy1UhLG6TH\",\"parentVe\":{\"veType\":27240},\"childVes\":[{\"trackingParams\":\"CAAQu2kiEwjLuuLHgsWTAxW3ivQHHde4Gn8=\"}]},\"context\":{\"lastActivityMs\":\"216\"}},{\"eventTimeMs\":1774784253364,\"latencyActionTicked\":{\"tickName\":\"wn_s\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"220\"}},{\"eventTimeMs\":1774784253366,\"latencyActionTicked\":{\"tickName\":\"virc\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"221\"}},{\"eventTimeMs\":1774784253369,\"embedsVideoDataDidChange\":{\"clientPlaybackNonce\":\"SPH6Da_lyzxnD7yq\",\"isReload\":false,\"runtimeEnabledFeatures\":{\"isShortsModeEnabled\":false}},\"context\":{\"lastActivityMs\":\"224\"}},{\"eventTimeMs\":1774784253615,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"470\"}},{\"eventTimeMs\":1774784253851,\"latencyActionTicked\":{\"tickName\":\"wn_r\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"706\"}},{\"eventTimeMs\":1774784253852,\"visualElementAttached\":{\"csn\":\"6ZryPBIy1UhLG6TH\",\"parentVe\":{\"veType\":27240},\"childVes\":[{\"trackingParams\":\"CAAQg2ciEwit3-jHgsWTAxWSgfQHHdqWI4o=\"}]},\"context\":{\"lastActivityMs\":\"707\"}},{\"eventTimeMs\":1774784253854,\"embedsVideoDataDidChange\":{\"clientPlaybackNonce\":\"SPH6Da_lyzxnD7yq\",\"isReload\":false,\"runtimeEnabledFeatures\":{\"isShortsModeEnabled\":false}},\"context\":{\"lastActivityMs\":\"710\"}},{\"eventTimeMs\":1774784254154,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIFQ==\"},\"context\":{\"lastActivityMs\":\"1009\"}},{\"eventTimeMs\":1774784254159,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"1014\"}},{\"eventTimeMs\":1774784254333,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"1189\"}},{\"eventTimeMs\":1774784254335,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"1190\"}},{\"eventTimeMs\":1774784254337,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"qeDug6VEPpIrb0eu\"},\"context\":{\"lastActivityMs\":\"1192\"}},{\"eventTimeMs\":1774784255160,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAAScQA==\"},\"context\":{\"lastActivityMs\":\"2016\"}},{\"eventTimeMs\":1774784255161,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"2017\"}},{\"eventTimeMs\":1774784255163,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAgEVAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgFvCgYKBGFHSWYSCREAAAAAAFiGQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAABA\"},\"context\":{\"lastActivityMs\":\"2018\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"_A7JafeNFev0v_IP7ubmqAo\",\"clientCounter\":\"5703\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Sun, 29 Mar 2026 11:37:36 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-07-25T03:46:33.002864Z","times_seen":281341,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/gtranslate.net/flags/blank.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /gtranslate.net/flags/blank.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/coins.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /coins.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69416\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1159 x 454, 8-bit/color RGBA, non-interlaced","md5":"c459686135a11edf88b82957c1fca586","sha1":"c100814aa2c446a25db767e522ef3dd4568ed062","sha256":"b9f90eaecde9f4869703acf16d673bc85b28609a528814b94979336ab518b28a","sha512":"5792644be56020df34d91d01c9fcc655da69b8604b776ff627ad4fe875618e5ed7a5be12c2e1603cefdc97f71d5d6e088564878087103c8c7607b318c4d85c55","ssdeep":"1536:n8xGd+dwcerSQANRFGO2Obt+1XdCEIVxRc81z4CCcug2Wifoj:Dd3q+hi+1iRcGd4f6","tlshash":"3f63f2ed957fc5421f9fc2ba18af7b678413128889ec89b1f77d664c8ae6c11024077c","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.419485Z","times_seen":21,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2021/11/logo-mastercard-s5e1f.png?v=2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/logo-mastercard-s5e1f.png?v=2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 