{"report_id":"c6df390b-acef-4ef5-be4c-700ea90b19d9","version":0,"status":"done","tags":[],"date":"2026-07-30T12:04:09Z","url":{"schema":"http","addr":"whatsapper.leadball.ru","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"whatsapper.leadball.ru/","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"title":"WhatsApp виджет и кнопка для сайта - Leadball Whatsapper","dom":{"size":20234,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (766)","md5":"ae1fbd53f811fc1e11da3ec0199cd1bf","sha1":"09b2fc9c6346a1d4d60cc4fbf310664fbfc92bc8","sha256":"c116c39ffd6678b1f31e2ebe43d75429e1af09f7e0e9af4f94cb642b204a2d59","sha512":"fe25beae8e6e46824c1c2353b20e988a70272e513ec68d5d131055c8d3c7ef6b826f228b6412ec5c7eefb20d292ae457707cbf4e2305288413f9a44d5f7a0d38","ssdeep":"384:fl2vPSEN5KkLvxABCLJO0VRw0RW5083P5C5atVOUNUih7MOUCPROjOU/EOeMamfW:N2vPSEN5KEs083BCoO2UihGWJ","tlshash":"d692a912858e2c2f020395eff0207b4964af1d7eeb274ea2b2ff057677c1c95a52a15d","dom_hash":"domhashe87d61bdf767e327b89c05d055f80285","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"whatsapper.leadball.ru","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-03T12:04:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"whatsapper.leadball.ru","ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2018-11-07","domain_rank":0,"first_seen":"2026-07-30T03:04:34.904692Z","last_seen":"2026-07-30T03:04:34.904692Z","alert_count":26,"request_count":13,"received_data":349790,"sent_data":6413,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":13,"received_data":425108,"sent_data":7422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.youtube.com","ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-07-27T08:27:28.816935Z","alert_count":0,"request_count":8,"received_data":3663479,"sent_data":9888,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-26T23:06:30.068608Z","alert_count":0,"request_count":1,"received_data":1223,"sent_data":510,"comment":"","tags":null,"fingerprints":null},{"fqdn":"leadball.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-11-07","domain_rank":1426590,"first_seen":"2019-05-10T05:45:51Z","last_seen":"2026-07-30T03:04:35.55618Z","alert_count":3,"request_count":3,"received_data":0,"sent_data":1547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-07-26T22:51:17.688286Z","alert_count":0,"request_count":1,"received_data":62727,"sent_data":497,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.178.86","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-07-27T08:17:00.256785Z","alert_count":0,"request_count":1,"received_data":25389,"sent_data":656,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":24723,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-07-27T10:05:01.711627Z","alert_count":0,"request_count":2,"received_data":1197,"sent_data":1220,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2026-07-27T10:51:56.203431Z","alert_count":0,"request_count":2,"received_data":110006,"sent_data":1161,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"yt3.ggpht.com","ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-01-16","domain_rank":1275,"first_seen":"2014-01-15T16:55:17Z","last_seen":"2026-07-27T12:58:04.531369Z","alert_count":0,"request_count":1,"received_data":2991,"sent_data":627,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"143958af96c892102c0e36ec78be9283","sha1":"dcc4812b1a792f687ea8f46c3231799c3294a8a0","sha256":"9e28ba18e6db254eef7a5b9b39e55ff249d3e7c1e5732800d077b90674c2e3d1","sha512":"309288ec2df5102b2201f1e204b0074d89299d1f01c702e5738878cfae4a9e014c8dadc58e00c72a68f5fac4010ab6a721dd0bdf23f749b623b95bad3727ef25","ssdeep":"","tlshash":"c7100000c000000000000000000c0000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-04-01T10:33:49Z","last_seen":"2026-07-30T14:22:28.427669Z","times_seen":376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cc43ad532377e05783b919d86a896d9","sha1":"69e00bdb15ac21186c8d27764e6311759ba5b99b","sha256":"007cd5f5a967155b6963ac5de46c369ee23237414c3f576b4197fe46229808ce","sha512":"404182f4b51a22a4a35e58480d372a65db2465803ca23913e379199413edf84fa74dcf0f92026d8561dcc35bdff981cb98a38c8f50ae05f7224e5c7b42b30c92","ssdeep":"","tlshash":"2cd022c93c4978d20279238888ba01f7e2fbb8dc78068b40c32442002a3ca3a5464402","size":199,"data":"","first_seen":"2024-10-31T11:08:50.83142Z","last_seen":"2026-07-30T13:17:17.417165Z","times_seen":155886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/js/jquery.js","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b6294333db8eeb65bc7717144357d23","sha1":"74ef185a3cba75af7f4e1b3dcaf1b32b0db5c1af","sha256":"4946fcf019e50cf850a0344e45b3a8f93d5ead5e1dade33695025ef732913af1","sha512":"bf4197f2eca58ed25dfdd82d518fb0a6f900695318dc5a47e2039273c3bda02b1d73249d5ea7d047bfbda3a692606b430c836912e043f87751fdd900576bec9c","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOa99Twkxb7/Jp9s:y4J+03jL5TCOaLTwkxFdnCVQwKa98Hrc","tlshash":"3c93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97185,"data":"","first_seen":"2023-03-07T01:41:00Z","last_seen":"2026-07-30T12:04:47.577044Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-07-30T13:17:17.161481Z","times_seen":296211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-30T13:17:17.162504Z","times_seen":260031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"12347d552552b7eb8f1aaf47a5774b81","sha1":"4701684cb61e83493e14555659e2cd07ae9aba3b","sha256":"63b85d3cc0ccb498e52cf8dc76db5119713a85031ef4a8e99edd01e403cb08f4","sha512":"a0b95f6914bf92922a13db3f81f5612e2a360e0b3bb0f6ffabbe41623a044d662e27a216d788399cad99c8ec18c5f98f481e602d672de5b3b97d5da8ec930e4c","ssdeep":"","tlshash":"6b41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2083,"data":"","first_seen":"2026-05-25T17:49:28.102585Z","last_seen":"2026-07-30T13:17:17.163356Z","times_seen":18009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ebeeed5860b2839666e42da64c235c9","sha1":"9979d7cff78fc1fe8a09571b0905f21663f0b50c","sha256":"0c97f60f06d89b2ee94cf057e21a6fed56805363b547c14aec8f8bef7219c5ae","sha512":"f4e0e54c155a65c4162a49e91c8c4cae700c8edb4752f757fa6f09c502b17dcc4f80fbbdf8b26c73c78305cc4ba5cb6a849f9d8a8a86179818eed47a6120364f","ssdeep":"768:F1ChGD4UkoHwUPDi7f3EeJrfmrtYMUJmq97SyY/v1M6LnB8vzhaQ8rQjeM15nAk:TC7L6CMUpzYVM6bBszhG1k","tlshash":"6b8353640868a872c893a547ddb9ff3e9cf806790bc9966dbcbb875c01ec6510e9f413","size":83492,"data":"","first_seen":"2026-07-30T12:04:19.568326Z","last_seen":"2026-07-30T12:04:19.568326Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-07-30T13:17:17.166415Z","times_seen":111608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8501e99db1c76b62dea75ad32747a129","sha1":"791537ba64bbd81ed1644b015c4830d897182fb8","sha256":"25289f89e8785a11e468135cfa545b64462e90a61e62ee0bf9fe2dce0898016a","sha512":"d34b3b6f94043e080daf7804d7305efc1bade1433a80d4c6c547ab1325aceda8235ceea8bd99062a7737401ff5d767d46e4d24a972bfa88e9c6b197947041f77","ssdeep":"","tlshash":"7b1135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1032,"data":"","first_seen":"2026-05-25T17:49:28.106733Z","last_seen":"2026-07-30T13:17:17.168589Z","times_seen":17990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-30T13:17:17.169579Z","times_seen":258095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"144d2948ad4c86812b117d994857251b","sha1":"338a8f9ca10cad16485fdb588f8da46596936126","sha256":"d3b1814bd4a218e1c297580d80270308d3fd12e919a9bb7309759036456a3bc0","sha512":"4141b9c87e04266ba2e72e1189140e3155cb30f197a0d67c4498777a9aa488d01d54d444888b045231eff751fff8061d5a31809edadce7c512fcff36db977d1a","ssdeep":"","tlshash":"c6017b5c0a057ddce9068dccc7c6a6655fac9237be003114f82f454dbae3aeb9830967","size":760,"data":"","first_seen":"2026-07-30T00:50:25.228337Z","last_seen":"2026-07-30T14:22:28.405808Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3acdba4dd02b9872bcdf37d947e577c0","sha1":"21ab3b0832fb94f03d4f4bdd8a6b4d8adc66510f","sha256":"0fb6d9a81ee50efdc4c3cbb52aea0cb06e677236b7de7402717a25690b48cfe4","sha512":"6c2aee3cd08f11d6c919b38b49c2d9fff5cb7171cd3b9e721d116fe8744eae848f60a32de4c857456a8b52034209b766f47b7822028f131eecab0237a4253af8","ssdeep":"192:yzEjQfb/44TmOavb+Nvyv8kYl90sxVjoObVWpO7sTM73gcAKc3Udq6bRXnLNy9nf:+OQfbwKavBv5Y4sxVMOUE7sTMDgcA3XL","tlshash":"f022c80fa38679ecd7d15598b7a36b037cf4821b63082a1d88cba0542cddf19429f9ed","size":10434,"data":"","first_seen":"2026-07-30T00:50:25.229944Z","last_seen":"2026-07-30T14:22:28.40634Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"96c40df9507031b35d7b675fe1ad3307","sha1":"385b4041ff3a080dd8fb21afdc8c811a6e221017","sha256":"3b534b8d2b8c5173a7b3f18cf65cd93a5c881cc669d6841753da79ae0139ff69","sha512":"1a1ddbf2486994467a995482b656cd63556d23c71199796a84d626ccdfb942a5815d5b7cbaaed990c60a22001df7505b13e1a1d5cafe9c4e80afa3ced8365eac","ssdeep":"","tlshash":"bab02b0bc6320c171d0264143c1f04643dd0c3900afc8ef8949451103046410100f7f5","size":119,"data":"","first_seen":"2026-07-29T19:01:49.692349Z","last_seen":"2026-07-30T14:22:28.406904Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-30T13:17:17.175883Z","times_seen":254761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee3a9f1c857269f7f443dc282026378b","sha1":"43d22255391ddb1870e652e5851989e564605dc6","sha256":"8b4f9f1a04a533ae478644acfa6f0d8c24401e1b273b12dcf11380746345c557","sha512":"ede26c2c77801c032b8811588307e7d422b85177073b4a1db52ddd4806b140920e809c2b7f5cca5a76bdf827a915bbee98a8226cc5a4ce5b6cf508be9d780f32","ssdeep":"768:86S9czzaBNJ56vMiW5x1IYrMB8DtsNsd5XrFNpnbIRZNHc:eJMSr1IYrMB8Dts6n1nbK6","tlshash":"71f2e1eaf39dbfeb811c1f616e5e173e19580e31801339c8a9c1a54118acfd1d67fa98","size":37012,"data":"","first_seen":"2026-07-30T12:04:19.573171Z","last_seen":"2026-07-30T12:04:19.573171Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfd3ddc3ca18f746abaecea514ce4a38","sha1":"045195687435138e4a1adc7bbc98703899ea884e","sha256":"05b087fcc72ed882d3ab78ab7366c35bd22593771e530ba3fe0822cb6ae4f659","sha512":"f9efd2babc4a5cade4e8f3bfcc3ecaf1502d9564617f66cd92700a12ca25ab7ed2805c953f855eca31a1e0e3fe9eee0211e6732559d677b52052a77e402cf6f4","ssdeep":"","tlshash":"9ea00263c529c557003956705d973116e22857608816a20c035a560975ea41bfed859a","size":62,"data":"","first_seen":"2023-12-21T22:47:37Z","last_seen":"2026-07-30T12:04:19.574299Z","times_seen":5936,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6040c13ccf76407c4f5bfb6c3fdcc5f9","sha1":"564344b620a1439efe42aa12af41d254d232d225","sha256":"2a1753252fd6a4461b301ed1a8a4e5cc1068cea67139e05e091315c28310710c","sha512":"dd47174c14e108409a8ed71192a0d0e42213e12403ddc79948297edab12729ab36c0a73d31b8d454ba21f2a2d11ffccc8bf2fd43210cdde84272aea9201a951b","ssdeep":"","tlshash":"a1e0c007727b4a103a7911f1deeb409cca4832f7764189af634842c620b9ffd994a582","size":353,"data":"","first_seen":"2026-07-29T09:50:49.613336Z","last_seen":"2026-07-30T14:22:28.41777Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"655cd624619d7afcd7e40a7623e18bb9","sha1":"36f812f135f9b158f46df578e48da68eb412b2e2","sha256":"f6a29dfc93655ef14c2af8d2b9df7c0e45089961388ff9542b83a61c987a02da","sha512":"ad8dac93ac641c0e9b840aa8a6cd6379c389a1b554297ee592cb402d51efde4da954b65423625a072fcd871348e6e5bda72182427ee4afaa47956f78ac7110d5","ssdeep":"","tlshash":"25e068d9f0c7a2053020a37e701f7b3d22ba43d772dae245a5208a701c34d6a9c3178d","size":394,"data":"","first_seen":"2026-07-29T09:50:49.612518Z","last_seen":"2026-07-30T14:22:28.425208Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bae3f90cb000352645e35fad60da411c","sha1":"00023f94c170125b979cb1914925d06ab1abfbce","sha256":"1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12","sha512":"d83d07979674822b4c966ddcb3bd4feb84830834e1f9fb255774ae237056cc357599e3aab9c6f47242aada2148a65c9ea11c859b1e8f550004535cc363fa02db","ssdeep":"","tlshash":"03800000203008388088000f3032cb8afaa0a22ae2322800c8a88c2cb0e8f80ba28838","size":35,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-30T13:17:17.394379Z","times_seen":183461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec7e53845feb375870343182efd0b929","sha1":"63e71d0c5bcadc37a725d971054eb55e017f6989","sha256":"a2253e1fad60aa1ccf31416ca8cde6ffaa5af2510733c7186adc04a503346c5b","sha512":"339f50fe30462dd6204552b2d3d3fe5cbaeea2cadcfbde096f16b40f1d985a5a68ebb227dbbb9f37c9451a36376ed392b7fb50c6e661963124146bac7e03284a","ssdeep":"","tlshash":"cf50003cc00000c0000f03000300000cc0000c00c0c00300c3cc000c3c0cc00c000000","size":11,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-07-30T13:17:17.430776Z","times_seen":173409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"084089e7ea030e5f930fe80871d35ec1","sha1":"6f5e7947720f53ca021782c9f2291e303d7fa215","sha256":"7a0ac0ca07bfb323ca422a9851ccc45c87038d26dff1b7386f916c293d5e3808","sha512":"640e6f122685724539c6bc988ca63d3b1956b2aff116d40cb516b57f292f875b980f197111dc83f2f43d83b976c423ce9f7d37098fd59b9f6de50a207765df7f","ssdeep":"","tlshash":"7480002c3ca82a8a3c02bca0a0cb2008002200a020ba2c0002c0b8f88e38caf200280c","size":30,"data":"","first_seen":"2026-07-29T21:44:57.945173Z","last_seen":"2026-07-30T14:13:14.241421Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"377fd569971eedeba8fbea28434a390a","sha1":"39a89dd158c8e9747943b00f84be79fc33fbd405","sha256":"2804bad6fe94a55f18b2b37e300919a5fd517b95aa81e95db574c0ba069a3740","sha512":"7bb3aa628832de2acb705346c888eb78ac4e7359294e268f34b8d494552c8b70c5c5077db3f534c17fa25ef7aaaeea701f8890d2d677a990f3dc72c05c0eba8a","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000f0c","size":2,"data":"","first_seen":"2023-07-21T09:29:58Z","last_seen":"2026-07-30T14:13:14.168349Z","times_seen":384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"83bad58831ba5d54e7e73030ce55f8c5","sha1":"ae17cdbeaeab06f0ea359b17c61cf4e8149426c3","sha256":"a86f34ff53717ea40fcdc5de816eae1e24fc0a17d150abbdf29da5a8edd8f9ff","sha512":"38e188909cbcc2d6bc54a09cb484dd6401b80433f7dd96322d92d077b1605f17573ba3c5d03eb9513e96fa44f117361b436a30a71957535ba4ec3d56638dc371","ssdeep":"","tlshash":"4ff00caab4605710516b64e45ee7ca8c8cf1e46cfe6aa40fa37268908dfa4cf4046e00","size":600,"data":"","first_seen":"2026-07-29T09:50:49.586377Z","last_seen":"2026-07-30T14:22:28.461605Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-30T13:17:17.297202Z","times_seen":185543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"45b162534aec4dbda73e79a81a861c9c","sha1":"8e6442ec436e06c47251b997e8775807d2e064a8","sha256":"a5b886a1d63df1cb57794fb41ab60f8cebb464e1a563767e6f141d6415718350","sha512":"74b9ccc6dcc6b318cbe0727aa11b86ea0c12a0a8cda5764a6ef80b00580370cb7fe5e6fb386f77c5d99888cdf6798c9de03c3dcac9afc8e2f4bbd77df4d2ee4d","ssdeep":"","tlshash":"c69022e82c20b82000082000800f2230230300cfc080c0008000e82e2c3000a88ca800","size":56,"data":"","first_seen":"2026-07-30T12:04:19.579206Z","last_seen":"2026-07-30T12:04:19.579206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"756e8d3687810bdd020d9c5fb5638ca5","sha1":"bff81a94fab70d405e64da1cac56bcc3351f855f","sha256":"c4ebd33781f07f027dbb0f44a009e9d77db5e3ae5894f62f62e6fc8c08afdec5","sha512":"da4961893117bb9c6f57a3c619fffc89abc55bb6b176590a2adbce5bf6c68bf98cc99ac1b4f40141e2583f4825ce7f1c079bfa92f4d758d2ca71ea0ed952519e","ssdeep":"","tlshash":"c710000000000000000000000000000000c00000000000c00000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-07-30T14:13:14.278861Z","times_seen":1148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"52757fb27bcb6f77f457592faa787e14","sha1":"8ff305e9a3c3fe464918e1c2c68c2e98bf64690f","sha256":"b1f82b1867526d7eb0d8582953fa48d9c025333fb0610459f6ec8b7b469c7780","sha512":"b3e87a6f8815eeb7ca6ed1692f3db299d8144094d0e5013e9faa379d7d62d41993cb1de2891b0f704ce64bd15ac7db7379e56a4a66c634ec526412ed0c5abf5d","ssdeep":"","tlshash":"d5a0120c2e40358020204c23054754dcf0f91005c2561449009c418007ac0091023827","size":77,"data":"","first_seen":"2026-07-29T21:44:57.955917Z","last_seen":"2026-07-30T14:13:14.248159Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5f3c6a11b03839d46af9fb43c97c188","sha1":"a7ee38bb7be4fc44198cb2685d9601dcf2b9f569","sha256":"86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177","sha512":"dddb9ec4c4ac04a2559d9b711eaa8e35475db3c4d6a7a06dde785dc83f3ed121710cb512733c8095ff346fc8601e7a73ecb53fac752010116e692b1ce73c8e59","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000c00000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-07-30T13:17:17.227388Z","times_seen":86339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7a57275f83679ef74691fc16d26a464d","sha1":"e3e4aaaf2edcd14c636a2804698c31bb10e6c621","sha256":"a52ad70c364d828aacde0cd1688916c57202b0b006af45efe954dcc000387001","sha512":"56b8a83de96172c42ad4f6ac9de59aea85ea23f371a6a5ca260c654d005a675eab4133b10b507970369b9696e970609c528b46cc54a24efe709d17bbb29e6b3e","ssdeep":"","tlshash":"41d09798fdce2832741f69b63fd7906458f23000fe90b810e30f01a008d9c00f184890","size":232,"data":"","first_seen":"2026-07-29T09:50:49.57139Z","last_seen":"2026-07-30T14:22:28.431477Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6297c2c4f818523712510fdb94d7846d","sha1":"decd24078537ef4b719f34263a19a6e31ca86c0a","sha256":"34d7e3da3650d328ac2e6c4dd39866c3383c24ccdc7c984c38f9ce21a034aa46","sha512":"f238a9a6ecc3ee41b7cd185b9982a461e48331c40f630068a361503a1a40c78491d3713c9bc06ed5b4678aef2928491632281cfbbcff35ff3909410ab4b9c375","ssdeep":"","tlshash":"41d05bea6454612dd36716a5f17622a718d0b75831888f558bf594b0566022cf4d2b43","size":264,"data":"","first_seen":"2026-07-29T09:50:49.62991Z","last_seen":"2026-07-30T14:22:28.448167Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4f3bd81ebd47e1152b2b60575379beb0","sha1":"0f11cc9f14878f1fc2f313c58b39447011cd0ece","sha256":"11f8b6880356b5fc205212d69e1ed9685891b72f933904cee01a9f6a3361e0c5","sha512":"3ba586948064b2ad19c12d95dc711ddf909f824b4b9b3c390ec57993720c607c4eab19568e455533232603e60f8390ee9a8bb17daa142bb033120c73f7540835","ssdeep":"","tlshash":"7dd02b64a8c50482e02bff50735681f0f0ba3086e846a920415e6953d7a10101b88c23","size":265,"data":"","first_seen":"2026-07-29T09:50:49.588887Z","last_seen":"2026-07-30T14:22:28.428152Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"23a171e71b863838c00382fe58bbffa9","sha1":"c176af878bac0efc94ca255c8ca7cd7c7316365d","sha256":"e58bcc0a631b500c481e02569821b278b06076f5af85ce7b9a19660be1646af1","sha512":"3f65616d28bffd1ef28039c538ad6e048b5be2c20b22d8c7216f612f8aa3d995e96ab7dc7a6bebe20a725aff36b4ca9a627101e9fbf7c0c1a45b4c7290922dc6","ssdeep":"","tlshash":"bf7000082c0aa802002a30a0000b082a0232200200a82808200820a02c30a0e022380c","size":22,"data":"","first_seen":"2026-07-29T09:50:49.578208Z","last_seen":"2026-07-30T14:22:28.412428Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dac1d9ce24489753b6daa268b5f40377","sha1":"2af4337bc6cedc18b762317110f3650032a11410","sha256":"c378034d9c90e4c926bb6a237c8ded7beaada589205a461ef476cd6b34d07667","sha512":"545e5e30d295fe5ad9a9a43710d2009bbe013321e9c82b8e1411aca066f162280f775b94467066168934f3458f0239299dfc8a4f453ef388b21d3cc546643e35","ssdeep":"","tlshash":"c71000000000000c000000030000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T13:29:46Z","last_seen":"2026-07-30T14:22:28.463997Z","times_seen":2641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"86a778afa1a8cd294ca025ced648bd28","sha1":"0d99e4cfded8ea1f361b0ecc37ed298a323ce11d","sha256":"0b4ce6961390350cdde19b7d0f2889cdae5f4b5d9bc48b0f00c9f984198019f5","sha512":"e3b2082c5fda886204a0b35c725e5b4eda716380fbb26cc5214cd32ab8241de354b148f2122f44db562ac0e1d75244927b4ffe5a032240a50b38b150939d7690","ssdeep":"1536:r9fde13FuvJ2XPdZ0X/3Kt3558jqI4f2qHzWJppBk:aruR4dCXit3zfXkpq","tlshash":"b253f7cff2d2732149e770f2106b010a52bea668dcc8685fb546faf5297084f5867f29","size":64263,"data":"","first_seen":"2026-07-30T12:04:19.584722Z","last_seen":"2026-07-30T12:04:19.584722Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-30T13:17:17.214886Z","times_seen":339538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dc30a3770970cbe67a00f8934f9c4515","sha1":"17df7b58a92a10b0594c4f953fa681bce62c324a","sha256":"36ed439dfca115aad3f0ffd69e525abc38b71193f4c8c99a7ff361003d1b7985","sha512":"b5e4d4b8a90b8b80b98531f03133dd9892cc1cad732a8aaec4a92dab7cb494b25d716a53e601db746752a0f679daa1dcb8ac0343370151972886b1000438d566","ssdeep":"","tlshash":"54d0233cdf643b58d14976d0a04ed0910325b803e2401f10265111a293f2c170715c81","size":212,"data":"","first_seen":"2026-07-29T09:50:49.653893Z","last_seen":"2026-07-30T14:22:28.431971Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b5f3729e5418905ad2b21ce186b1c01d","sha1":"a162caffcb6897220f4d1cf28164d73cb91993a8","sha256":"9c1623f0d38e28e9594f2ef31a7ec909291c4fdb05a777dccd2e936a7f406011","sha512":"9cc32f4f7f3a1d42e319bb8686cc005a27219f5360553eed328f59497035db73e30f6a3ab85f9193bd8ff9c670898a8bc51f410fd5eeae2152e946a3f8326781","ssdeep":"","tlshash":"c7100000030000000000000000000000000000000000000000c0000000000000000000","size":2,"data":"","first_seen":"2023-03-13T22:06:12Z","last_seen":"2026-07-30T14:13:14.205379Z","times_seen":2488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cbd8d53daf8fbe2a4dace772667eabd5","sha1":"7b1907b67fdb08a3f3a3ec680936281d7b5a4cf6","sha256":"c09229c8bb66e231f55692ae8c8c658d0af6047ab59821e10e86228e672dd979","sha512":"fc5a48f81e4e87330b3251551b899131759dcde630eca975203d222c377e53fcb9071b820d8a962f9117998a208971e15d87c11c167f790bb4d4280feebd21e1","ssdeep":"","tlshash":"a8e05c2e2093142870307738940b260d84625a5269dd169274208de5593034bbc325e9","size":422,"data":"","first_seen":"2026-07-29T21:44:57.847796Z","last_seen":"2026-07-30T14:13:14.259724Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"04e093fc006cd90c3b3856a3da6c9886","sha1":"2cc91ae8b5eea1a2f7a1c284c0f412442ed9a035","sha256":"ed6df4a0b6991aeef11bd15037382c76554b57d71495398d6d9e8dc3d27b635b","sha512":"ae331349caac926387f5ead3b79135e0e74492abab5b03ed936f6ff30576f7bc8a79cd9706581fa367956b896c54c32b29116cc26d44a64f204d6ae89ee72e96","ssdeep":"","tlshash":"44a0110c2e803a8020308c230a8ba8ecb0fa2008c2aa280a00ac028003ac20a202382b","size":78,"data":"","first_seen":"2026-07-29T09:50:49.589711Z","last_seen":"2026-07-30T14:22:28.442631Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f1a0fb22bcea22dbd3265f8b6f35ae11","sha1":"bd9f49ae70261237bbf7f62dbee5d2c8f644f2dd","sha256":"2d9ccf6201187c1947f45e3fc4a3e2dcc71c10d1dd0d31f7d6aee1dce9750d94","sha512":"aedc8af5926cfe036f145b78ce20eef17e4d7e31ec357a476d3c580a697773c187612ea7f62b12a3d3c7d0176d744c42db4a62b9c9aaa39da78212eb1667489b","ssdeep":"","tlshash":"fba012803fc0655000405841030e87b92256014050672800c01288540ab988b20e0006","size":82,"data":"","first_seen":"2026-07-29T09:50:49.565174Z","last_seen":"2026-07-30T14:22:28.447657Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bd4496eb0285aba06273987971f6063a","sha1":"8c7d085c9d54b41debd437430b6852de7f898857","sha256":"f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b","sha512":"ac6567c456643fbfb8ccc60e9f3695cd5b6fd80f8699277093e0d9ca898bfe4a0fb6dc848ec48f6255d0a9eb82a6e699cf2f977aa502120cf9b8caa121f6f3fb","ssdeep":"","tlshash":"5580000000c80a2eaa80822333b883a3b8a80aefb032200080a88c28800882800288a8","size":35,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-30T13:17:17.456693Z","times_seen":110483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"86fe1f5b929eb2bb26dc53a8c1ba1257","sha1":"f40c738705d48fea6b53299d71d95149201842bf","sha256":"128324ccd6cd1af724ccd02c923cf853359a6f13b814e69edcfa8c8b8450dea5","sha512":"8a4a3d9a5f28d4e99a0f8fcfdde1d03460a01ef36725e359325d3d560a3e78e3e73b32509b72bef41aac38dc2bfdaaec619042572bc58c826ad3c48572fa2f2e","ssdeep":"","tlshash":"d2e0c007727b4a10367911f1deeb409cca4832f7764189af634842c620b9ffd994a582","size":351,"data":"","first_seen":"2026-07-29T21:44:57.850508Z","last_seen":"2026-07-30T14:13:14.258835Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3d9975706be3087ca199f440b1589b9e","sha1":"47299a86ea209d1f795a215e58c20667cf39985c","sha256":"ca605087f6733bafd8441b1416ce4583f39888ee41920590fdcfb1d0fb43e05c","sha512":"3b0accc2cc690a2de4482f0ecc96f2d2dd665d8558f3d9348156b367249ec3646af3881db796c8834086a71b9e0b5d45aae83771927e044b7ce9f5d263171a6b","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-04-28T09:35:31Z","last_seen":"2026-07-30T14:13:14.247262Z","times_seen":656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"039f0cfe4a46f78e8181482dbdf4c962","sha1":"72462b93be9f2cff480be1009f14fc7c9ac9c69b","sha256":"6b9752fcaeeeff992d8bf34e402f7f658a0443b8eecfadf761a14bf55e3d95ca","sha512":"e2c8607d1fe428af6383cb4de50f17ac019af1d5e7cec060391c5d12d3e192870c41eb9412e382efee64e146a9e516c08324db0e21e79ceda12dff552ea8fd58","ssdeep":"","tlshash":"3dc02b472e080285710d0384502b033f5b7483d12c007f3ed3d05452c0ec5c40d99e1d","size":133,"data":"","first_seen":"2026-07-29T21:44:57.895008Z","last_seen":"2026-07-30T14:13:14.292488Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cf30bd13584dafff0d91c3f605bd272a","sha1":"e3288a8bbfc18c18a4cf58731c2d570ad21249c5","sha256":"4c928833d2f0aaed17a9ea1c1be3cb11b911059fd068ba86ae1e38db72f93b46","sha512":"85369ce4491f8d101bf8ad1ecf35b23c3ad76b930f8ab603e566b26a9efebedb66d20c65fdf1aa5abd28846a78aa894e9d81ecf822d9833a3d263e22a8f678fa","ssdeep":"","tlshash":"76c0804e6046140352afe62b381b81152525cfd9c5c3dd5cd51b402d07547ac2398d25","size":164,"data":"","first_seen":"2026-07-29T09:50:49.62414Z","last_seen":"2026-07-30T14:22:28.420096Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dc81488aa3bdb0e498811fdbd3de079f","sha1":"b332dda634938ed01153bb4d985e950bbd812b9b","sha256":"ae86b891b4bc4a9336c0f300f3a9549a75c7d2433cf06b08982b0138b91285f3","sha512":"efed420ef1dd492a00e628f3c644c536c94ef23ff1fb65c4ae0cf4673e9907128a59598b6e2018d2119f9dd37e7de1229925b7220cfc01b7f90e56293fea9c06","ssdeep":"","tlshash":"89d02b6c683c809351591ce74ecae53d10d860437591001193335c55179313dd480921","size":261,"data":"","first_seen":"2026-07-29T09:50:49.550039Z","last_seen":"2026-07-30T14:22:28.44717Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d43ef05e57cdeab7895fe8a3b6ee014","sha1":"19671e4e00cc9b5f8f6a6167c1ea8800ee539aeb","sha256":"b7893a0611b91f5fe47ce3889faf375eddbda47517f4e44c8c338eef6d2c41e5","sha512":"535346ebfe272e052e64dfa1845da29662c36e84fa5a946e52dcbb2cf4d894851a102180fb1c04603f86ec920d89fdfb62c1ddc14ea81ba4cec7d4723ad5598e","ssdeep":"","tlshash":"8db092a4a20c0b5812813919ad2b06e950e42704f82994884ac0ae2548e0a41568ead8","size":116,"data":"","first_seen":"2024-07-19T01:23:55Z","last_seen":"2026-07-30T13:17:17.457921Z","times_seen":189956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0b62ef5d75cf8af681c9399efbfdc19d","sha1":"a87fe3dda2381804a7df9b1d28fc9f46d85dab02","sha256":"d1b9e82810531b97d00e024328ddb300161cb0af44502f185c2ee5a7e9b5f3b8","sha512":"23ea1396a56a5116bb86fabd22cf0e798b07a26fd57904777d23a644dd32d7430c9a7a56aec382cc2a92ca5ba23bb8e4cda817be9413c85ba4803aa8601071c3","ssdeep":"","tlshash":"c71000300000000000000000000000000000000000000000c000030000000000000000","size":2,"data":"","first_seen":"2023-03-26T01:44:17Z","last_seen":"2026-07-30T14:22:28.441626Z","times_seen":1823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f10ca638abb99fbe3f4a8190b4e223da","sha1":"74d289295448caacfae2d55b64a3d74a8d928b32","sha256":"e3130c160e9f781c6c596a2a47ca7ba939b5988c46f493041902f72ae9c1c1c0","sha512":"e7818302bb20203a5c1a16780241c1a23cc38f2cdd2ae2a41eda8bbc8d8a6bfbf2584d82330bd9f7015dff1cbcb3545a8e48b9131bdd8178ac36d4d1eff363a8","ssdeep":"","tlshash":"58c08c1e04182000dec2fb25cdf7594fc2abb6a80aea220d5040bdac2d938bc0d28f84","size":157,"data":"","first_seen":"2026-07-29T21:44:57.934486Z","last_seen":"2026-07-30T14:13:14.210476Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-30T13:17:17.468921Z","times_seen":208383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-07-30T13:17:17.472593Z","times_seen":172295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3a3ea00cfc35332cedf6e5e9a32e94da","sha1":"e0184adedf913b076626646d3f52c3b49c39ad6d","sha256":"a9f51566bd6705f7ea6ad54bb9deb449f795582d6529a0e22207b8981233ec58","sha512":"99c426cc0bf3c465f9c4a49e5a6c3d09a43c4f95631776b354be0727f3f65567ae9357c5d55015e2cfbb27ead98e1bb54f2a0f26042ad267a279f0e3a8c5b2e9","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000003000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-30T13:17:17.202572Z","times_seen":49589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f341c2cd8bebc8a5b414a5121df2997f","sha1":"98130b9ab69218bfe5b1004f8e96aad09f504a9c","sha256":"1afadd3fd25008a72e359e0b35a0578c1ecfb54403aa562faf6bd5ddc03b25dd","sha512":"460560d32e8a71be48b46f9c63b02f0ed5e3b4b300cfb8208f7fba8e50380551a40460ed2dc71bff9ae798f1f9cf644103108eec4db9635e09bf40b38e82dc5f","ssdeep":"","tlshash":"c7100000000000000000000000000000c0000c00000000000000000c00000000000000","size":2,"data":"","first_seen":"2023-03-09T10:00:06Z","last_seen":"2026-07-30T14:13:14.206272Z","times_seen":1180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eb5ae62933f949ff1c60119fe8530b4b","sha1":"e13f0c9b993da6803487a31773a6d22187074304","sha256":"70f7459c4b6bee95a7393cd19d8510e3d0b6c4cf0f23faeebb72da7a502dbfd4","sha512":"557a322ccf3e665507b715aa39a941db88f3b97a35918d2036ba8eac012184549a1581e051fbe08dab946662f306d52fccbc7d33eae1caeb2cbac90f80fb3985","ssdeep":"","tlshash":"c7100000000000000000000000000000000c0000000000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-14T16:29:30Z","last_seen":"2026-07-30T14:13:14.265194Z","times_seen":975