216\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":216,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"01d9841a4067b17eec0742409c450525","sha1":"c0a8f4352c3761773c9575af7f82a4200fc65135","sha256":"3c7ecdbf9dfc5ab54c11c5425c63711ece173f85bfd407da1231c99d6a600fbb","sha512":"48e16915f46dfd783af9f52e92482134e75ecf881e7ef76fd397be6fd9e82471255ba4ae1eb5af5d7d5ef7e79e64f7aac9569e5c8b519521867af2d99c7f126e","ssdeep":"","tlshash":"c6d023620644925352b4517003705d74a4c3f0209ce1148c37571a6d0b7b7055377cb5","first_seen":"2023-05-28T00:04:53Z","last_seen":"2026-06-09T05:29:48.431223Z","times_seen":86,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube-nocookie.com/s/player/8e54e4ea/www-player.css","fqdn":"www.youtube-nocookie.com","domain":"youtube-nocookie.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:32.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /s/player/8e54e4ea/www-player.css HTTP/1.1\r\nHost: www.youtube-nocookie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 57855\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 07:32:04 GMT\r\nexpires: Thu, 25 Mar 2027 07:32:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 25 Mar 2026 04:34:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 360328\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":526667,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"185195ca51fcfdac89d594cfa043c8f7","sha1":"5f9137de3033d3ff8bd72b12f13611abce67da89","sha256":"8dd0861016ff7bfa3fa5810d683be16d2e6ab9c70a639428f71a78b39f93b9b9","sha512":"9bb24bf93591045320544488f3e0b51f7016ca53f3a7c9b085815c40e28d07135dd215410a0150f023db07a4df87358e47b8ac39b5cf4abb500f0b7fa7eaff83","ssdeep":"6144:Gg/+vL2kqMMg7UFBhBkoNuf57g5TGo6o7m:6jUMMg7UFCoQf57g5TGo6oK","tlshash":"4eb4ea72f0d1233cf2178d9997d9964d7239d983e2e22aeff11166dacbc77811326206","first_seen":"2026-03-23T22:47:52.53251Z","last_seen":"2026-07-24T09:09:39.074374Z","times_seen":6958,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.64.40.220","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:33.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://qfsvaultsystems.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: +gN8B0VF6RiqMPRGf9iubg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 29 Mar 2026 11:37:33 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 2ZQWRkgFB5KSSUSzkO4URo/179k=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T03:51:41.729741Z","times_seen":17520440,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":104,"connect":127,"send":0,"wait":22,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/fontawesome.min.css","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/fontawesome.min.css HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2019/01/google-play-badge%402x.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2019/01/google-play-badge%402x.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5624\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5624,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"7c58c782af161c901edeacbb01597043","sha1":"3cf4e68941a1a2952532706776951d55b7a75ce4","sha256":"ff3470fac1f4853ee3185ce5bbca6bbe74b6016b5d5e2182f3620c39d8c94941","sha512":"37f5c23baf5f9c5ccce926882d778e660ab30b8a5d4f21aec88dd12ebbfd5f3bf389dde3f049fb8a4c887d61c7cea42d8780119803fa9e597fa15b349e9c7d8e","ssdeep":"96:oX/9YiU/l+u0+ECiq9qWqRnvBdY3eUbj4J3HcpIzrunphEmz7hM8IsQB:O/9YiU/l+r+ECdqWqnZAdIHxOpimzG/X","tlshash":"1ac16d0f95a2d4c06ccd2f400c7574ae6ba46ac754721b8203766939f834c9caf1376d","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.494071Z","times_seen":36,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/translate.google.com/translate_a/element7876.js?cb=googleTranslateElementInit2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /translate.google.com/translate_a/element7876.