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0cbf4be95e7b4fbd83ced5193b221565","sha1":"283a95840d825767a36954fcfba8c7b788b98cdb","sha256":"cbaf907c7f7871614846f303fa9f2a82db5f1cd7bd4b38343c913ef0edb7fcae","sha512":"1de8e26ed6c4d4e08edf5748b27a55a4a996d600261259a28be20e0c2772ec301efc6e2c4746b3d35c12010f58d592dd6c699660d4bc8fec5035963bf5f9464f","ssdeep":"","tlshash":"7fc0c0f07fcc0c34b03142c31d93cf3800d4700211301d00271aa129039c06bd3b4d08","size":179,"data":"","first_seen":"2026-07-29T09:50:49.64604Z","last_seen":"2026-07-30T14:22:28.45639Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"81a43d53a89c7eb9c3b356a5b8ed0dc4","sha1":"047e3aa061d51c41648ebb9f63f59c4af6e7e98a","sha256":"29d9c926bb047c04a962adbca0d62976da22fa3c00c9c2eaf11b272e1a88b619","sha512":"a64297cf35fe9073a4decdaa6582f0a29a13dabb6ecabaa15cbcde28b77f8459d0b3ccdb01b84ef6b0546fb76c3a177268390c28d8c7c2d2e71668f069c13a44","ssdeep":"","tlshash":"03c0801d04182000ddc2fb25cdf7594fd19b75a409e5210d50407d6c1d5347c0d28f44","size":159,"data":"","first_seen":"2026-07-29T09:50:49.60634Z","last_seen":"2026-07-30T14:22:28.452106Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"44c43994cb4791802f4f1323c886e2ca","sha1":"eb2f4c7ce664425346a343f6885627f7cad12ab1","sha256":"62d652b7fafc241ad4eff9d84d19987ff7c6299866def1a2b7436d043cff1990","sha512":"79a59857ad001733bd143727f5f0993b17d48a3df2cd24ed02ce378ae12da3bb4964c09d65a3d58595b091fe4cc53a338b9d1b103b9138e3f3060bdcc6310624","ssdeep":"","tlshash":"d9a012851d48988e10cfac02218e80b160240011d20a16044900c885012407f21c19d5","size":75,"data":"","first_seen":"2026-07-29T09:50:49.58748Z","last_seen":"2026-07-30T14:22:28.421117Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","size":4,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-30T13:27:48.311755Z","times_seen":279722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-07-30T13:17:17.435945Z","times_seen":202499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c62bc4fd3c4e105cb3fb62fb748d59c","sha1":"f6e2d1e74e35ec4c4740ba02e890b98bda11417f","sha256":"9f4a6a370cd350425d8ac08047e7646116468672e99765ca198e6d463ee5286d","sha512":"5cb125ce0b7fdde81c6df58f6e27943a130f0d9e2a366d94ea8ed926da635dfe2b2c5778a14ed99bb35c7b2a48dcd12090cbac18370611d1c0438e1c2621efb4","ssdeep":"","tlshash":"6cd0129b738060e3d797fea709580020c1ef0b8402d2753d42d5d51070fe9ce83461e3","size":203,"data":"","first_seen":"2023-06-16T07:31:00Z","last_seen":"2026-07-30T13:17:17.229647Z","times_seen":191296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/js/plugins.js","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"017f4ae63a76e6215e9f5f5c97339df9","sha1":"4165f72b7570941d7b1c1882c95e67d900e24fe2","sha256":"ed8f882976d69a3cded7f6410882ef887ec41173c22516816e4b259b73b5c979","sha512":"9e0d9e58749ff4879cbaad35484d2989de18868893bc1d8d22262adc0cd57d5e5c81ed688cfc463b5e91724dc29b3da37a9f232293ac034a7f219818a20dd480","ssdeep":"1536:yg73zhq0GvgJ3ZKDLPdNoLtHmjF5hY95OC5uSHNx1NxI:bY0GFI+F5Q5OMNzNy","tlshash":"7f8308457260316242efb2b1512f060fb235692ee907847d78a8c9f42eb5d88727bf7d","size":85969,"data":"","first_seen":"2026-05-07T06:09:39.83731Z","last_seen":"2026-07-30T12:04:47.572651Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"774f344a615692604de040918a72b149","sha1":"97a26178972a16384b537a7180900cf940ee5c82","sha256":"6e533337bd970a97d7ac74f6f8f891e70a702b45ac5d03469006d2835844e4d6","sha512":"2e123fcb8a0394f382dfad0d75924f2aa65c185515030eec375c418fa0da5c0038092c25a3a422e3e84b6fafb758547314376193c609c8e32d0409beab8fc1cf","ssdeep":"","tlshash":"c710000300000000000000000000000000000000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T17:23:45Z","last_seen":"2026-07-30T13:17:17.413671Z","times_seen":1955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b774effe4a349c6dd82ad4f4f21d34c","sha1":"51e69892ab49df85c6230ccc57f8e1d1606caccc","sha256":"0bfe935e70c321c7ca3afc75ce0d0ca2f98b5422e008bb31c00c6d7f1f1c0ad6","sha512":"58007911bf9f66711ef65e807b26c396a2d6fb464f4381520c5d4a575dbb81510f79d35e349604128a771acf2a117a2afdedc012d83b0eb822668aee0def4747","ssdeep":"","tlshash":"c7000000000c00c0c000003c0000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-30T13:17:17.223561Z","times_seen":47374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"79ff3bb5540254b87b088afb74c772a1","sha1":"f569c03276f60311f8a8fcab755fc6ea420da689","sha256":"6171614c470b797aa286ccc4014a39dbe1baa04311f8e1729ea0b030b157f459","sha512":"e2c19cb061ceba631a2dbcd19ab0cf5c04d0ce1cd2b0fd27965a01d6353c882c01c378a3f084f3999604474ff5d0013ce38c4477bdc920e80ea7fb74469b58e1","ssdeep":"","tlshash":"c71000000000000c000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T21:58:54Z","last_seen":"2026-07-30T14:22:28.463504Z","times_seen":1944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6f1b02ab3451e8c34f6cdcb9fec2f4e6","sha1":"7ea5286fb62dc01b339d83be45346edca9def49e","sha256":"e65bd19e18813f1855f631c427f02db27f726e729de053002a957347fa7bb3dc","sha512":"ccc62a7cf25b9493c8f471104cfb7d3581d97b0f6c59e48cbde73270d14eadac5ca5fb0aaa8d8e57b5a1be59c3f83dcbd9403fb031435adb1636f2829cb757f5","ssdeep":"","tlshash":"a1d02b7b9c3d31326512504c38e2b85036349c11b9157e0153640324c168d43abcd819","size":250,"data":"","first_seen":"2026-07-29T09:50:49.597409Z","last_seen":"2026-07-30T14:22:28.468729Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a54e5665fb9853501aab18ad15c3da50","sha1":"8bdae164baddfc1752c2aab39c1f5d0c96b83dee","sha256":"d9427c4ebd37d91709b7fcbb67420dbeff19343006a71a6eaac8151b366f750d","sha512":"bddebc190d827869e58e936f4a60d90b0c9a4dcaabc51a3949f7c18a84d9ce284c921c55ac7316a19034aca53c016ef964c1290b35a188d22a13458109da92ea","ssdeep":"","tlshash":"4ee05c2e2093142870307738940b260d84625a5269dd169274208de5593034bbc325f9","size":424,"data":"","first_seen":"2026-07-29T09:50:49.623291Z","last_seen":"2026-07-30T14:22:28.414604Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"aedeca7248a36a31e21d53f8e2b1500f","sha1":"8edeebd80a656ae4fce670684d3ca3ce34ec356e","sha256":"14c03c053c77d9989142754052ce17fb2fb62087d06414ac27eee03e36ca5667","sha512":"b59878f8879cfac6de3a33a9059f6a6049b1120a57cc7b6458745a57feb605377fbd22bca21ee45bf1215ad29d9584476a9d49ee91f1f813f1e9c24c29bcf68e","ssdeep":"","tlshash":"c710000000000003000000000000000000000000000000c00000030000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-07-30T14:13:14.276704Z","times_seen":1731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0b1cdc9fe1f929e469c5a54ffe0b2ed5","sha1":"2d6c8a6d5e3ae20b7052d2b615b35f520c50f090","sha256":"ec18eac8d758b1eba52d3c10d39adc6dd9806472cb4ae069635d383d9086a513","sha512":"d32a87a97a9bf4a54632577b253107c9405ea6ed0b0152427c91279795bf8c17257509fe60603b6289707a785c3e10d52c3e3522c759c6f4962e3249b6a1c33e","ssdeep":"","tlshash":"c71000c00c0000000000000000c0000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-11T13:04:28Z","last_seen":"2026-07-30T14:13:14.208014Z","times_seen":2032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"358fcad0ec5a8c8e58f205d96e64263a","sha1":"f93a77fed9cef5dd330326724a64ddafeaf606b8","sha256":"47772680114e1167ecfb88a2c4800c3c137cd3696da436bd2bc24bc7b63c2d55","sha512":"bcdd9081b9c308d6ead5267e2e11b9cca6763ae6d64a2f6424418d2bcf022dd52cfded873fa01bbccfbabfff73f21b7dd4c15653b238440eebebd4f3a9c0f1bf","ssdeep":"","tlshash":"2ff002d95203c6cc42e372b378eb3fa8259e6d77aeb0f800629e880b113038d65d9749","size":640,"data":"","first_seen":"2026-07-29T09:50:49.551472Z","last_seen":"2026-07-30T14:22:28.459193Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cbb32ed8e24102d5cd077384672f95f2","sha1":"c727df9e4f8b02cac68b289224f1f3e66363913b","sha256":"fa115a435531b5764b80f50bc4607ac7dbfc4e9a40e555b1dc23422e49d7d068","sha512":"e915a7cc53ede48a1cf53822c440698a7eb42ffeeab23050bb7b65cde6a0cb730e4ef47acab2a8025458a9fca8a2847a63ef152878387019cd55f4eb5ffc442d","ssdeep":"","tlshash":"a1f09ecb4ac14ee9a86658c2799345fb92f7d1008dce352f5819b928437088775c9432","size":475,"data":"","first_seen":"2026-07-29T09:50:49.549241Z","last_seen":"2026-07-30T14:22:28.419544Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9ea922a9ac2ed6a0742a23a0fd87231b","sha1":"aad9c8133820b90c9169ab7bed011dbefb4e75b0","sha256":"da22578454f0decdde76e7c8d385c6ed0f8d1d97f91cb60a9c9e2b08077fb6af","sha512":"ee861cfe1ecb70ed912a0de1750578ecc3f76b840b8993da55c995d9da4c2c460c5749ab4d19fb4964f9790cf3e480ccc4afd827b49e5a2d135cc6fdd68cdb40","ssdeep":"","tlshash":"a0f0c0a931c390d406cd21309ca3ac073ee8e2f10d58d325924361f351c05ec2ddde51","size":536,"data":"","first_seen":"2026-07-29T09:50:49.60082Z","last_seen":"2026-07-30T14:22:28.42671Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ce7f22a04820583058dc24070e25fbce","sha1":"7268642d4061b8ba6f836f41c50d005dc53bd0fd","sha256":"6a96d5b3539fb5f511b0cc2e04a468a11831d6a4b36ccc5cf9b5392b952179cf","sha512":"778456d6919987f42b534fabcc57e2afef2e7432f59c2f37748c4ec2794e7642fdf9b8eee43118b8548b031a65119e4a71be416d4c245fdc0b6c11938f6f54cb","ssdeep":"","tlshash":"9af0261b302a2808be709466d81728a17a5e1131ee918ed547b7d732b36084f1435df7","size":549,"data":"","first_seen":"2026-07-29T09:50:49.651314Z","last_seen":"2026-07-30T14:22:28.431002Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"681f5ffb8d4264f2d8dbe5323f5680dc","sha1":"0df09437cd0d9ae8339ab4c3b446a9524ccb02b5","sha256":"56f0a9fa22dee4de17dd82d671c6a1a03b2baec95ac203759bd992f5b046f7b5","sha512":"34a092b3b4dc2f54972444cf8a14ec1e36d09bb84615d737e3c1f35db5f9800bc0b3857eb1b70397c84dcde808f369592c6bf29b780a9ccf1062e2308b8add6d","ssdeep":"","tlshash":"c4c080c4dd015ca960f3cd9174895144b2f13554e75d1715c11cd1d497f008f1157dc0","size":163,"data":"","first_seen":"2026-07-29T09:50:49.599163Z","last_seen":"2026-07-30T14:22:28.424676Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.60gHVOycP-w.2021.O/am=AAAAgA/d=1/excm=base,root/br=1/rs=AGKMywGVxiDxhd1zzjSDYgn5Ajtm8-QDYQ/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1a9f5aa3750f41f47861f6b2ca750b9","sha1":"d59b2191a01b2f7f2ec1b76606373c66d7e9b0dc","sha256":"16821d380a8b2be85969068647210578ac69a04aad7cf6286c8048c5828ccca1","sha512":"bd43ffba9048bfc0e31ec295ffba1a92045a7093d7228c0a7530b9214351d4569fd612967de3a347a2fe4f93bc4072632a78b651fbd92735094cc5c01021cd74","ssdeep":"6144:Scu7wI2O42b4ERqI8MV99d5fWLW7FVquw6Sm4nfAkoX2gW6Gm:reb4ERq+AJ6Sm4fAkoX2gW6Gm","tlshash":"77945dd977a2707392a2f5a5902f0103b17a6896f44c8c7cb7c8ddd16eb494942bbf38","size":440829,"data":"","first_seen":"2026-07-29T18:04:12.060993Z","last_seen":"2026-07-30T14:22:28.338906Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"05c89bdbbeeae48a6daccce0d05257fd","sha1":"add5873c29d017e263f7042a5e7ebafbadfd6604","sha256":"f9f679023473ebe05455fe7ea27efb3eee0e1340a97afa14926437a7fc7cc103","sha512":"ad38d2fb57c5839fbdbaf8b78f8f6fbb8292094d8c6ba57c6bfc427fea407e978a7aeaefec09c9aefab07ae9d6bb7db428f2a71f16d5525584bc18e4e4650d12","ssdeep":"","tlshash":"c71000003300000000000000c000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-04-01T10:24:24Z","last_seen":"2026-07-30T14:13:14.165489Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"92eb5ffee6ae2fec3ad71c777531578f","sha1":"e9d71f5ee7c92d6dc9e92ffdad17b8bd49418f98","sha256":"3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d","sha512":"5267768822ee624d48fce15ec5ca79cbd602cb7f4c2157a516556991f22ef8c7b5ef7b18d1ff41c59370efb0858651d44a936c11b7b144c48fe04df3c6a3e8da","ssdeep":"","tlshash":"c700000000000003c00000300000000000000000000000000003000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-07-30T13:17:17.444973Z","times_seen":80811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ae41a6d38b78679b4675941ff0c0c92d","sha1":"622622d945d980980dbd8829dbe7e779306d7173","sha256":"a61555e7cf631236a3a2befa0d7048a735a5e732f4ed997cfe9eeb477ac2b823","sha512":"ff9580860f50dd236f95bbc065e84b119ddcbb8416dd9699ee0f0d6dc88c989a73c6a348671d1e6e64b019e1fe2df238ff932fe660843c0e2c2e15888b9775ea","ssdeep":"","tlshash":"c710000000000000000000000000000300000000000000000000000000000000000030","size":2,"data":"","first_seen":"2023-04-25T20:42:43Z","last_seen":"2026-07-30T14:13:14.201424Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ebf2aca62e62a5e14a2533837516adeb","sha1":"2ad08007235ed1e124f7747fe5cfab1e7e4b8529","sha256":"4b96637d93456468889f70c2a7edb189a5e24aa66d65a845e8e8ccecbcc8f560","sha512":"03e34d40e3c2a5150a644120ae35e6fd88fd17d7968ac2628c18b3f41ebf5bd45bfeb0d49f1c990ffabe80e276c68dad806ddea005924b46e93af1160b1ad889","ssdeep":"","tlshash":"e411758ab3e7672269d7b1f6424f102a911cd26ab8dd2d45f281d7648829b4bf417a08","size":1031,"data":"","first_seen":"2026-07-29T21:44:57.951186Z","last_seen":"2026-07-30T14:13:14.185607Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ee688d5c506deef9ed539e968a44c82f","sha1":"3f477e0ccf7ba2dc80e8ef56a8af3a7cd18c56d0","sha256":"604c22a921ff9cd1f2c10f487b1e94ce43ed92848f08f66a31c913f248e5e4d5","sha512":"a48aed724c1e127fa310a0a50be6f982cef55e5fad7af39b28759fc5a96194e7489fdc95934eb864829aa01bcb653196934aa770e86e9648f34bbeb6c2af83d4","ssdeep":"","tlshash":"51c022c1e0948c1cc286ce71022b12425a2bba28b80c49e2c801e566b0a231a0cbaf8a","size":187,"data":"","first_seen":"2026-07-29T09:50:49.545075Z","last_seen":"2026-07-30T14:22:28.458238Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d3ac9c9909b760ff08d7a050f47102f8","sha1":"ad49b41179ffc4d38edd5581b7001ce4d4e4260b","sha256":"b0f47512ca8898b2b07bca6b15595a11b62f2cddb3adef1d9a059e46feda2b1f","sha512":"6c818a2321e8c504e15b7e53ebbdf9084807a168c2832d6a5525c3cf7b2a3998a7d04b3e457a0aab59d21aa47fcb6a2edbbe0bbac7ceaccd096a7a39e9929a92","ssdeep":"","tlshash":"94d0c296715716c2428bf6d8e4ae13c492146230e2a0cc4da3c94d99250b4c18c7364f","size":287,"data":"","first_seen":"2026-07-29T09:50:49.599968Z","last_seen":"2026-07-30T14:22:28.444534Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-30T13:17:17.377934Z","times_seen":235784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"52c9a18bfa33161d498e5b3525cc26c7","sha1":"cdb66ad0c480a73cfb592df06b52fa2790d0748d","sha256":"b888b2c31d66b987a9ad15ca25faf0a958f86dd1e7bd1dfe436a22ba2455e030","sha512":"f3fce009f78dd4372a8d19d6f48f19054b9e1f33b6a5327c8744c8bd049bf731abae3995ff5ac04d3982e1ece433e3254923ab6b2cbd62880140d3b756bbca11","ssdeep":"","tlshash":"8eb092c8e29660634b4580ab4073a615f2f028d12689a43ee1e1a81ab49164e88fe15d","size":117,"data":"","first_seen":"2026-07-29T09:50:49.521947Z","last_seen":"2026-07-30T14:22:28.444062Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-07-30T13:17:17.185515Z","times_seen":175531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.60gHVOycP-w.2021.O/ck=ytembeds.base.HDMuiECnvBo.L.F4.O/am=AAAAgA/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywHI22L34fZMQz-12yQOji3t6ispuw/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cab40245b5f05cf3f9d6e7027e67308d","sha1":"99f732411e4e6f14a61d797ba10df21133cb5557","sha256":"bc78692839777357cb6174ade43e9fb3df105d990a6f66d5ada6d2dcfdb45ee6","sha512":"18bfe180005155a8294b8eb2e0b39c17a2466047d6ee755eafedf0150ea64059c97adeec7a507b06f3f1287504f5d7a248a9f6a9b3cf155223860058a01e9ca5","ssdeep":"12288:Rorh0EencTyXGld16WDVcIm4zDSG8UvCeoBJjlXc7WPz6/wWXqkZTNvl6hkTeubV:RdL6qtKoCZx1XH0AV3HoLYt/","tlshash":"cb159ff4b25271b4d107b926f9b78043b57f4503e10418b8f0a7be9c56fcaa82e76729","size":944905,"data":"","first_seen":"2026-07-29T18:06:15.05542Z","last_seen":"2026-07-30T14:22:28.265343Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f91a654cea7d78e2e4845b257651703d","sha1":"e19a8755560dd0b8d58f514588380358c63333ec","sha256":"84d2df956ab1d97822b46ae81990433a4f9b246ed90cf9557ceb88ecbc53e2e4","sha512":"f798a13ac1c8f5789520797c5e44f9fba23cf2ff2c6755eb9465b0dcc8bfd762e0629be6c5637dd9d96faf1a33364915e096cd2e83b305ae9cb9f967d23b4f00","ssdeep":"","tlshash":"70a002c92d8e6c8201a7d8b3419644681ab51888a59e3a30c496f6c91b704df1482896","size":59,"data":"","first_seen":"2026-07-29T09:50:49.543279Z","last_seen":"2026-07-30T14:22:28.463034Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-07-30T13:17:17.469545Z","times_seen":167758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5c244fde4e6f1ade71beed5c11edb59","sha1":"6bc634a7f8505a2ce340807aecfa1e50c2a578b3","sha256":"d561924e4295103128924509bbe71b3eed6625592d75ba3cc35c365189d6081d","sha512":"6ed66e7a246ab961cedd150553b6a9aa692988813dd4ee30c8b7d78d80bb8765a828112c6860d08eb382cae34e22bdd76ecda5ee1c9c7ee25a49b1d2639474f9","ssdeep":"","tlshash":"966000300c000330c0000c00000c0000003300000000003003000c0000300c0000000f","size":13,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-07-30T13:17:17.3738Z","times_seen":174559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66a4d9708fdb6dd5597f3bbc7d624","sha1":"e10a66fa8a836f6f948941262b70e1fc928a446e","sha256":"3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89","sha512":"06c25bc4dba52367cbe19252c1a013e1714a198141d139939944422266aaaed60ea3953c5d0f890a7f9ce7887c5f2a4cbb47173d06f829d50ac33f6f353c015d","ssdeep":"","tlshash":"ebd023cb729c1114574337141eef0448bc64b4d70dbc941d8649581058011ede03aecf","size":195,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-07-30T13:17:17.409026Z","times_seen":208060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","size":1,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-07-30T13:17:17.277711Z","times_seen":135000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"de5e1eca6f02536e38ff9024ac300135","sha1":"cb52c868e23dc0c754a2ebe6ba6ec7fbef5b851a","sha256":"791ef47dd8f629d8a909d509020e0ed9ba59c3980e745eaa6ed3c4209790abc0","sha512":"13c70ff2c27eb54d925e13ad4a704c829250da862d84814623e1201f832613ceca81ac8eae2883a53f693397c2c82cd36ed33dd97a83d612b2c3e666a72eba11","ssdeep":"","tlshash":"7a9002483452e0105111d85421f65609a619448511562216d0403481ad34126552251c","size":49,"data":"","first_seen":"2026-07-29T21:44:57.916268Z","last_seen":"2026-07-30T14:13:14.266078Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2b7630fcefe17b289e7342a7a1bab97f","sha1":"732b5514e903314907a2d2389eb053118d8a6fee","sha256":"8c20286d1c009ddf981307d6e98e422628cbbf585286a916ca233f3247c849bb","sha512":"b0c3b054acc8bc3d978208b1b51eaf403dd5f1ae180482bda358d2cd341db0153b2bddfa2602ccbd67f0fd7c59d8c6c5135547242f91f46a2d56aff890b6fc84","ssdeep":"","tlshash":"11a012581d10a804040561820749402460b000c0e3502404c046ec870a1802f3081dca","size":71,"data":"","first_seen":"2026-07-29T21:44:57.842306Z","last_seen":"2026-07-30T14:13:14.264291Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"def90bc82b713a8bf796dd8a0c83ce69","sha1":"734ae9201b6a14bb26725dcc71b9d50b18c49c5b","sha256":"e426cebae406cb1c009f5be581ba88471214aa75dab829c5a9a2f1fae402619e","sha512":"e5f7221188eb2f5142704c9b4a502bec1838c9460d3005ce8d5896a052dca634ecec75baa147cab708dd031c6b0a7268c63ca3a71005bdd3523d7bde39857bf1","ssdeep":"","tlshash":"9d70000a3c08a002802230a0000b002a0232200200a82808220820a02c30a0e2023c0c","size":22,"data":"","first_seen":"2026-07-29T09:50:49.560915Z","last_seen":"2026-07-30T14:22:28.443591Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9347b98a998a0d693d2797a53ba2e7c5","sha1":"5a64554318fc78022baa54f5115c38ca1d471933","sha256":"5b63e29f384fb8df6befd29f9ce25d6b4f3c1169d3ab2fad7600d150f8db2f34","sha512":"239c72db1539f66f6ef7a92501b53da65feccb685df806fedc4f52e4525dcb0ed89f90e841fc715065bce8084d33bb54769382b206208ad916519a26bd724ebd","ssdeep":"","tlshash":"9dc0806c3fc99455b8443471745e47547755a455d1412d04817d044115f1d1dd12383d","size":165,"data":"","first_seen":"2026-07-29T09:50:49.592849Z","last_seen":"2026-07-30T14:22:28.418972Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c17a61ba70988db42b7135b6c4b0fd7c","sha1":"3375aeee50145f1820073c101d02a03e30db23f5","sha256":"e73abd37046ef67b261099746a75931041298d323f54aeda14d1a1279a4f874c","sha512":"e0a4902d4a2881d595abcef3c73504b0d52d7d409cd14baceed981cf424b8cc1428f15a4e5fef42e1b3412c804baf3b5b94f8245a36d4495664b80db3692cafa","ssdeep":"","tlshash":"8f70000abc082002802230a0020b00280032800200a82000000820800c3008e002bc0c","size":22,"data":"","first_seen":"2026-07-29T09:50:49.637638Z","last_seen":"2026-07-30T14:22:28.427149Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d0965c07d1a00fcc85d28b8a241ae35a","sha1":"d564899b9045c65f332826707d0c8358d0f4bb6a","sha256":"7e545c6cfe2a2fa8878c58c3d7572c74bf3ce7c3094e448129ec55e483bb26c1","sha512":"c715d771fe06d71985dac603c59452bc7bdb50801d14ba704e48c3a60949b89d63ea6c29d8fb24d5d539cca4817ed37b663d3ec78e4692d91e8a148a7586739d","ssdeep":"","tlshash":"c710000000000000000000000000000000000c00000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-09T01:10:10Z","last_seen":"2026-07-30T14:13:14.19441Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"52e8143520587cb554379540153831ca","sha1":"0d6337e4dd8efff03e3d26d409537cd3233d1271","sha256":"1f6b1bd4d363894630b1888674c684512f849e124342dbe281f833aa02b57438","sha512":"5917ea4f643f8203c95dfb26b14454cbdf3ec654fb8bea426535d50f3fb798b1f75c28c48a0bb578ef21466df81228a27b2b2033ad1c6024c5b85af43adc112f","ssdeep":"","tlshash":"9701fe6f2cf614308117b0799aaf9108302350039809ad097ccdc5849f94bad0b367ec","size":848,"data":"","first_seen":"2026-07-30T03:04:38.80582Z","last_seen":"2026-07-30T12:04:47.643077Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcdfd9ed1c68ad81887b531037ddf031","sha1":"ceb7b9561cfd2f25ce4efaf09f8729300f5e2eb8","sha256":"cecb61d5cd075c8d87ce832cd9bb994b453634e94b1fc4b23222332c75463226","sha512":"346477171c4606387d9d97ea3f687e125c3253b0fd27cf20d9b14f2a1a9fdf77a520b3da0d28d8990690230e19f5b20872f90e235474f56e91c0cd896c9a398e","ssdeep":"","tlshash":"acd02b1f594a1824924711fca9bbc244b17131d46a25d013c0cef4696d32ff54c5999c","size":285,"data":"","first_seen":"2026-07-30T03:04:38.806803Z","last_seen":"2026-07-30T12:04:47.643771Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"488426e019b4a6cfa76204379ef1376a","sha1":"1fc80cd1e45769af1562b8375ecd84fe565677cf","sha256":"dddae2eb649a827c8f86cde49e8e6ba0f71719ac7105af6c3eff58267b43f638","sha512":"eff9fc405dfb7beb420ee62beb7aee33b5ad180ac0d6c9dfb18df4b36e91e318fbc8c32a79aa1f1d563c734fe8aa9ed7cf05e59140fcee3726e70cb7648188d5","ssdeep":"","tlshash":"b8a0125dbc089445a805bc501185018c74a04d97225a3410c018c04417f002c1431887","size":77,"data":"","first_seen":"2026-07-29T21:44:57.846333Z","last_seen":"2026-07-30T14:13:14.229102Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"df68555dcdfc925693fa74e69a1e7a4b","sha1":"34987a8e32ecdb1d833a065436f63062636c9202","sha256":"8b4ab2b5c4aad549b52e9a2707c0fd60ff161e529e30951cae9005d3e37fcfe7","sha512":"1a5640e48a90a1fa023dc36002c0da00ac2de3a23b3a2308fd34e170b211fdaef308fb64215631a65a12615a70ecdc52ca33485135a01026e09a95a6f498a8ef","ssdeep":"","tlshash":"c59002483452e0105111d85422f6560da659448511562216d0803485ad34126952251c","size":51,"data":"","first_seen":"2026-07-29T09:50:49.59163Z","last_seen":"2026-07-30T14:22:28.437996Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"192b9b263060d40f11db5c05b113c662","sha1":"c81b46c51946b1fd9889b5a165d6f26f7bed5dd8","sha256":"893edd720a4f13f34cfaf579b62389141381e9305aabd995d95b30e3ee5d5161","sha512":"f3d32c821cd2fe3953a4ab8ccb3e0972ca5a7635975123e0475df6f2eb1e0b8e382371457f07aeae8d87642c6cd814f5bec0bead499a3e7355d1514a301deb4a","ssdeep":"","tlshash":"15f0e12731728026047674da78f39a5cc9f75b887945564e13725ca5c8784fe815be44","size":566,"data":"","first_seen":"2026-07-29T09:50:49.655212Z","last_seen":"2026-07-30T14:22:28.420625Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-30T13:17:17.302557Z","times_seen":246479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3492f2f71107da9fd7e09b34759d29d0","sha1":"10865be5236ad0ae232af59977df60f842d835b4","sha256":"4555b84b80c7f377a90ab602a2491f881c1764121f5465a41da5595f0519e1d8","sha512":"2226778d282ab3738533de137de35dfb2879b88d67cad7963a948925f71d9d28f44c024ba85bd6a9585f737ab1daa6f1cf3323d5b707c8f85b5112bcc67f3f79","ssdeep":"","tlshash":"c9c080b61509e5552546f1b2700f6c871618b656f76e694da161f43b3750458c530f0b","size":178,"data":"","first_seen":"2026-07-29T09:50:49.54589Z","last_seen":"2026-07-30T14:22:28.413001Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b90e9681954018ea11f9b310beed67b8","sha1":"9792c601778b531aad8085e854fbad6556d25553","sha256":"dfe48ebf81a4723bf7c1b3b613faca0260fcdfe9adb8c421731e1981b4fa7f0d","sha512":"010b5f0e4becb9d9bcc03f394c152cc8327f5b1ffbaa1551191341162d82a38e5d301609c79d048ecccc12ebfd4c6ee8b3318b82f383827491ff2880c455c8c7","ssdeep":"","tlshash":"1dc02b472e080285710d0384502b033f5b7483d12c007f7ed3d05492c0ec5c40d99e1d","size":135,"data":"","first_seen":"2026-07-29T09:50:49.631773Z","last_seen":"2026-07-30T14:22:28.438502Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b43b0aee35624cd95b910189b3dc231","sha1":"4dc7c9ec434ed06502767136789763ec11d2c4b7","sha256":"454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1","sha512":"a882f0ac848b0b6b4ca7b42bfa1d266afd0ddeba9204ae57a984a69376d59816b1ef3f4d442ea8a70396067ff5b70e0ae8eab3935b617b8e366d8e35c3bfe14c","ssdeep":"","tlshash":"c700000000000000c00000300000000000000c00000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:42:46Z","last_seen":"2026-07-30T13:17:17.250766Z","times_seen":59182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7269b775ab0b95778cba7acec9dfa6a3","sha1":"e2583fa81f981347a9b26f38d49603494db51fe6","sha256":"eeb6a128c1481e226e4c5cfbab7023786a20eff953a0e345c800321de498c9d3","sha512":"3ded65654f6fa546f621e90f73a5876dc228d3112c36e31132b2c26d11b88f4fd0bdd4d91b85110e59a7fc0648b87d1318475cfaeb1f1357974030454e5442fc","ssdeep":"","tlshash":"e5d097418085f00107336ac920b601a0048433b98d2c1488006422e477fd48870f2883","size":223,"data":"","first_seen":"2026-07-29T09:50:49.61687Z","last_seen":"2026-07-30T14:22:28.455351Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"68411db3e2441590fbfc85bc310a1643","sha1":"44edf7a8e577860a2b40fc7a87dc9ffe202b8082","sha256":"2227e7a0b6fd911d79aba79d9cf9e9deb2c2c2a8cae5129905b8b38fde08be04","sha512":"7995a63a25343e937c1d62fea6dbe24c71b84c979ba86ddecc83b6ff2cdef7384d01c13de90ebad02ae27e92e0e4f96f175ecbb9a362f18d941c6445c16ff49c","ssdeep":"","tlshash":"82d09522734830088322d11e50a12a1531b3474507944586770bd3c17e0113cf7d0ff7","size":240,"data":"","first_seen":"2026-07-29T09:50:49.635899Z","last_seen":"2026-07-30T14:22:28.44311Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fb0f1594b7a9593285b08ef4816ca139","sha1":"a9141c457a3b161cb89d023371818290bd5066a4","sha256":"74df9708526ee9098419d4dd745a9eabcd521b52883f71bc4f90355bf83a3548","sha512":"22104ffb3680a964dbec7859b72b4686ddfda26757b73f224bb8d7cb1192148a9f2ffb24ae3a3aaa51f029cb8d87740ce16e2ed9204945064990b4fddc969f57","ssdeep":"","tlshash":"3a11758ab3e7672269d7b1f6424f102a911cd26ab8dd2d45f281d7648829b4bf417a08","size":1033,"data":"","first_seen":"2026-07-29T09:50:49.649673Z","last_seen":"2026-07-30T14:22:28.468187Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1014cd08ed8f8cebf5d09ce11f100b98","sha1":"f5582e779b5d53eca42b3193ab496e7523e766a1","sha256":"696b6efbcca795388a29cb7f3455ab5fe951ec3e3a423d0ff1855c6c94cf0502","sha512":"cfaf5ffa982669dd7961fc7a02723cd5b5269ad69bb21f9c617aad1ea12509c6cb08430a9af858e67aac90abc2133bde7669e58fb36c06c8ae8a1bf3d4e1cbfa","ssdeep":"","tlshash":"cd8004051c045100c4415450041700dc511313f435310d15105400c30d351573101c3c","size":34,"data":"","first_seen":"2026-07-29T09:50:49.575089Z","last_seen":"2026-07-30T14:22:28.4497Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/0yu1L0TTWwn4JrxTGrUURY4SClWBtj5J3j2yLp5o0I8.