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/js/ledger-livedb89.js?id=994d45aee2f84e122eca\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/js/ledger-livedb89.js?id=994d45aee2f84e122eca\u0026ver=6.2.2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 355\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":912,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"4567accf2fafb7c15652fc6488a35367","sha1":"0f9d451b024ebf20d0523d8030cbaf2e297531b6","sha256":"3a5e6534dfd77115927b5a0fbdc87f8e60bba68cb44dbb5dcab4c2f29e6c3225","sha512":"9bef4c97442a6dc2a35414d3e7340990228cffc44c523f9ee00aca9bd91e8121c915e76f7003abb8de1b3e295dc4a93cc257506a9da0ecb21dcbdf23a39ac215","ssdeep":"","tlshash":"52113a147590a0fd68373861be3f3354351b2483b755d3d07c0ea5a80f82d6822b5e76","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.513437Z","times_seen":21,"resource_available":true,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T11:37:29.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 05 Aug 2024 00:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14197\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WPML:4.6.3","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AB Tasty","description":"AB Tasty is a customer experience optimisation company. AB Tasty offers AI-driven experimentation, personalisation, and product optimisation platforms for user testing.","website":"https://www.abtasty.com","common_platform_enumeration":"","icon":"AB Tasty.svg","categories":["A/B Testing"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Yoast SEO:20.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]}],"data":{"size":65385,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9721)","md5":"7f097517aa60ca414b4fffa40654c15f","sha1":"ac4cd6f3fbb654be9c9a2e4dd58ee481c5bcd274","sha256":"aca9846a7ff029ef83b12e87109b9029b931b2819a8ce489d6eb64db02f9a129","sha512":"c1fb9104218623e9fa83f762414e389068612ce43ee9d3cf4ffa86714d007cf331b40c17c4c3a24024ce28bebb70c228b5f18800d8238654e44fe0c21c774f3c","ssdeep":"768:5Jln05ZdapKbpyQQaH1FpKHTxqYCrY6q/w0vo9H4jGNhEPCX1m2q2p2G2CG1S2ik:ZcapyH1FpMxqugRFhEPCX1m1YLfG1Svk","tlshash":"6453d86169ed903b154b5f98a194b728bab58103cf09ee5873fc22accfd6f948973118","first_seen":"2026-03-29T11:38:02.458352Z","last_seen":"2026-03-29T11:40:28.124838Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1227,"timings":{"blocked":466,"dns":160,"connect":145,"send":0,"wait":294,"receive":1,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/cdn.cookielaw.org/consent/5ff3ecce-44bd-4ef3-b746-ec81546bf82a/OtAutoBlock.js","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /cdn.cookielaw.org/consent/5ff3ecce-44bd-4ef3-b746-ec81546bf82a/OtAutoBlock.js HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/ll-features-1-track-mobile.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/ll-features-1-track-mobile.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14306\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14306,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"b06b7cbfdd3a6027996a4363fb5d93c9","sha1":"4725d3abbe47f2b05d392bdc9277770e0106d718","sha256":"61b871b506433047600454ef004d9d11b56c4ef7c3c0910fcf9f1a16f0ab68ca","sha512":"6630d9071f5fa1f8299b2e41616ad45733b2b6e62f5959c57f2fc45e2ed17471f9b002a9381d700d458effa42fe26a21b97287609bcf2a370cc96c3f35e6c99b","ssdeep":"192:1M/7Ka55pVaTcoz9Sw6wzRnHkyXu+FLBg6Bew3s/7GAAZa9VwNDP1ucn/qLXZq:a5xaYoQw9FLBgAewcTIkCpJCM","tlshash":"6352d1582e349b03cf842db581d9ee4219cf578ca94da1f133a3f5858346eee58d1729","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.418237Z","times_seen":41,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/ll-features-3-buy-mobile.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/ll-features-3-buy-mobile.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10122\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10122,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"61422699cd134f843fb71e2593a6af42","sha1":"7d29ff08370555197ab46741cb572e3e0409826d","sha256":"ad9420ae342a0bc402d5400234747419f95400be466528bbad65052440ad2bbd","sha512":"3f80f9bef38c73937be82c62a005b3774194801de606276dc989ea38e3f1baebfcccb212d954ba35f67c7c2aac488c1b4cca44c53073de77d0ce59a6eac376f8","ssdeep":"192:QqGqEp3yBkgIAV8kT/3MNsuFLM+YrWFzCNpp1SJPiO3jGH2bmygcm90F/:Hu8kfAV8q/8NnGpXO3jm2mGF/","tlshash":"fd22c072034eeb5c59064728cded0c992ece9cbdbe49442b5cde243a82489c78a3d30a","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.514402Z","times_seen":41,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/js/globalisation-bar5e91.js?id=aff10185a0d3f46ab6d4\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/js/globalisation-bar5e91.js?id=aff10185a0d3f46ab6d4\u0026ver=6.2.2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1045\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (709)","md5":"b2eeb3114eb01351bd518b29a2651936","sha1":"7345aaece1cc8c34370ad8bdd11c2fac36e0dbd2","sha256":"cb997566b8a23cd4772dce38b4661b0b3abbdbd573d4cf37f69de114c41030dc","sha512":"54605dd3722a5b7bc26019efc4e48790d386307d3e6d79953bf634339f34d51df684f67bd609a148a443699cadf3d07c6e02fc39f9e6ed387f5c4401817a4e7a","ssdeep":"","tlshash":"6251839668e10431905f605a6d2387487eb420c73d417d01ba2c19e18f9ed2edebbfde","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.441277Z","times_seen":21,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":697,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/kit.fontawesome.com/f8a71d88c0.js","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /kit.fontawesome.com/f8a71d88c0.js HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/plugins/contact-form-7/includes/js/indexf2b4.js?ver=5.7.7","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/indexf2b4.js?ver=5.7.7 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4614\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20593,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (370)","md5":"fb3ff82f097fdb2ecbb2a47ab18480f9","sha1":"e2a75fdc9cdab432948756d5e1b4bf9a7d251fda","sha256":"f2658ebc6c575fa3bab8b5174b08b21fe93b8f2bf82e4fb18499043039d204ae","sha512":"a1c791efe58f13e132bb0d43edac3d3fd48f0dde9cb9874593ebd16fe8dcb5fc493309e310fdc67138443ee48cda7db5fd6d1dba7d993f58e7e1f61bd0ca8995","ssdeep":"384:wekPylaqVRFYMwTSeMFUZjwxW31O4TpGQ:wekK4qVRFHn6JwxW31O6","tlshash":"5292b45712f10431077360b64a9bd641b325301b98cecf543e4cda581f9cebaa9f2bea","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.478823Z","times_seen":20,"resource_available":true,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/js/iosCookieDisable9a10.js?id=44730b5943875e2040d5\u0026ver=6.2.2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/js/iosCookieDisable9a10.js?id=44730b5943875e2040d5\u0026ver=6.2.2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 841\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2115,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c64b87aa832ef6e28500c0cf834f06dd","sha1":"6f1c6f6f737d19fac44695831ca9cc3acad4eb8b","sha256":"0b3a51c9a98ef23c4b4a0b92cab1898acbfec2b6135a965f4e928e18a3a5a270","sha512":"31126be085ce3ea6b944afd1c6573a6903b599448cf022caf32ba7576c16a9438df8553ebcd9839bf4313a7092e26b995c0cc3716aaec53cef64652cfc543313","ssdeep":"","tlshash":"b741638875e6b4749223f060597ec108b535a0c762cfdc81be0e78507fa6a3883b5b88","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.472063Z","times_seen":21,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-includes/js/jquery/jquery-migrate.min6b00.js?ver=3.4.0","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min6b00.js?ver=3.4.0 