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2405a4982598196aedf5a014bdcbcb24","sha1":"c681d510e0db42bd1049dd589f540ae90d523d77","sha256":"d32bb52f44d35b09f826bc531ab514458e120a5581b63e49de3db22e9e68d08f","sha512":"c0d8b8d7f698d46aa7be0654e8d48008bd953e5d269b0b9ae99b9313b42721c93c2371287559d625b48dd1df988b3bf82b651fe35619328b7de53bdd0d0a1353","ssdeep":"1536:jpjfdev3FuvJ2XPtZ0X/3Kt3558jqI2f2qHzWJppBo:mNuR4tCXit3FfXkpq","tlshash":"8d5319cfb2c2733149e770f2106b410a52bea6689cc8685fb546faf5297084f5877f29","size":61916,"data":"","first_seen":"2026-07-29T21:44:57.744334Z","last_seen":"2026-07-30T14:13:14.14473Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cefd1f1dd5b2bb81a62192815c487587","sha1":"303bbbb4db765aeaa5c0bef8448edde797e5df1c","sha256":"84aa7c35c7c9ecc58f74f52b5f77e6544b183edb6ca92e417ea8820096b50c16","sha512":"3dfc6c7f3faa7a24e3bb6122c3cf7125483a7119ec73c120f6a2e0db0453121cca4a2d9aaca241e2a41fee18dc411a360f916caa579ed036338cbbfaf7dd5481","ssdeep":"","tlshash":"08d02bd4ec4a198734349863305ac4ba9170b12a7f3a5ad1521c00a101f5d4d252ce50","size":263,"data":"","first_seen":"2026-07-29T09:50:49.611615Z","last_seen":"2026-07-30T14:22:28.442148Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"49463ac4c2dd61498506e8ecc6c4ec2b","sha1":"1b31269a2648aed5ab0cc3b2bf13513f157e435b","sha256":"1567eb97188bcc74e8c2c588c5c1da2ddac0102acf0cf64b99d256a70bfeac40","sha512":"994e574d3607dd9f8442337ce35661167366ea615689e8b2d5f3ce44696e9c9c87b3bb52227e9ea300f65b83e8aab363704101381cd4a51abf3c2f5030648489","ssdeep":"","tlshash":"f2e07d392e415ab93031ea42f99f97b8777d700fd4260a42c11c40f24a3484110edc19","size":298,"data":"","first_seen":"2026-07-29T09:50:49.648766Z","last_seen":"2026-07-30T14:22:28.428654Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c9f983540afe6376f270e9a2749c40d4","sha1":"6e1378085e69dabdd506441607d717168471b668","sha256":"ba1001be31dc649b4abc4e8aeb04d01e6f068e6749fb6bd8ff4c0896b08a7c4a","sha512":"34e97447160442831218c00ab771a2bdaff972ec65f522c9cc2513537a146d076ee5a151c70e6be66618a3d6cf69215e862bfb41e0314f15aa9cfd80c12c2fc7","ssdeep":"","tlshash":"4bd0c70fd03e1a378722aab80cf3082422dd90a02ac0c5dcf4032c00c6236cececa0aa","size":260,"data":"","first_seen":"2026-07-29T09:50:49.614992Z","last_seen":"2026-07-30T14:22:28.464526Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"027205280bd66ced17710a611b3fc08e","sha1":"e564e3a14cc67a8806e8d6cda57eed21332c3d63","sha256":"e7324d971937cc9760e72300db0abd62291012d16a26cdd3e14d393f98dc5aef","sha512":"4ec3f9c19e86bb47a94751b86c1a717b5b6eb989bbcbd252e5205e8917743abc097c883f92153274bb11e496a7c3f175005d415794c7be5f0ba0c640c13158d7","ssdeep":"","tlshash":"2fc08ca4f3944864cbc1e82303360200c14e2aace89840f2c281f44864907590c3ab82","size":150,"data":"","first_seen":"2026-07-29T09:50:49.585249Z","last_seen":"2026-07-30T14:22:28.429545Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7067b6b79d2fe2c351c9abfedaee71c9","sha1":"abd7272e1611a5057bef0960f42ff7071eb43b9b","sha256":"83799367b7e877898ae7c24d506d25a5d341646363ee9cd50ba10fa17a715a12","sha512":"9137713151454fe2e4234a4e6aeb8099fa5085b690ce1fc2ce16dc20b877e693b79e1b4a79d936f6afa0a7673ed1fdcc2ebe7aefced415f81c4f76135961b138","ssdeep":"","tlshash":"b1a012c86c096044202268b760fa01e8b580120443940c020045408403604282022e3e","size":72,"data":"","first_seen":"2026-07-29T21:44:57.959615Z","last_seen":"2026-07-30T14:13:14.242244Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b192e65f72d0a47e406d4d1334ea7c2e","sha1":"86c664d791b3825fe50955bc54f6c3cdc908d3de","sha256":"eecae1853d9552ba9b1cd5518bb87e78bffac06efa14edb21e2c4ca8f8322c91","sha512":"f48361d1bf5841de5cbffc39067a54eb277bb0f00e08f014f009e1cf740d2d7f24c98149fc8e7b4fa2014eaeae6c79ca7f2afb852d3601ed2b4f1de1093b096b","ssdeep":"","tlshash":"18e068c9f0c7a2053020a37e701f7b3d22ba43d772dae241a5208a700c34d6a9c3178d","size":392,"data":"","first_seen":"2026-07-29T21:44:57.84915Z","last_seen":"2026-07-30T14:13:14.211294Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6c2cf4cc386a27fbc2777f416ec6987b","sha1":"ebe1535053b1d73827e36823207a8cd944babf65","sha256":"e5d2a9bf025bf7fff037ae2a6185e6f28bdca503cd3ef295d27e251d33148e2b","sha512":"76bebac2862d266b9abc11084f65158fc7b3ba51f36deee110f69e783485b2a6f2dc2b224c705b739e49c6fb4aa9cec8b84680aaacad3d4318aa7e63d06d578e","ssdeep":"","tlshash":"e0d0c286715716c2428bf6d8e4ae13c492146230e2a0cc4da3c94d99150b4c18c7360f","size":285,"data":"","first_seen":"2026-07-29T21:44:57.921376Z","last_seen":"2026-07-30T14:13:14.164513Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"583dce1e7a2507b30a9eb71314c47d1c","sha1":"b5441c89188d8ade96dd0c4905ffadf5bc463172","sha256":"c2d4fe38448be66bac6fa893253b1618eb223f5dc1bc10d6f6ff8d2fb686f00e","sha512":"109b877c9d3e19077e1c77243032de69ab43447cd141f875c761ad4c17359c5ee4d6270c609a60bee1cc43160b31dd16713e5e0656dfc8702b4b2085de137fb7","ssdeep":"","tlshash":"c710000000000000000000000000000300000000000000000c00000000000000000000","size":2,"data":"","first_seen":"2024-11-18T16:00:41.416527Z","last_seen":"2026-07-30T13:17:17.23653Z","times_seen":2270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c1d9f50f86825a1a2302ec2449c17196","sha1":"7cf184f4c67ad58283ecb19349720b0cae756829","sha256":"44bd7ae60f478fae1061e11a7739f4b94d1daf917982d33b6fc8a01a63f89c21","sha512":"9032fb94055d4d14e42185bdff59642b98fe6073f68f29d394620c4e698a86fb2e51351ca6997e6a164aae0b871cf789fbc6e0d863733d05903b4eb11be58d9c","ssdeep":"","tlshash":"c700000000000000c00000300000000000030000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:48Z","last_seen":"2026-07-30T13:17:17.293131Z","times_seen":96574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5cfdb867e96374c7883b31d6928cc4cb","sha1":"0691a664b24b6f15b20cd5aee64b72271db08be1","sha256":"226a193ae269296d44f3efd3d66fead575a9ed15e14320b088c7c3d3cb2b9d8d","sha512":"a0d33b131096a2eace14a936e533a78093e0db96c0fef7f1f950de353a0a19736be2310e43ed9f37b35ee376e0372b061a78cc9a4ab6ce024a531290727eb074","ssdeep":"","tlshash":"c71000000000000300000000000000000000000000000000c000000003000000000000","size":2,"data":"","first_seen":"2023-03-08T14:36:31Z","last_seen":"2026-07-30T13:17:17.455326Z","times_seen":3459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fef04e648b64168f2c61a565ce23bc49","sha1":"b2da2fd8590de85e7c4c912a8511dd8338d5f39b","sha256":"55352bdfbb4d3dfcba7b2ee4280253755928157431d28be195567bf36f59311d","sha512":"63330ed776d2a9c9496f53dabd0a05bf768cfb3525a658839907ab8099488a731758d6b8162d0325130a2ffd4eb631adcb05b440b3dec24e25472cbe08e8d28d","ssdeep":"","tlshash":"3ec08c85f2908844c3c6a82303324200954f3aacf88840e28680fc28648075a1a39f86","size":145,"data":"","first_seen":"2026-07-29T21:44:57.933742Z","last_seen":"2026-07-30T14:13:14.298322Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b5be5848791932b5109f23512a6beef2","sha1":"e83e72c98aa1c06b72c331d2ffcdb8ea722c15c4","sha256":"c45892ce1f2cc7daf176411231f6edf4069cadaa66d336c3f9007f6e02406798","sha512":"e25310f0785940e08214c635ab1bb83cba52bbe7d4adc7ae416fbad84b25b3acce5e665e8061b497743efe4a3e4ebd4babfae4b8e131f6a06128680cb9c06a98","ssdeep":"","tlshash":"a3e0f18064461193108bd7b5e45f23d051006330f151ccade3c4de0c55275c39cf318f","size":386,"data":"","first_seen":"2026-07-29T21:44:57.913197Z","last_seen":"2026-07-30T14:13:14.245589Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d139e6c905c476dfc1095cd80e657848","sha1":"55b561bda4ce57582de9591cac1b408c3c87ed63","sha256":"e01129f9df87adb635d933dc546cc3e8002c315764a3d68bd8863cf9c73c1dc7","sha512":"0747b54c8ffa030b1f36944577fdf824889e4f98aebd1f0cc9d277defac82a5dfb68886b666b672baf68fbfd176bf7160cbfd9eef6a4b9726a9173ccdc98896c","ssdeep":"","tlshash":"dbe0c230ded476fe748a34b09fd9e184531cee02b6013dbc51285192d20ba02fa4e8a8","size":300,"data":"","first_seen":"2026-07-29T09:50:49.635041Z","last_seen":"2026-07-30T14:22:28.438972Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f77039d3b456fa28a6a400ad3de8ec41","sha1":"4fd7bf3997770f6347c1806eddeda4136ee1db90","sha256":"f797c268cbf11102faf6d32ad1bef82b0c8c7234120b650ddd0b3f8bf17534a7","sha512":"7e4418b13d9d0d7dece53da17f62695d5d4de67e6e2b1087ed811e543d47be15d15978e7bc2fdcd631e45d1f2644f838b052374aafa47fd15632773affdc320e","ssdeep":"","tlshash":"6a1165b8b91bdc77d81e36b12053e23b74f16244acea201e404e258c16fd526f13fc45","size":1026,"data":"","first_seen":"2026-07-29T09:50:49.625363Z","last_seen":"2026-07-30T14:22:28.462066Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b8295fda5d2245c683e47e1137656c78","sha1":"150956358dfb2dd051536f24c362ed507f77cc3a","sha256":"cbf2224bb4f40b23bb8fab9cb0123432d3d67e604fb3c789fb41ea67eff317c5","sha512":"b0b7fb98ce45be4105b4b4ae8357c1023a9cc44b7b00ab01098f7928b3c11ec93d0422214996a762cb727d50acb06be5d1f7a59ead6bb54ccf881d7aea7f385b","ssdeep":"","tlshash":"c710000000000000000000000000000000000000030000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-07-30T14:13:14.277989Z","times_seen":606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f09564c9ca56850d4cd6b3319e541aee","sha1":"c3156e00d3c2588c639e0d3cf6821258b05761c7","sha256":"4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260","sha512":"2ddcd5fd66f62c38135603defc728493bc9012c9ea6abc8a9823165792136513b2c53722d2a79c0d6ea31467308bbb49eb217d151d79baf4b2085f487d0abfae","ssdeep":"","tlshash":"c700000000000300c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:12Z","last_seen":"2026-07-30T13:17:17.220609Z","times_seen":57772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"80391a37c18dc9c61123f5e88a403504","sha1":"a649812d1195d4a29a15dc580b5baec12a5ad428","sha256":"11bdeec52c4fe58a63d380bb627d74f0f74fc934db52ba50d3958259d610cd59","sha512":"c7e496b4895acf96d3ecb04f1c61c34e768f80db6f86fb1017c63b34a00784a279fa2a6f92f849077e046fe21ea8fec0b7d5386eeb93611dbc387af8bd9820db","ssdeep":"","tlshash":"17b012882c8cf85424a3909800c98444f7b14b84c7893c34c01dc4d803f004f19cdcaa","size":95,"data":"","first_seen":"2026-07-29T09:50:49.63674Z","last_seen":"2026-07-30T14:22:28.452603Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"50d360cf83cc817aae3ce548b8e0e551","sha1":"5c1011ac5a17f6086919f9af1182562b75fb308b","sha256":"8ab26be4194dc9df0dbb7ed045b73e3333bfe5945e763d2415acf1b4e1957029","sha512":"9142986d8e311234519d32ff27ff98c09573f47fdac3b67ad54480d2106dd09d647f3fb708b113257ff5f5da500606324905d0d02356be4d5e1dcc2610260635","ssdeep":"","tlshash":"e6b0126961405574181e71fa7b7f911741fa36f06ac95c032552e5c2367064c980771e","size":107,"data":"","first_seen":"2026-07-29T09:50:49.564257Z","last_seen":"2026-07-30T14:22:28.430025Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4aae7fd3c815b1cfa3660cb3227a214c","sha1":"4531c0c13ac8462f9dd8f0dff0e13b1c3e150bcd","sha256":"cca00c516ba05df351915a75df4db57659d685c5af3622cedbba3c6b626af2a9","sha512":"c2f67d5e011e7ad703ab55ea89f91fff91b4245f5294cb73ded819757eb158102fd038f24b175c1f6eae717100cd63d9e9529cc90d124cd90a26ab4a1f650d4e","ssdeep":"","tlshash":"4d50003c30003000c0c0003000000000303c000cc0c000c0003c03c0c00f0c00000000","size":11,"data":"","first_seen":"2026-02-18T03:26:52.257023Z","last_seen":"2026-07-30T13:17:17.496496Z","times_seen":83201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a931635074a5017da74948b67e16c76f","sha1":"a6799582ad16a7c1ab8221c166268130df6691d2","sha256":"1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c","sha512":"7c96bb515bdba9ad60854b433d24e77982a321dd7ca71599fd8f79acee580802f56829a5dbb7f64932a51ad50d18a9438251a6ad8127ad2b2e332811033d2c7b","ssdeep":"","tlshash":"a5d023cc3941f262d06274b9041704dfd173384a1e1cdf4184154875667c5d9407f4c4","size":206,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-30T13:17:17.462504Z","times_seen":208026,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/js/jquery.main.js","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"40ce3a4ffbcdd3179f3b1ffb5b467b94","sha1":"3b749c3a9bdc4e7c4a1a98b82929a080ad65e95d","sha256":"511a2e980fccb72dd7b7ecbed70cad8ce7345cbb01303adfcc57681d5f4ae8f3","sha512":"3ed9cf4732c1ad13f234098bc809e8cfa9f2e77804db0b1215ca027aa45690703c580292a753390b52b53b16339fc476d8ca6c4e5e24fa9e4aba353fd37b2a4e","ssdeep":"","tlshash":"2b715359731e22df42e7b328f03f4b249e7dc632914411ed78a4945914f456923d1f6d","size":3752,"data":"","first_seen":"2026-07-30T03:04:38.73074Z","last_seen":"2026-07-30T12:04:47.57443Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0e9c49479dc6a78314bf37d6002e557b","sha1":"3b302d7fe715007c1cc33d1d434fa97b6bd7236c","sha256":"c418de4bc8f5f37ba1a8a811b11c25bfdadfa815d023c19966599985893b640e","sha512":"f8ea1ce0bdebc7c9adcd8c6edfd8069e4e539ba58ab501bb982380deaa16e15841398784b98f6ddfcccf5c5c4e8e497eba1d3e55e2ee895109737015688bae0d","ssdeep":"","tlshash":"a5b012882c4cf4582463909800c54444f7b05784cb891c30c01dd0c803f004e18cdcaa","size":94,"data":"","first_seen":"2026-07-29T21:44:57.908928Z","last_seen":"2026-07-30T14:13:14.224974Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"edbab45572c72a5d9440b40bcc0500c0","sha1":"7e83ca2a65d6f90a809c8570c6c905a941b87732","sha256":"7dc96f776c8423e57a2785489a3f9c43fb6e756876d6ad9a9cac4aa4e72ec193","sha512":"3d7e851b031e23173b21f97b5d149d46b293d6d90182ed5eb615472c03103398cc40e1ae5f07f623e0c61fd0fa591178cff1c90579587a9de7c7876fccabee66","ssdeep":"","tlshash":"c71000000000000300000000000000000000000000000000000000000000000000000c","size":2,"data":"","first_seen":"2023-10-15T09:05:24Z","last_seen":"2026-07-30T14:13:14.166437Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"df35dd034942e2cf8819a0359284502a","sha1":"ff10b63525e263eeb9f88361b80b924023fb9d63","sha256":"182e034430e344e368019af12eae1ccf0b2262d6013d398eec2430164e6afa85","sha512":"dde5f29cf360ad98b31f9f807314ef72e9d77e88cd100b12e95354670cd488505833321e8a5b912b2aa04fd552594cb7707c9515169ef00c3cf3d98a9792feed","ssdeep":"","tlshash":"c8e068ceedd257495ac80ec74883c17ab3f5e6088c6661ae6d112c948608dc7019ce78","size":368,"data":"","first_seen":"2026-07-29T09:50:49.579136Z","last_seen":"2026-07-30T14:22:28.418371Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"19774c8b1393fd50e5a74365981e36d9","sha1":"c5650c1161d53293ceb26f2fe5572c5d8dec4231","sha256":"f98d49f44a984d79f3508504db24f5f50a9476859e3d231122ff333dd313e6af","sha512":"9b989108e0778ab05ea408ba630a06137493424816be0fa721341debcacb4845235af3fe1906c9f4b5959cbf290eabb390a18b7038f5da0202456a5d8ba7de6a","ssdeep":"","tlshash":"49e026d6654622c6428be5e9e5ae03c0c1016672ebd0dc4d93c88e59150b8c29cf350e","size":326,"data":"","first_seen":"2026-07-29T21:44:57.961489Z","last_seen":"2026-07-30T14:13:14.184682Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51db00a290f55c101e11ce46bd983eb6","sha1":"2ba664ad67eb8cc98285922853a15a7b949b9dda","sha256":"14618b492eb2e51543bfce953abf895db68b29160b6493f0f68aef36e2413cf0","sha512":"5d9e36e881a09467c510701e1eb2c4f6486b01bc7fadc54f30fefedd47cf2b230cfbd344a83a3cbbf27233f858abbb141b31d8307763948450ca96c285e9b971","ssdeep":"","tlshash":"a0c0805c12cb977b3add21d5056b5b2e479154250d4214231d8b16695c70eab4131c40","size":174,"data":"","first_seen":"2026-07-29T09:50:49.605553Z","last_seen":"2026-07-30T14:22:28.465037Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3eeacd331d3ca2dfa4b39da05855b96a","sha1":"cef7b4bc713a4b5cc25fc7f3f690e61217d9f604","sha256":"d26264cfac1e425619fcc42bbe86be66b04758110c21cd823153e0f91f617d12","sha512":"12fbd13acff2260235152938baa373e4d4c93d21f7d599ec935365dff60368370209de5ad08706e289d57c3f480255cd3aa12b2c6882700b64273ad7a4310e98","ssdeep":"","tlshash":"329022202c08acca3022a2a32a0b0ac0000c0030e8cc202002020220033008b02a082e","size":57,"data":"","first_seen":"2026-07-29T09:50:49.610584Z","last_seen":"2026-07-30T14:22:28.455872Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-07-30T13:17:17.425922Z","times_seen":176662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a47fa1951bd93f140c61c20d313f9f77","sha1":"f4047f56bedca06d443e61fa301228a358f85732","sha256":"2229a2e19528221e3d676bc3f4c4caab15524012837aca9ce71ab3630fff3d28","sha512":"8dec614544ca0fd856a6ba6aaf350da80931295e6ae74015e5216bb8b14a482f12295a1bc68a69fc66c6fb64027aeab3c380ec8c342f87836e40ff396774fdd9","ssdeep":"","tlshash":"87b0128c5d093989d0685ce3186b44acf33032b5159a70404448ca68077402f6540ddf","size":97,"data":"","first_seen":"2026-07-29T09:50:49.646877Z","last_seen":"2026-07-30T14:22:28.453862Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"397cb9914547a00df7ab552b7ca6310c","sha1":"db51357ce32876fb87a18efeef28d80df48694d4","sha256":"be769af349a7ad8ad8c945ad98e40b900716e0ea58f6cc754890b260b9b517c5","sha512":"69b07fc3a2400b8f0f5a6a3269ded04c4563e43605882d4c17c7cc624fad8d968c2cee7115fc18d91fc3c33e0c5d54a881b85f33e2eea9687d7fd1a81be8a920","ssdeep":"","tlshash":"c8700008ac083002802230a0020b00280232000200a82e00800820800c300ae080b8ae","size":22,"data":