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5083\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18733,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (519)","md5":"a38067d43fe7f9f4386f434d439a99b6","sha1":"006709121146dcf665315a271f0671a41ec048bb","sha256":"aca1201bc5295858b08a00d253ebbb108c86b7f1a027ff4486ce23fb394ffc87","sha512":"28d6fc9facc6790378c6a2de50f04b469724ed556f4f904bf68e48cb97721172db9fda597244ffba6f822c4933a36c61e59096f154e2c23c1e180cdcf69ecf1b","ssdeep":"384:avjxpoFKmTuFLslOg8FgPoj/EO9GLWKfKWR2GwKJcl3:isKYuFLlePozGLWsKjGwrl3","tlshash":"7882a52eb5f62a319567f179e52fcd4a7176048f168d8e00784c45a51f0d83ca3bafe8","first_seen":"2023-08-24T17:25:41Z","last_seen":"2026-06-09T05:29:48.440188Z","times_seen":21,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/widget.coinlore.com/widgets/new-widget.js","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /widget.coinlore.com/widgets/new-widget.js HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/a88248e868d686d9861e8e7a5aaec20b05f0df72.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"18.193.21.76","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/a88248e868d686d9861e8e7a5aaec20b05f0df72.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://qfsvaultsystems.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 11:37:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-Jt95KB4lhLcE8+iQwCNZPCueNIE\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f18805e17e4c1e8e9e07a360e4a69d2","sha1":"26df79281e2584b704f3e890c023593c2b9e3481","sha256":"6281c13b7e0567048cb6d2f22a76664459e11449f8de893a5852cbd5b5f202f9","sha512":"367418c85fe832ff0d1c662bcc9c08160f6bd9e7fa17da26c06a5620f111a62eee9ab949fb41b9cdad283bca566c40db697449e3c99b7fc3865936d14c504043","ssdeep":"","tlshash":"9421686d4a6822fd5245c7d6c5047a076bbcdcb371043e7eea0d0a4e70db2e5223646b","first_seen":"2025-07-17T12:46:19.667078Z","last_seen":"2026-06-09T14:35:11.404451Z","times_seen":5255,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":78,"dns":14,"connect":21,"send":0,"wait":25,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/RA-8Njw1GOs-8l48WIWmY8SfWQmxnm9SyxBiHm54LLs.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:33.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:38:24 GMT","end":"Mon, 01 Jun 2026 08:38:23 GMT"},"fingerprint":{"sha1":"B4:D8:FF:18:25:9D:F4:3C:81:14:15:FA:FE:F1:C9:D8:BD:9A:AC:DB","sha256":"DA:45:8E:4D:FC:26:D1:06:BC:7E:55:03:F6:AC:CD:D6:ED:2B:5B:91:E9:13:35:DF:B4:EF:95:A0:EF:55:E7:C6"}}},"request":{"raw":"GET /js/th/RA-8Njw1GOs-8l48WIWmY8SfWQmxnm9SyxBiHm54LLs.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23833\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 21:36:56 GMT\r\nexpires: Sat, 27 Mar 2027 21:36:56 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 11 Mar 2026 09:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 136837\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62760,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61502)","md5":"af196d7293353cc4b8692516f8d0cde2","sha1":"688115c0cc1e8d37fd677cdb2c1abea7a132f58d","sha256":"440fbc363c3518eb3ef25e3c5885a663c49f5909b19e6f52cb10621e6e782cbb","sha512":"5a889b1c44bb59269ae5d703867567c5043610b98d58d9778b5529d76629f456e02bd039f569fda74f888312f4e148c68d2cb9ebddae8895561ae7fda7f740d2","ssdeep":"1536:jSZwyYv07JkgmP/v1gKBIrjZiXgY3zwbWB7ET:HS7G/tHB+j4XgS7ET","tlshash":"065317cfb2f2b7718df365e1406b510952bea014acc8545fb902ebf46a7198b802ff65","first_seen":"2026-03-22T09:01:44.763594Z","last_seen":"2026-03-30T07:00:37.962707Z","times_seen":1075,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":55,"dns":1,"connect":7,"send":0,"wait":9,"receive":6,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/QRcode_LL.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/QRcode_LL.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 47373\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47373,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1023 x 1023, 8-bit/color RGBA, non-interlaced","md5":"a7302bc0fd720bff05d3d7845c82c176","sha1":"ea70afa5038e9d6aab37b99171693c4669f8b769","sha256":"565ca421aafef81d8006f4f3be6d7f8096bb354c9a6ac3e63a882395fa8733dc","sha512":"be64c1951a91a69a52fcd07ea98404adbea98f3e4a636b2918b5ee68bb973dea6cb2ea61adf29e00da6bc07926781e77b5c5473adecfbd0f49c3863de8460856","ssdeep":"768:TSka5ttttttttMjXMjuBeNrCdopSMbCYKlzdHZgC82mc5xaa1SvW8TEyTArHaaaL:za5ttttttt+Q5rCdMelzdH+C1098ro","tlshash":"f023aedc839e8b34d8a62b364650b6a5c4b17b0e347d81e76e241909910fafcffc05a7","first_seen":"2025-12-21T02:43:04.251515Z","last_seen":"2026-05-02T17:41:46.743742Z","times_seen":4,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/ledger-live-app-desktop.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/ledger-live-app-desktop.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15714\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15714,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"1c648e6f2ce4b857dc109f6b6dadcd71","sha1":"6ff8dc7ceb98d978debb4d0933fd35cdd2c08a8a","sha256":"6964c08d6d893c193bd3aa52d7e551abde4b4768c943b8741c59c70802f95ae3","sha512":"46f18e84d916ed5c65db901a02c152c0637dad7c501c127cc620c05c6d2f09fbb3d52f907673e931df86a3a05827ca7a1a5f146a90ab621d859b6435f1139d2c","ssdeep":"384:BWppjC75ctIBO1z118bQeqIzlm46mPh+afKBkIoETeG2Wr:qC7uuBO1p1Pwm46mPoC1OTecr","tlshash":"6062c1e285cfbdaace5920091516aaf342f60f7fd3f1a6877add421f3a8944410c74d9","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.408486Z","times_seen":38,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2021/11/logo-paypal-s5e1f.png?v=2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/logo-paypal-s5e1f.png?v=2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 540\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":540,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"3481bb8473c0eb12d41294038f0b3331","sha1":"73c548f8928b1177cafeeb430d8e353188967404","sha256":"8a9b5f6a14ebf3dc908b46af73e9673eed4462eae2861e4a0bccac4b7f2fb9ff","sha512":"0f80e587ce04454c982f53cbff4a9ba426cf991bdd0524922fe872eac599d0c60c04d2b4a4e38d84ed8f6f0505dfdc2b7ba2696ef2572356ea090fbeff86fc4c","ssdeep":"","tlshash":"7df02025a3fafbf5ea281d54df29198229aa1a5f3c0fa68c11900874d8206602cea881","first_seen":"2023-05-28T00:04:53Z","last_seen":"2026-06-09T05:29:48.475546Z","times_seen":86,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:32.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://qfsvaultsystems.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 01:37:59 GMT\r\nexpires: Fri, 26 Mar 2027 01:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 295173\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-25T03:49:32.374141Z","times_seen":245893,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":112,"dns":0,"connect":17,"send":0,"wait":23,"receive":8,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.YE2WEYsO5Mk.L.F4.O/am=AAAABQ/d=0/br=1/rs=AGKMywHQFTwTkEFBYLqJ164ZejzWkhmbhQ","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:32.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.YE2WEYsO5Mk.L.F4.O/am=AAAABQ/d=0/br=1/rs=AGKMywHQFTwTkEFBYLqJ164ZejzWkhmbhQ HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 36706\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 12:58:41 GMT\r\nexpires: Sat, 27 Mar 2027 12:58:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 26 Mar 2026 11:08:42 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 167931\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":295871,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (32698)","md5":"31480d1da7a7fb0a7af5a87f53e08acc","sha1":"95c07ced7d310bd1ea099d72ffc0ee5c88acbc4d","sha256":"7b81dcb0e42ff4e1068cf66036c67c744eeac70cf03fe3af2bf4cf901efc1909","sha512":"aafaff51222c83b8c0eb47dfcced14aeede9967fb23f5ba16f46cd30c7eb4a8b354e23223714095fdfcbf7fdf6c811de3d86088c66ef8d4255633370cfda6d57","ssdeep":"6144:8xbcNY2oCP8NhoVpnGsQDoAoLCgpe4cyvoyH8nOodDOoaX+xbJnc2pTteQW/EHWd:0bcNY2oCP8NhoVpnGsQDoAoLCgpe4cy5","tlshash":"9054e9735661232ce227c665e2e1fe4ab226cc16c316379ff441be3886df1d1191b68e","first_seen":"2026-03-27T15:13:36.10772Z","last_seen":"2026-03-30T17:21:16.550777Z","times_seen":2265,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:34.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube-nocookie.com/\r\nOrigin: https://www.youtube-nocookie.