"","first_seen":"2026-07-29T09:50:49.584348Z","last_seen":"2026-07-30T14:22:28.426233Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-30T13:17:17.404554Z","times_seen":184894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dbd2b5a99e201337e8b5651e83fbc8e3","sha1":"f1ab3041f9a3e9b3307fd933d7d7835dd520043b","sha256":"5ad94b3da4cf9d86fb4bc70c0dc82c22b516f1cbefb0f10d6e8195dcb312fdce","sha512":"3e5c6f2834dc75d4562af15aacdf22bc70248ee05ffde91dbd3d406efe75eaad1d8e59a4ce310212a141d10d9aae82e7cb4d2b7ce9d28b933ee692b433abdfb4","ssdeep":"","tlshash":"6f80002c3ca8280b2c02b0e0b00b000800220020a0bb3c000222b8bcae388cf200280e","size":30,"data":"","first_seen":"2026-07-29T21:44:57.949214Z","last_seen":"2026-07-30T14:13:14.21932Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"478683428c1a2a8a582fa449fd7e1f41","sha1":"6ec2cd76a16d024313e6a9384e8ca3fefe425823","sha256":"6af45de807f2937ec69dd920c3202b7d7766b73be9e80eef36a9972fe6908fbb","sha512":"98dd17fe3e46b6151377acf15f5acc547fb958c384440352e94c61a3f7215ef09581d11ebf69682a168c31a006c8e459758c360bfa6ea49308c0b73750b94e0c","ssdeep":"","tlshash":"85e0c092db060077e0691cd424874cced9749c239c1b394d721235000818ec3b08c5c5","size":324,"data":"","first_seen":"2026-07-29T21:44:57.901034Z","last_seen":"2026-07-30T14:22:28.469742Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c8ad0cd08d8403a8a3281aeec179b3f4","sha1":"54c299b2f4b34e1d00f6ce6e08c776e4a52c592c","sha256":"8c0a1fe1de3742ac90cd800c0682316f6a54a5faaec3faa437288b902ec03a1b","sha512":"b13cc698b654251afb2f11ce4a0bba8363bb6e841861414554dcfffc9165c5d09247eba989a5f156902baa52976c61164bb0c068b872111d807c84f64e206a3e","ssdeep":"","tlshash":"15d0974539001574f23eccc2388e41fa11e8393bd61a3ae12b8d864449b9e25702fa21","size":246,"data":"","first_seen":"2026-07-29T09:50:49.64008Z","last_seen":"2026-07-30T14:22:28.456855Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"14ced19b8f79078745d8acbc9f9a5efc","sha1":"0a8a982003519e806c6e81e033fda7f7350978d2","sha256":"8a7d03b3f4033dda2d0112a942d1d1896323b86ec24faec1c2e099044a92800d","sha512":"fc3fdc67a62037fcb82b56c266f776283ed8b1fe56c8f1f1783abc8b26189e21af55afb74ec680c5b8cd1165137c059d10eb07fbbef4a4fc2c410bb4f2995882","ssdeep":"","tlshash":"3680002c3caa280e2c02b0a0a28b00080022022028be3c200200b8bc8e3c88f202a82c","size":30,"data":"","first_seen":"2026-07-29T09:50:49.639315Z","last_seen":"2026-07-30T14:22:28.462546Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2284743fe8a6178f117d584e3091d6e","sha1":"93d24c83d4a695e2a463bf66ea18a3e2147e9148","sha256":"8cf878073f71bf93dd67f56aab913b4a584f5ea15c56ea7030f96b9f26f23a4b","sha512":"7aa1cd340f7dc20e2259c9ef76fc6dd184133548d47ee9cf1c300e8ded20ae3e298748b874bb735dc639bb025be759096e3edfedd1c0396a094748bfe2734cf1","ssdeep":"","tlshash":"28c02bcf30c6da74817d001203179dc48107349f114b808743d040e400174908c1dcd7","size":138,"data":"","first_seen":"2026-02-18T11:53:38.7823Z","last_seen":"2026-07-30T13:17:17.49876Z","times_seen":78403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/02fa8099/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1074ff8241053533f3c51a16e0e61aa","sha1":"8e308c037a5c7b8a6c2c49a3266ddce913337a47","sha256":"a0a7e78acbdd794fc8c533d04dfb24c1c0d5e261f354ac21448989b2b99446bb","sha512":"f14b914f2a2d01a8342dbc95f83abccb89a34cde077973bb6a78c43a21ed243c8a74e01e31e29a8ba9ce70ff031dc8669625293e35bf74dc4e3059f46eb0d33b","ssdeep":"24576:78Y5eslzYLX9Yfh69EKhDtfVoYR0Y0xX8+N:7desgX9Yfh69EKhDtfV9hy","tlshash":"bc755dd936d2b46743e3e0e9181f0146f23b1948549cd62cbaadfee51ca0d0aa176ff4","size":1595374,"data":"","first_seen":"2026-07-28T18:07:12.701047Z","last_seen":"2026-07-30T14:22:28.424212Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f39656a05ef32e61c57d60aed2dfcbb5","sha1":"3becda4593b86738fe45fa83fb6ec951ff550c82","sha256":"ebaebeccba9bde729c6ee48008f8a7be99ea0d916fd4996379d6e0149479707a","sha512":"21a7c16af829ff87ba9b662edcab2dc45a81c9a0aa0fd7e316480988edd9df48001c2535ca34e8ed5124f8cccde13b61403bb5807071e6716fbd50f733edb70a","ssdeep":"","tlshash":"f3b012cd3ec02007c02d9f503ccb01c0f8f220335299350021bcd0c4127403c1302c5e","size":87,"data":"","first_seen":"2026-07-29T09:50:49.580043Z","last_seen":"2026-07-30T14:22:28.437503Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ee47007c9e05c51b25427ca62d2c77d8","sha1":"03533f1f8c5e9f4f3776050db0130d07bacd0f23","sha256":"76b46df6bc68542f8fac8fdb5966ad9c1ea9780827b87aef7af8d4a4b68a362d","sha512":"3ef619ad05cdd996a5e216084e5ee6e140611bfa39bd4203f104bbae98c3db16fbb236b0a2838c3f65501272621d05283a9cb75d3db4bc875dcdf8bd212b3887","ssdeep":"","tlshash":"72a0125dbc089445a805bc501189028834a04d97225a3410c018c00417f012c1431886","size":77,"data":"","first_seen":"2026-07-29T21:44:57.955038Z","last_seen":"2026-07-30T14:13:14.181541Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1c72d68e179a4fc88d3dcef1bb7ce990","sha1":"2076c8d22f2cc85f6ae6d0f375f6295366115eaf","sha256":"04ee4a9834fbff268ebbdb0ab1879c543419509597a90f852bbd913834229004","sha512":"d2b051828ff5029b1c457a79598145a05a27a06ab6cf1da73262192c33d62fa21e19eb5f0e3961e344cfc3761c3f3ddb3e31d2dc39322d19355b38017d50394d","ssdeep":"","tlshash":"f67000082c08a002002230a0002b082a0232300200a8a808200820a02c3080e300380e","size":22,"data":"","first_seen":"2026-07-29T21:44:57.892135Z","last_seen":"2026-07-30T14:13:14.229933Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a9362aa3216a627d5966e77a8a97c903","sha1":"937be4adbced9282e5bfb9cc2ccb5d9d31a19efc","sha256":"0bce966f69d9cc54da51573bf2d7c69bb24be908d2b54c3788a17bba730d3b12","sha512":"d950d3cff49ff3ee43e08718d2314452522338568445bf133d51336f9bc49a8df97fe189872df2f415bb13b4c96d1c03f0325b7e7be0842b7d909a16365629f3","ssdeep":"","tlshash":"94700008ac08a002002230a002cb0028003a000200aa2000000820800c3088e000b80c","size":22,"data":"","first_seen":"2026-07-29T21:44:57.829292Z","last_seen":"2026-07-30T14:13:14.293154Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-07-30T13:17:17.383519Z","times_seen":267048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6a0366b93eedbca19a4c3dea36a5a749","sha1":"cf9798f34fa6cc5796bf8c8fd3a24e713ecaafc0","sha256":"e9f5d1ba17b5738bde804ee1efbf142b2291e02d2863816cce1c8742fae440d8","sha512":"3699422e833ec23d9ac91f3eb438959427c8a2771050073d1a2a55519bae8f48d0e60c9db229333eb7f98b4f4b39bf1ee5fceed33005d5edb28b476536ff3e19","ssdeep":"","tlshash":"45c08c95f2908844c3c6a82303324200954f3aacf88840e28680fc28648076a1a39f86","size":147,"data":"","first_seen":"2026-07-29T09:50:49.638448Z","last_seen":"2026-07-30T14:22:28.460162Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"57cec4137b614c87cb4e24a3d003a3e0","sha1":"23eb4d3f4155395a74e9d534f97ff4c1908f5aac","sha256":"18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552","sha512":"4921de1edb2ecc8ca3a22823705194b902cfa471675f2d1ae8bf67d0c7b060a7c192e36ffca9f1a0d90ac2dbbdaf429ee1ec97e160eb00dc80b07000935304f3","ssdeep":"","tlshash":"c700000000000000c00030300000000000000000000000000000000300000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-30T13:17:17.411231Z","times_seen":45577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"87db16cba59e908888837d351af65bfe","sha1":"a7439191c89664de7a10466c332328c275669705","sha256":"cf80f848926bad85ab9586c1972f43bfa94ecf7982412d3a63e8ec2fbf7e14af","sha512":"85c3afb7a052c9e90a4a26768ae7ea97ccd073bc6654865a24b11bfdc7615e48cfd5093860cab7dc86b37eb5a32b6650857fa673cb0bd20070c0f49dec2f56a5","ssdeep":"","tlshash":"c7100000000000000000000000000003000000000000000000000000000000c0000000","size":2,"data":"","first_seen":"2023-03-08T12:49:37Z","last_seen":"2026-07-30T14:13:14.240611Z","times_seen":1457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"69691c7bdcc3ce6d5d8a1361f22d04ac","sha1":"c63ae6dd4fc9f9dda66970e827d13f7c73fe841c","sha256":"08f271887ce94707da822d5263bae19d5519cb3614e0daedc4c7ce5dab7473f1","sha512":"253405e03b91441a6dd354a9b72e040068b1bfe10e83eb1a64a086c05525d8ccae2bf09130c624af50d55c3522a4fbb7c18cfc8dd843e5f4801d9ad2b5164b12","ssdeep":"","tlshash":"c700000000000000c00000300000c000000000000000000000c0000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:12Z","last_seen":"2026-07-30T13:17:17.420709Z","times_seen":57636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"95a08138e0cf8610ef4b9916cd28b217","sha1":"6d879349b2feb46f8a3c153d1392893afb3a9666","sha256":"b0e3278bc1eb25b879bb8f5ef61179536ccfa149f6d06d2b0dc238caf8156589","sha512":"a11e73843320ce954ac1148406be3d3d6c0fb452e2b94affdb7d40a3e716839a2ff1ff2bd7442d93206337c586ffbd5bc69462454aeb1359a5beb86cf503b011","ssdeep":"","tlshash":"0bc022c1e0948c1cc286ce71022b12425a2bba28b80c49e2c801e566b0a231a0cbaf8a","size":185,"data":"","first_seen":"2026-07-29T21:44:57.806405Z","last_seen":"2026-07-30T14:13:14.2464Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cd55f547d24494126b3d67cf40eb5c32","sha1":"017851bfd4f96a5672155bf51a6e31ac5fa725b9","sha256":"e0c8d19951b61a4268c97b298f7460f14bca20c24cb895de22bfaa82c7d2b1f0","sha512":"0668d1a8b7870b69e24d5ea2a0cbcc30fc09e2c85fe7f0144a6cd37c2ce03e697654e3ba96536f636fd425a7ccaf7b705c1affaca37d90fce2e40d10d3bc26cc","ssdeep":"","tlshash":"0ca0125dbc089445a805bc501185018834a04d97225a3410c018c00417f002c1431887","size":77,"data":"","first_seen":"2026-07-29T21:44:57.899999Z","last_seen":"2026-07-30T14:13:14.298888Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e4ac9f029242a68add694503bb02c59a","sha1":"643d277817795a8d41a4eb249f3d10e0baf60129","sha256":"6cf32102e314a6b688c49489ad488fc2f38f9b93a47cf213f90b0c1509fead0e","sha512":"0f2eeb1c2fed6fce377108a1ddb0dbbf257c40b641d4ad1bf8cfb81a8e942c5102261dc583921c3f531183471826e709a04684ea5044df71e8e4bd0bf250c488","ssdeep":"","tlshash":"44a0125dbc089445a809bc501185018838a08d97225a3410c018c00417f002c1431886","size":77,"data":"","first_seen":"2026-07-29T09:50:49.614147Z","last_seen":"2026-07-30T14:22:28.41352Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0ec0a874a922a22d9c92f6d262125e35","sha1":"f0ecce66e5faac454bf7cc5ee12a0d54ab3313f8","sha256":"1b115ad6add0be8f8c38d07d373536297ca89028eca5327bcae363dc699c6edc","sha512":"90b7dc2dbef445b8a28f3f8f8f9578c7b82d52d1faa65c066cf5cdbc7ae15314e24ce9a83570f4201412b3ba233002a6a2850cb84764d8665825327561705ace","ssdeep":"","tlshash":"60d05bea6454612dd36716a5f17622a718d0b75831888f558bf594b0566022cf4d2b43","size":262,"data":"","first_seen":"2026-07-29T21:44:57.840915Z","last_seen":"2026-07-30T14:13:14.243129Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ea19c25befcbf35aac687e27859a3cef","sha1":"fa1156186030621982222615c1b3582c4e3b46b7","sha256":"923289ad2a41d75ed6667f46db0557677e17023f3f20186d3eb688bee688fe99","sha512":"1eaab0fdf7fc4c6aeb427243015c67ee35eefb5a22d91f9d82dd83e49f7ba8f8eeee07d9adf17b5fd0ab4f878ca547fb374de6e92fb6525b8b4a492ad9c47609","ssdeep":"","tlshash":"0ad097418085f00107335ac520b601a0048433b98d2c0488006422e477fd48870f2883","size":221,"data":"","first_seen":"2026-07-29T21:44:57.904942Z","last_seen":"2026-07-30T14:13:14.221548Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bcd2a61d52bd6472edf504e15420f13d","sha1":"944f99eb234f4e980783ebf9526740a72761dc5f","sha256":"6b8543c6207ec1a9312f5e8ef346033a1dfb406e0307b636eede8aee6060a2bc","sha512":"332d5b850430283b9526dd8749ac07f483e92fcc7688514265789cacb4937d489df10fbe1fa52dcc2b423f58e16a2f68023967a55ec44fd1f6cdbb760e9a73e6","ssdeep":"","tlshash":"59b012487cc87afd5109bc7104861054f1a11c140b862a0d400dccc0036001e020a567","size":91,"data":"","first_seen":"2026-07-29T09:50:49.617689Z","last_seen":"2026-07-30T14:22:28.461112Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"10fb031a3cf7436874788b736cbb5b99","sha1":"4949c506719fb32d192933dcbb98af2a4be9c079","sha256":"ee776042d88b228c9cd81864ee4dd94efe5a9f0595fc20df3ebccd0e6cf62ff4","sha512":"716bc77daeec7df2ff4814eaa0413ce63f5b35c161c1e79cf07f9dfdb740d8e7e039f67836e8533344610ac4399ca9f7fce43b6b38af10356bcc192d749579c2","ssdeep":"","tlshash":"887000082c08a002002230a0000b002a0332200200a82888200822a02c30c0e800380c","size":22,"data":"","first_seen":"2026-07-29T21:44:57.936713Z","last_seen":"2026-07-30T14:13:14.214605Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8fa14cdd754f91cc6554c9e71929cce7","sha1":"4a0a19218e082a343a1b17e5333409af9d98f0f5","sha256":"252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111","sha512":"711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-30T13:17:17.222222Z","times_seen":68733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dd7536794b63bf90eccfd37f9b147d7f","sha1":"ca73ab65568cd125c2d27a22bbd9e863c10b675d","sha256":"a83dd0ccbffe39d071cc317ddf6e97f5c6b1c87af91919271f9fa140b0508c6c","sha512":"32b1786eca2b9f815b4c52b999e2b34dae877a86c00e8f745e7ac23388665c0703a947085bd7f975c5210ffab9b5a8f3931ab40b26cd7bccc4d7690cd19a4277","ssdeep":"","tlshash":"c700000000c00000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-30T13:17:17.213678Z","times_seen":55099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e6d7e48058b323a38d23036011ad65bc","sha1":"03effc36e3180de1b3cc57367b1cdbecfa2f0e38","sha256":"b1914902425282f7aaad6b9a8548ae7c9d76e1aa4c132486d90d7fb6d4e690c8","sha512":"ea92b6ac7d85a8b66eca42c0e5b45cbf5c6711f435d7e97ede42e1f2873d1ee95cd64a8bc21ad10af271e6bd9f6e03c92cf2c7613bd67550636881f1e85af134","ssdeep":"","tlshash":"ebc08c94f3944864cbc1e82303360200c14e2aace89840e2c281f44864907590c3ab82","size":148,"data":"","first_seen":"2026-07-29T21:44:57.935892Z","last_seen":"2026-07-30T14:13:14.293828Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4fb434a166ccaa4b847e4d7699e938bf","sha1":"791e463f72d6968cf5898dc6e02359e7832380e1","sha256":"3084f2f1afa04191820e98a8009306a73c64ceae5721a76c7c51a807d6ca57e1","sha512":"a107ca1dd2fc0fe605c953e63576f17ee3dac73c66954d623d2f8f42ecc75fe7cce4f8d10375299d6a2dcb7776778b992f00a31a5b359aa7892a9021d6284227","ssdeep":"","tlshash":"26a012485d00a80504076146034a402464b010c093502404c046ac8b0a1442f308288a","size":72,"data":"","first_seen":"2026-07-29T09:50:49.615864Z","last_seen":"2026-07-30T14:22:28.465578Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d48a24ae9672ee573050e4d3aeeebe4d","sha1":"8f8c4d27852980a1ec5a8b1aba30769001314ec8","sha256":"53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255","sha512":"02dd385ce15083c89617859325e29ce885ae235c8c5be416828066dcb5db78e69229802d87aaf759224e2656ab4c23bf1740ae1d357cfdb57ebf78ab77488921","ssdeep":"","tlshash":"43800020202088288888200b20308b8abaa0a228a83a2000a08c8e2cb822e80a038820","size":29,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-30T13:17:17.395241Z","times_seen":187437,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f502ac14e14405587d798139e860b5f","sha1":"b267cfc679f39f2d95f9d3fa41bca0eafb931aa6","sha256":"39d2483e41bf71db160191d9a148b4bc26c0739e732