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube-nocookie.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Sun, 29 Mar 2026 11:37:34 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T03:51:41.729741Z","times_seen":17520440,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":72,"dns":41,"connect":8,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.tgVis6b6ZfE.2021.O/am=AAAABQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywG4MgjSLdmolzhM4QATu6VPhNs6HA/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube-nocookie.com/embed/2Sd1lGBTLrg?rel=0\u0026autoplay=1\u0026mute=1","date":"2026-03-29T11:37:33.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.tgVis6b6ZfE.2021.O/am=AAAABQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywG4MgjSLdmolzhM4QATu6VPhNs6HA/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube-nocookie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 133680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 12:41:12 GMT\r\nexpires: Sat, 27 Mar 2027 12:41:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 26 Mar 2026 13:12:34 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 168981\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":462482,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1409)","md5":"23886725470aa035229c5d05edcc06f7","sha1":"2f63618cce5861f04c2218d9c77ec14057344edd","sha256":"1af5f25bdd28f8eb08da4dd18e6c7018ed21038999dbeb782b7c622f5b582838","sha512":"a6159b1843545177d868cb91131e8f803d25269347cdd4d87e9cdc80f0730993a61886b41a5b01a108d92fd007595efc8c8779cab2d6d2a5c1bb8ddc137d1dc3","ssdeep":"12288:ThgX465iludU4xzvjNLovWaVmtx+0WDcFKVsYg1QlhA01GePlDxxPvmSDq1IxC4e:ThgX465iodUWzvjNLovWaVmtx+0WDcFL","tlshash":"eba45ce0b291f5b98b425cabf97b8003717e5d42f2054464e4fd6eac18f8e4ca177b29","first_seen":"2026-03-27T15:13:36.10256Z","last_seen":"2026-03-30T17:21:16.397295Z","times_seen":2236,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-includes/js/jquery/jquery.min5aed.js?ver=3.6.4","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min5aed.js?ver=3.6.4 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 36045\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":151324,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (755)","md5":"f5bd74fda89354489a9b05c9e7de9450","sha1":"7014f3e7aa6e5a53b5b98427b3cdc2574f062142","sha256":"4b6e3789b012d779631db3625e40468eef4c1e0d56701d09d22f99a09b31dddf","sha512":"79b3f183bf4c1f4651fb17f10f0956bf818195a8b3ee1ff38e337faa907b41995ce42cfa82dab857f2b9e227b17bd64139fa3d425c8c5489de2242e3e77d52ea","ssdeep":"3072:EMuXVgMQlgU2oQR1K4FURIu47b2WBIkehha9:7uWVgU2oQR1K4FURIu4GWwhhe","tlshash":"7ae37389b6e621319307f03e8d6fc809b276545f1a8ded05790c52a65f1883c97fafe8","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.510629Z","times_seen":22,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/cdnjs.cloudflare.com/ajax/libs/Swiper/9.2.0/swiper-bundle.minedeb.css?ver=9.2.0","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/Swiper/9.2.0/swiper-bundle.minedeb.css?ver=9.2.0 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:30 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2021/11/logo-cb-s5e1f.png?v=2","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/logo-cb-s5e1f.png?v=2 HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 166\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":166,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"79ba4927ee4a0a26a8279becd876aea6","sha1":"b2349ba2da45d008ac07f97f085aaf1c31af3aa9","sha256":"5fa2a2e5f17696af489ce96f0facbfef8e4cbe345870e82d28276750af80d6b0","sha512":"afcf13e31667b8b9260dcb22939869ad0ed9fcd8c74c8217f0b967f1494a036e48195d4a5814f12d0a0f44c82d23205358b85f47a4d026f70baa2b9bf6755845","ssdeep":"","tlshash":"7ec08047c454c5d1849f39d053795c965368654e0541d5d5741f907ce62f4c30152f59","first_seen":"2023-05-28T00:04:53Z","last_seen":"2026-06-09T05:29:48.454087Z","times_seen":86,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 679\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2113,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"3a848fcc735999c9bf67a15bf2263a2a","sha1":"371f038184bcf4098cb285f774bc8f493896289f","sha256":"314421a8a03b22cc4ef5a2ace370f9cec31d4c4bd84d306e287af4f3b00f1d8a","sha512":"560b7e1f61060a416d557d47ddc790f0b8fa0850245eba87fa90391fb18b35e368b3e2e0961f8aeb0f605dad4d8e0195c3d67329d1f73f519362d3b48c126185","ssdeep":"","tlshash":"12419d2c2ae81075b1073139d5bf5048b572a29b6b4ded50380ca5645fa1e344ff9bdc","first_seen":"2023-03-13T20:44:19Z","last_seen":"2026-07-19T08:58:45.688089Z","times_seen":63,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/www.googletagmanager.com/gtm5445.html?id=GTM-W5FKZ2N","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:31.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /www.googletagmanager.com/gtm5445.html?id=GTM-W5FKZ2N HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/themes/ledger-v2/public/images/arrow.html","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:31.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/themes/ledger-v2/public/images/arrow.html HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/wp-content/themes/ledger-v2/public/css/main81e4.css?id=c82d46bde76f30a48ac4\u0026ver=6.2.2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 29 Mar 2026 11:37:32 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-24T03:47:49.536748Z","times_seen":7572,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/wp-content/uploads/2022/06/ll-features-2-build-mobile.png","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:30.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/ll-features-2-build-mobile.png HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 11:37:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Mar 2024 12:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17638\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17638,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"a8c0b15f374d1f0abff54f86b9308606","sha1":"1b655e5a539dadc260451e64be5b92ab384dc508","sha256":"4fa6e9f696485d88eb317e778be4571ddc33944c77fc0b51688af0498fe44c3e","sha512":"0a64c8613e2685d36cc7fa57bfe81065bf567d154a5ec8063892a212b3342172c094ecbea3aa0c554bf124bf81cfc59a16f839e4abf719ee7c5881a7868f8cd7","ssdeep":"384:bXZUT26btVhLlhpImyO7VhnfucQB25CYWgTS5QsXnDMIdletP2yxut6DHgNQZkpI:2JVt7jU6CYWioLvMlRZkpRG","tlshash":"c582e034940821cf08d1bddb843cc39a5eb56ba84f7e93df2697e81c3d9a576c127885","first_seen":"2023-08-24T17:25:42Z","last_seen":"2026-06-09T05:29:48.479666Z","times_seen":41,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsvaultsystems.com/use.typekit.net/vli5gyn.css","fqdn":"qfsvaultsystems.com","domain":"qfsvaultsystems.com","tld":"com"},"ip":{"addr":"216.244.83.202","port":443,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsvaultsystems.com/","date":"2026-03-29T11:37:31.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qfsvaultsystems.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 20:18:48 GMT","end":"Fri, 26 Jun 2026 20:18:47 GMT"},"fingerprint":{"sha1":"D9:D4:78:55:57:0C:DD:E8:AF:D2:66:62:8B:72:5C:A7:49:0D:D2:A3","sha256":"BD:BC:94:25:F1:EB:E6:5F:53:53:8A:6F:2A:57:CE:5F:A3:EC:C1:98:2C:4C:BC:D9:06:BD:CF:52:35:19:E2:7E"}}},"request":{"raw":"GET /use.typekit.net/vli5gyn.css HTTP/1.1\r\nHost: qfsvaultsystems.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsvaultsystems.com/wp-content/themes/ledger-v2/public/css/main81e4.css?id=c82d46bde76f30a48ac4\u0026ver=6.2.2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 11:37:31 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-25T03:50:09.102346Z","times_seen":143075,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"qfsvaultsystems.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"qfsvaultsystems.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}