727e37be0f18bdc8cabca","sha512":"f5bc3d4834c9c4ed165d49476795fb1170fdc577b58fe4b21dfc67cfb4f6eebf045a3812ef48a2f15758e790ce7e111cf9dbd9ffcc3438288c7340e6eeb7661f","ssdeep":"","tlshash":"b1c022ccbb3e600d9121f90031f84e46cb4125ac4407ede3a70128b4448180aca1f406","size":194,"data":"","first_seen":"2024-08-23T10:18:17Z","last_seen":"2026-07-30T13:17:17.368069Z","times_seen":174737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7595475762aacfdbc4d90b960547b413","sha1":"5b5ee3388bdd1963c81c13f7abbb91e45a6a6118","sha256":"c217021a5d7d326ed4940d10c0d9f94c0f3d88f0a9d40e576fd7dddb15d9b692","sha512":"6d735da6e78a5ad8a3565d765a02fe29ec787e7140ba8fa2d7a437701133b1d17b6483ef0f43efd2eb55a302af923728fbc500ad7c7692e7c959296ea5b6e291","ssdeep":"","tlshash":"6ac02b1e0209a018c3a77076a82f0446ccf10bb104992d4fc20171c31030fa4008ccbc","size":132,"data":"","first_seen":"2026-07-29T21:44:57.93297Z","last_seen":"2026-07-30T14:13:14.227486Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c538d99815fc8ca6251e21e338726d6f","sha1":"84fabd7934cd14df9972911bf19e308045e6a7fa","sha256":"57bf6fc5d69798c51d1327e3cdcc3506f22a44b7d2801f5b93189f1f2854d194","sha512":"afa41e5e68ca4605d6c08508c4279a49e7790735c15276dd05cf7c434e28f4f46b74681908db6446aeaf207c1b1834b05aafe8c0242518499e92c76cac4142f9","ssdeep":"","tlshash":"a8d09522734430084322d11e50a12a1531b3474507944586770bd3c17e0113cf7d0ff7","size":238,"data":"","first_seen":"2026-07-29T21:44:57.821787Z","last_seen":"2026-07-30T14:13:14.225807Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"558ffc4550ec274137bce5f83d2a667d","sha1":"bd7b5d3e0c5ec722ef191b34ba6014676d3d7f55","sha256":"3533dbeec2c4ca3a133c6c8bd5c67cd11a47bba0d7692094360117428b619178","sha512":"da2d604f39d28b097252654bc091bd06c0686ca245696dab0fbba4d3464ecf340215edd401634e63b163ff42b02a3ac01337c6d6056a2cf1fcc350782aa3dc72","ssdeep":"","tlshash":"f7e026d6654622c6428be5e9e5ae03c0c1016672ebd0dc4d93c88e59250b8c29cf350e","size":328,"data":"","first_seen":"2026-07-29T09:50:49.618607Z","last_seen":"2026-07-30T14:22:28.440739Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e220d41b3f8d0997e0fdc4e6eadb839e","sha1":"88726ad2412f466d782b709e4aef05b6dd659c70","sha256":"5bd5f50a0ba3c24fcd9aa282638f2e4f22201d0aee2ecc7e964f46149e98feda","sha512":"f00e5a698279066d6181428fd2111d8cea03c9dc1889116a7a61ce487fad4a2f7808e834c2f9a4168e5daec5400f9614eebd428e9c748b806682f204d91b7d39","ssdeep":"","tlshash":"83a02228c00a38a02c223c003803ca2332028fa800c22c0a202fc0bc0a080cc0003aeb","size":65,"data":"","first_seen":"2026-07-29T09:50:49.598315Z","last_seen":"2026-07-30T14:22:28.430514Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"93973505f0a3a17d9a314b7139f3e5ab","sha1":"2a323c80d1650c70d88b18f2beca9fe16d0c822f","sha256":"ef081f20d6e3a19bde98a5750e534686bd06b4d5a640282dd5e2e86d27120916","sha512":"3440d5555347e28ea2765958f54b93badfa2e0a72e40f4ebff3049675c92c2c188886201efcfcfd074d65a61ff9e1b5b67fdc358737cbcb5515ec9f587bf0a64","ssdeep":"","tlshash":"6be0f18064461193108bd7b5e45f23d051006330f151ccade3c4de0c65275c39cf318f","size":388,"data":"","first_seen":"2026-07-29T09:50:49.622488Z","last_seen":"2026-07-30T14:22:28.449181Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"whatsapper.leadball.ru/images/leadball-logo-wmt_n.png","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.903Z","timestamp":1785413020903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /images/leadball-logo-wmt_n.png HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 6825\r\nlast-modified: Mon, 23 Sep 2019 19:56:22 GMT\r\netag: \"5d892366-1aa9\"\r\nexpires: Sun, 13 Sep 2026 12:03:40 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6825,"size_decoded":7168,"mime_type":"image/png","magic":"PNG image data, 440 x 96, 8-bit/color RGBA, non-interlaced","md5":"d188ea82f45a3a1960b591a53f1cb39b","sha1":"c0fee9810c2daf7459f3f011c3b6ca5be1023a7c","sha256":"e591442a5734f815540199b9e33f366accfc42ab8fa3961840e60e678a7a0e25","sha512":"f6fde726b83e3e56db05b59077454e34ac82ded8031e5df274b4c4596d6823931ce8f218b7c335cf491065f373f33d1bd3275b216ad92824719dc8f34d24a9c6","ssdeep":"96:BQMpKvYCpH+DQOg1lcgBRYeFr6UWTxgZnt89mNrbnefjlW18LRG8hyKgsZHfO:BmYCxCsGVxu89mNbeB9L6KgN","tlshash":"b2e17cc5eb84fe00c05dd933f595a4abc71e16509ad2e4e88c84c09621a85f1ed2ae8a","first_seen":"2026-07-30T03:04:38.740931Z","last_seen":"2026-07-30T12:04:47.577934Z","times_seen":5,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKew72j00.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.070Z","timestamp":1785413021070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKew72j00.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapper.leadball.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20852\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:11:30 GMT\r\nexpires: Thu, 29 Jul 2027 13:11:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82331\r\nlast-modified: Wed, 27 Aug 2025 19:19:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20852,"size_decoded":21664,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20852, version 1.0","md5":"3c8d2630d8bd2e0b75e565519bcdb5dd","sha1":"ecc2b13a795067ee23c7d4c47ef30ed67dcd9129","sha256":"c86112704544f597d4814625795347beffe516e15c679d52b14302ec5e149ba7","sha512":"6e84ccfcb207dd524c822ab73e3b37c613c302c778a9545947e667fbb6ea48c5e8ef8ad1a493c7d2d5d34c2257bb107aa440f53e84f2ada6089371c956690f8c","ssdeep":"384:wiFxTZCZ0os6HYDnV8wHhz49mJKmsSkbOO+jbRkKU+oc3+TntbUEDVBrApLuR6:wuZCenV8w1OmkJaRMrYEDTC/","tlshash":"c392d1fa00c9d56ef6b50db2baf07c8eec7dc9152650b909b6f40086348fe5552d4ab4","first_seen":"2025-09-03T01:47:43.124415Z","last_seen":"2026-07-30T12:04:47.567162Z","times_seen":1368,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":34,"dns":4,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.081Z","timestamp":1785413021081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapper.leadball.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 23:01:51 GMT\r\nexpires: Wed, 28 Jul 2027 23:01:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133310\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26588,"size_decoded":27401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-07-30T12:04:47.549403Z","times_seen":12669,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":35,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/js/plugins.js","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.888Z","timestamp":1785413020888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /js/plugins.js HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Oct 2019 15:40:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5db468d0-14fd1\"\r\nexpires: Sun, 13 Sep 2026 12:03:40 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85969,"size_decoded":25419,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32033), with CRLF line terminators","md5":"017f4ae63a76e6215e9f5f5c97339df9","sha1":"4165f72b7570941d7b1c1882c95e67d900e24fe2","sha256":"ed8f882976d69a3cded7f6410882ef887ec41173c22516816e4b259b73b5c979","sha512":"9e0d9e58749ff4879cbaad35484d2989de18868893bc1d8d22262adc0cd57d5e5c81ed688cfc463b5e91724dc29b3da37a9f232293ac034a7f219818a20dd480","ssdeep":"1536:yg73zhq0GvgJ3ZKDLPdNoLtHmjF5hY95OC5uSHNx1NxI:bY0GFI+F5Q5OMNzNy","tlshash":"7f8308457260316242efb2b1512f060fb235692ee907847d78a8c9f42eb5d88727bf7d","first_seen":"2026-05-07T06:09:39.83731Z","last_seen":"2026-07-30T12:04:47.572651Z","times_seen":6,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.073Z","timestamp":1785413021073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapper.leadball.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:11:01 GMT\r\nexpires: Thu, 29 Jul 2027 13:11:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82360\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29844,"size_decoded":30656,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-07-30T12:04:47.556408Z","times_seen":16775,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":60,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/02fa8099/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:41.319Z","timestamp":1785413021319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /s/player/02fa8099/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/1azQZTgqR1Y\r\nCookie: __Secure-YNID=20.YT=GkNX5wJV1A7oiWZ1y6-QiyVEqPhfBM0qxxuM1TP77t2WCxzfIFVnEQqFW6rTQY5h95dJCod5riBQeRjPch6zfPlAyXE3kX7oZIW-C5MUSvtg5L2RtzQ9bLyJc8RGtNUB3daYWsebZRrIzbvTirNqZIEIL8y9QO04CLAZl7S_VlAse38hPwNVykaqs59QOcCQ9_8TGdv9P1Z7ym7oUlQYTlXPicwyILDofjtmrxyobOg-090UfL3HjU75rVZ190IDndWjsAVsIEY1jfEK_PTC5BuFK7J_vbzBouqqg656TAnIZ-KFkRpCONRrbvh25Jyw-zE3n9F-6marJzQOZoPetw; YSC=SjQ3arW38fc; VISITOR_INFO1_LIVE=lCXxExTSJvs; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgGQ%3D%3D; __Secure-ROLLOUT_TOKEN=CKCix8HRkKO1GxDYjJfnrfqVAxjYjJfnrfqVAw%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 57397\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 07:30:06 GMT\r\nexpires: Wed, 28 Jul 2027 07:30:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 28 Jul 2026 04:26:51 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 189215\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":526472,"size_decoded":58077,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"51ea0a83aa56d90e9a1a96579e884dc9","sha1":"e8fb1452c29690e34580cbf387f284d82e8122b4","sha256":"4501bc83f7fe6c0de41512e5f91fcf9457f7a8a3aab18e3c38973eb6a6ae0b55","sha512":"663e483f3bbd80f0e848691e076d3704414f1aae1e2ba67149f4a04acff8d643ae2089d3456ba2c93287961c8ba787502b505763d8094ca9a9bf91f84f147f98","ssdeep":"6144:X8d5Fe/qoMOg7USBfUIoImM5Kia68Oi4u7:QYxMOg7USiIoIr5Kia6Tg","tlshash":"48b4d972f0a1233cb2178d99a7d9d54d7339d983e2e12aeff11166dacbc77811326206","first_seen":"2026-07-25T05:48:23.722799Z","last_seen":"2026-07-30T13:17:16.985507Z","times_seen":356,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.HDMuiECnvBo.L.F4.O/am=AAAAgA/d=1/br=1/rs=AGKMywFbi_s1VTnBswV1txmRK4pXo41itw/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:41.320Z","timestamp":1785413021320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.HDMuiECnvBo.L.F4.O/am=AAAAgA/d=1/br=1/rs=AGKMywFbi_s1VTnBswV1txmRK4pXo41itw/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/1azQZTgqR1Y\r\nCookie: __Secure-YNID=20.YT=GkNX5wJV1A7oiWZ1y6-QiyVEqPhfBM0qxxuM1TP77t2WCxzfIFVnEQqFW6rTQY5h95dJCod5riBQeRjPch6zfPlAyXE3kX7oZIW-C5MUSvtg5L2RtzQ9bLyJc8RGtNUB3daYWsebZRrIzbvTirNqZIEIL8y9QO04CLAZl7S_VlAse38hPwNVykaqs59QOcCQ9_8TGdv9P1Z7ym7oUlQYTlXPicwyILDofjtmrxyobOg-090UfL3HjU75rVZ190IDndWjsAVsIEY1jfEK_PTC5BuFK7J_vbzBouqqg656TAnIZ-KFkRpCONRrbvh25Jyw-zE3n9F-6marJzQOZoPetw; YSC=SjQ3arW38fc; VISITOR_INFO1_LIVE=lCXxExTSJvs; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgGQ%3D%3D; __Secure-ROLLOUT_TOKEN=CKCix8HRkKO1GxDYjJfnrfqVAxjYjJfnrfqVAw%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 0\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 12:55:17 GMT\r\nexpires: Thu, 29 Jul 2027 12:55:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 29 Jul 2026 09:09:15 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nage: 83304\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":856,"mime_type":"text/css; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T13:31:02.025041Z","times_seen":17616648,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.60gHVOycP-w.2021.O/am=AAAAgA/d=1/excm=base,root/br=1/rs=AGKMywGVxiDxhd1zzjSDYgn5Ajtm8-QDYQ/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:41.321Z","timestamp":1785413021321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.60gHVOycP-w.2021.O/am=AAAAgA/d=1/excm=base,root/br=1/rs=AGKMywGVxiDxhd1zzjSDYgn5Ajtm8-QDYQ/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/1azQZTgqR1Y\r\nCookie: __Secure-YNID=20.YT=GkNX5wJV1A7oiWZ1y6-QiyVEqPhfBM0qxxuM1TP77t2WCxzfIFVnEQqFW6rTQY5h95dJCod5riBQeRjPch6zfPlAyXE3kX7oZIW-C5MUSvtg5L2RtzQ9bLyJc8RGtNUB3daYWsebZRrIzbvTirNqZIEIL8y9QO04CLAZl7S_VlAse38hPwNVykaqs59QOcCQ9_8TGdv9P1Z7ym7oUlQYTlXPicwyILDofjtmrxyobOg-090UfL3HjU75rVZ190IDndWjsAVsIEY1jfEK_PTC5BuFK7J_vbzBouqqg656TAnIZ-KFkRpCONRrbvh25Jyw-zE3n9F-6marJzQOZoPetw; YSC=SjQ3arW38fc; VISITOR_INFO1_LIVE=lCXxExTSJvs; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgGQ%3D%3D; __Secure-ROLLOUT_TOKEN=CKCix8HRkKO1GxDYjJfnrfqVAxjYjJfnrfqVAw%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 149426\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 12:48:08 GMT\r\nexpires: Thu, 29 Jul 2027 12:48:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 29 Jul 2026 09:09:15 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 83733\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":440829,"size_decoded":150339,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"f1a9f5aa3750f41f47861f6b2ca750b9","sha1":"d59b2191a01b2f7f2ec1b76606373c66d7e9b0dc","sha256":"16821d380a8b2be85969068647210578ac69a04aad7cf6286c8048c5828ccca1","sha512":"bd43ffba9048bfc0e31ec295ffba1a92045a7093d7228c0a7530b9214351d4569fd612967de3a347a2fe4f93bc4072632a78b651fbd92735094cc5c01021cd74","ssdeep":"6144:Scu7wI2O42b4ERqI8MV99d5fWLW7FVquw6Sm4nfAkoX2gW6Gm:reb4ERq+AJ6Sm4fAkoX2gW6Gm","tlshash":"77945dd977a2707392a2f5a5902f0103b17a6896f44c8c7cb7c8ddd16eb494942bbf38","first_seen":"2026-07-29T18:04:12.060993Z","last_seen":"2026-07-30T14:22:28.338906Z","times_seen":106,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:42.009Z","timestamp":1785413022009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://www.youtube.com\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 272\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Jul 2026 10:01:48 GMT\r\nexpires: Tue, 27 Jul 2027 10:01:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 06 Sep 2023 03:18:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin\r\nage: 266514\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":478,"size_decoded":1017,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e78ea4caa31c35bac97a41e5930ffe8","sha1":"dbf99131b9b5087e664b9fdc7097c97655474517","sha256":"6fa88a20839537ae66da730e5bd183035265176d972bc8df075b89da0c6186ea","sha512":"cf798ef67c90f90f23635beb202095a2c76052d491c224aa14535bb9b16f28fa9a850b8db887f158afd01d634aecb9e2b05a27efdfd225d3583e6297bdd78b43","ssdeep":"","tlshash":"2ef09e6d577829d8930f87c0be5974127d9f23e85194b3b541d4f9326138ee2d141cd9","first_seen":"2025-05-26T15:52:21.952281Z","last_seen":"2026-07-30T13:17:17.042124Z","times_seen":47526,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":16,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:42.539Z","timestamp":1785413022539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:20 GMT","end":"Mon, 21 Sep 2026 08:39:19 GMT"},"fingerprint":{"sha1":"2A:E6:04:0E:76:A4:02:27:67:28:31:4D:E5:61:19:26:CA:0E:32:84","sha256":"D4:ED:C4:F8:DB:31:8A:2D:35:15:01:14:C0:49:CB:47:FF:5B:CC:17:14:82:63:9B:A8:6F:61:4D:AA:E5:96:94"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Thu, 30 Jul 2026 12:03:42 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":555,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T13:31:02.025041Z","times_seen":17616648,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadball.ru/whats/whatsapp_logo_2.php?c1=ffffff\u0026c2=00000000","fqdn":"leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.898Z","timestamp":1785413020898,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /whats/whatsapp_logo_2.php?c1=ffffff\u0026c2=00000000 HTTP/1.1\r\nHost: leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T13:31:02.025041Z","times_seen":17616648,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/images/pero.png","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.901Z","timestamp":1785413020901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /images/pero.png HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 4674\r\nlast-modified: Mon, 23 Sep 2019 19:56:59 GMT\r\netag: \"5d89238b-1242\"\r\nexpires: Sun, 13 Sep 2026 12:03:40 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4674,"size_decoded":5017,"mime_type":"image/png","magic":"PNG image data, 150 x 96, 8-bit/color RGBA, non-interlaced","md5":"e76c26e2cb87d840a9e4772ccfe78368","sha1":"601ed2a634129daf0e784d2a0cf863566bba41b0","sha256":"45f4b91708063798f4deec348f56d72d8d8c70d273748d7472b5d6211d623f2d","sha512":"6b534c9e846359d38db17a01de82aa15f797cdfb450dee556373bcba018a7087b73f2301c02efe46dcaf7d39340df03c1b90021a6257c2a70909be1975395c54","ssdeep":"96:PY29SSTswOmPoHgfVP5gk/WGSvgeZONx0KWX0DT/:PPswOmPEOvEnH2AkDj","tlshash":"0aa17d96eb719a169028dd82b4eac52e8843d4c48cdbed3167cbc5f55c903f30a856ca","first_seen":"2026-07-30T03:04:38.735487Z","last_seen":"2026-07-30T12:04:47.550435Z","times_seen":5,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.066Z","timestamp":1785413021066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapper.leadball.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:19 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82402\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-30T13:30:20.6869Z","times_seen":318335,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":8,"connect":30,"send":0,"wait":20,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.083Z","timestamp":1785413021083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapper.leadball.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 10:11:45 GMT\r\nexpires: Mon, 26 Jul 2027 10:11:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352316\r\nlast-modified: Mon, 15 Sep 2025 16:30:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":35156,"size_decoded":35969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35156, version 1.0","md5":"062c1f2aaf2d4de07ad2a2f21c17ffc0","sha1":"3fd1f07343bd33a53cd374f7f107dbdf9effae03","sha256":"d5bab8e28732fe3d10dcef4f77b9c248605bbb2a87d289a2539251ceafab536a","sha512":"7ab522d8bc41128be5a15f2cb91f851f6dc5e437afbb90e6191bbe63d9b94a35911f04701fb2b291362b2ae0f0cc639dec2d15e53928afc5769590a2937e81cf","ssdeep":"768:is48okTArkNSgZJAf5jkRcaUNt8wrNPCbJktQV+n+NUB/wo8IEH:5hNTtNSgZJMjkRBUMwrNPC9NV+n+o81H","tlshash":"22f2e172c3787192ae0985760d60cec8986bb2098f7658b0143fdd38ee45345a3f6e6c","first_seen":"2025-05-29T19:30:52.507782Z","last_seen":"2026-07-30T13:16:43.920815Z","times_seen":22421,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":46,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/02fa8099/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:41.323Z","timestamp":1785413021323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /s/player/02fa8099/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/1azQZTgqR1Y\r\nCookie: __Secure-YNID=20.YT=GkNX5wJV1A7oiWZ1y6-QiyVEqPhfBM0qxxuM1TP77t2WCxzfIFVnEQqFW6rTQY5h95dJCod5riBQeRjPch6zfPlAyXE3kX7oZIW-C5MUSvtg5L2RtzQ9bLyJc8RGtNUB3daYWsebZRrIzbvTirNqZIEIL8y9QO04CLAZl7S_VlAse38hPwNVykaqs59QOcCQ9_8TGdv9P1Z7ym7oUlQYTlXPicwyILDofjtmrxyobOg-090UfL3HjU75rVZ190IDndWjsAVsIEY1jfEK_PTC5BuFK7J_vbzBouqqg656TAnIZ-KFkRpCONRrbvh25Jyw-zE3n9F-6marJzQOZoPetw; YSC=SjQ3arW38fc; VISITOR_INFO1_LIVE=lCXxExTSJvs; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgGQ%3D%3D; __Secure-ROLLOUT_TOKEN=CKCix8HRkKO1GxDYjJfnrfqVAxjYjJfnrfqVAw%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 474445\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 07:38:45 GMT\r\nexpires: Wed, 28 Jul 2027 07:38:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 28 Jul 2026 04:26:51 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 188696\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1595374,"size_decoded":475133,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (962)","md5":"e4a7132bcdecd9d47693d9d83f725d19","sha1":"ce48fde4ee29308ea152ec6889cb6e9d4d572a27","sha256":"eec6fae881e692730a1bda0f69cfaf85e7c922cf6a3bbc9bd67e8a73cb38d9d8","sha512":"191c05f571174c9a0362a319592099c51a4d1f43e5f0b29535cba48bb37500fb3610f5bced0a2f0c35ad1389b7ad91a28cf9e20455a08aa205a15793d539c2ba","ssdeep":"12288:4wj8Y5eJsuyKwzYLjfr9YfdVEHt+369EKhD+tjmf8+/P:78Y5eslzYLX9Yfh69EKhDtfb","tlshash":"fa255bd936d2b46743d3f0e5192f014ab13b191454ece62cf9a9eae41c6090e927bff8","first_seen":"2026-07-28T18:07:12.624788Z","last_seen":"2026-07-30T14:22:28.277578Z","times_seen":120,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:41.992Z","timestamp":1785413021992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 05:41:18 GMT\r\nexpires: Fri, 30 Jul 2027 05:41:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 22944\r\nlast-modified: Thu, 29 May 2025 23:30:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22796,"size_decoded":23608,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-07-30T12:04:47.54527Z","times_seen":19968,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:44.642Z","timestamp":1785413024642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Goog-Request-Time: 1785413024625\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtsQ1h4RXhUU0p2cyid-6zTBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgGWLfAgrcAjIwLllUPUdrTlg1d0pWMUE3b2lXWjF5Ni1RaXlWRXFQaGZCTTBxeHh1TTFUUDc3dDJXQ3h6ZklGVm5FUXFGVzZyVFFZNWg5NWRKQ29kNXJpQlFlUmpQY2g2emZQbEF5WEUza1g3b1pJVy1DNU1VU3Z0ZzVMMlJ0elE5Ykx5SmM4Ukd0TlVCM2RhWVdzZWJaUnJJemJ2VGlyTnFaSUVJTDh5OVFPMDRDTEFabDdTX1ZsQXNlMzhoUHdOVnlrYXFzNTlRT2NDUTlfOFRHZHY5UDFaN3ltN29VbFFZVGxYUGljd3lJTERvZmp0bXJ4eW9iT2ctMDkwVWZMM0hqVTc1clZaMTkwSURuZFdqc0FWc0lFWTFqZkVLX1BUQzVCdUZLN0pfdmJ6Qm91cXFnNjU2VEFuSVotS0ZrUnBDT05ScmJ2aDI1Snl3LXpFM245Ri02bWFySnpRT1pvUGV0dw%3D%3D\r\nX-Goog-Event-Time: 1785413024625\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260729.00.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 955694092\r\nX-YouTube-Page-Label: youtube.embeds.web_20260729_00_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1785413021450\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C555%2C342\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 13588\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/1azQZTgqR1Y\r\nCookie: __Secure-YNID=20.YT=GkNX5wJV1A7oiWZ1y6-QiyVEqPhfBM0qxxuM1TP77t2WCxzfIFVnEQqFW6rTQY5h95dJCod5riBQeRjPch6zfPlAyXE3kX7oZIW-C5MUSvtg5L2RtzQ9bLyJc8RGtNUB3daYWsebZRrIzbvTirNqZIEIL8y9QO04CLAZl7S_VlAse38hPwNVykaqs59QOcCQ9_8TGdv9P1Z7ym7oUlQYTlXPicwyILDofjtmrxyobOg-090UfL3HjU75rVZ190IDndWjsAVsIEY1jfEK_PTC5BuFK7J_vbzBouqqg656TAnIZ-KFkRpCONRrbvh25Jyw-zE3n9F-6marJzQOZoPetw; YSC=SjQ3arW38fc; VISITOR_INFO1_LIVE=lCXxExTSJvs; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgGQ%3D%3D; __Secure-ROLLOUT_TOKEN=CKCix8HRkKO1GxDYjJfnrfqVAxjYjJfnrfqVAw%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13588,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260729.00.00\",\"configInfo\":{\"appInstallData\":\"CJ37rNMGEIiQ0RwQh6zOHBCBzc4cELbb0RwQ4OrRHBC9irAFELnw0RwQ2oXQHBDK-4ATEObr0RwQi_fPHBDa984cEPDe0RwQtviAExD299EcEMGP0BwQvbauBRCu1s8cEMn2gBMQuOTOHBCG4YATEJ2GuCIQ-fLRHBCfz4ATEMPj0RwQg4e4IhC9mbAFEJmNsQUQ3rzOHBCN5NEcEPLM0RwQpKnRHBAAEL6E0RwQ6fjRHBD2q7AFEPG00BwQntCwBRCJsM4cELyk0BwQ4LfRHBCljtIcEPyyzhwQi4e4IhCOkNEcEPGcsAUQzN-uBRCNtYATENqHuCIQ9OnRHCp4Q0FNU1ZCVlgtWnEtRExpVUVwUUNuQTc1RlhLakJ1RVdxTlVQMUFNQXF3c0E1QWJKQlo4RzZ3WUFfYl9wQ3pLZ3JBUURrSzRELXlhMjVBYmtoUmVjNWdTSVhOblZCZDBzNVVhWTN3WUZBZ0tsMXVFZTJ3WWRCdz09MAA%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\",\"windowWidthPoints\":555,\"windowHeightPoints\":342},\"thirdParty\":{\"embedUrl\":\"https://whatsapper.leadball.ru/\"}},\"events\":[{\"eventTimeMs\":1785413021462,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021466,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021474,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021474,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021475,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021475,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021711,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021712,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021135,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413020956,\"latencyActionBaselined\":{\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021039,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021135,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021153,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413020960,\"latencyActionTicked\":{\"tickName\":\"ndnss\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413020981,\"latencyActionTicked\":{\"tickName\":\"ndnse\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413020982,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021039,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021000,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021039,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021320,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021357,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021309,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021375,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021308,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021351,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021309,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021364,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021309,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021331,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021717,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021450,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021723,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021725,\"latencyActionInfo\":{\"serverTimeMs\":71,\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1785413021762,\"screenCreated\":{\"csn\":\"B5NE5qDaguytN4-f\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"nT1rasS9A_Lzq7YPk_2GgQI\"}}}},\"context\":{\"lastActivityMs\":\"16\"}},{\"eventTimeMs\":1785413021762,\"latencyActionInfo\":{\"clientScreenNonce\":\"B5NE5qDaguytN4-f\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1785413021763,\"screenCreated\":{\"csn\":\"yErwrgV445gw51if\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"B5NE5qDaguytN4-f\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1785413021763,\"visualElementHidden\":{\"csn\":\"B5NE5qDaguytN4-f\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1785413021763,\"latencyActionInfo\":{\"clientScreenNonce\":\"yErwrgV445gw51if\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1785413021763,\"visualElementAttached\":{\"csn\":\"yErwrgV445gw51if\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMI4YWZ5636lQMVUqf0Bx3X2C1LygEEnmn8Dw==\"}]},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1785413021765,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1785413021765,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"20\"}},{\"eventTimeMs\":1785413021791,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"1ukxhRWLFnQe3siE\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"46\"}},{\"eventTimeMs\":1785413021793,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"47\"}},{\"eventTimeMs\":1785413021800,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"nWEBl7hIt2hGGHjF\",\"clientScreenNonce\":\"B5NE5qDaguytN4-f\"},\"context\":{\"lastActivityMs\":\"54\"}},{\"eventTimeMs\":1785413021801,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"nWEBl7hIt2hGGHjF\",\"clientScreenNonce\":\"yErwrgV445gw51if\"},\"context\":{\"lastActivityMs\":\"55\"}},{\"eventTimeMs\":1785413021902,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"156\"}},{\"eventTimeMs\":1785413021903,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"157\"}},{\"eventTimeMs\":1785413021904,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"158\"}},{\"eventTimeMs\":1785413021908,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"163\"}},{\"eventTimeMs\":1785413021936,\"visualElementAttached\":{\"csn\":\"yErwrgV445gw51if\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"189\"}},{\"eventTimeMs\":1785413021936,\"visualElementShown\":{\"csn\":\"yErwrgV445gw51if\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"190\"}},{\"eventTimeMs\":1785413021989,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"243\"}},{\"eventTimeMs\":1785413022003,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"257\"}},{\"eventTimeMs\":1785413022003,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"257\"}},{\"eventTimeMs\":1785413022003,\"visualElementAttached\":{\"csn\":\"yErwrgV445gw51if\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"258\"}},{\"eventTimeMs\":1785413022003,\"visualElementShown\":{\"csn\":\"yErwrgV445gw51if\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"258\"}},{\"eventTimeMs\":1785413022003,\"visualElementAttached\":{\"csn\":\"yErwrgV445gw51if\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"258\"}},{\"eventTimeMs\":1785413022003,\"visualElementShown\":{\"csn\":\"yErwrgV445gw51if\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"258\"}},{\"eventTimeMs\":1785413022004,\"visualElementShown\":{\"csn\":\"yErwrgV445gw51if\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1,\"clientData\":{}},\"context\":{\"lastActivityMs\":\"258\"}},{\"eventTimeMs\":1785413022008,\"visualElementShown\":{\"csn\":\"yErwrgV445gw51if\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1,\"clientData\":{}},\"context\":{\"lastActivityMs\":\"261\"}},{\"eventTimeMs\":1785413022008,\"visualElementShown\":{\"csn\":\"yErwrgV445gw51if\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1,\"clientData\":{}},\"context\":{\"lastActivityMs\":\"261\"}},{\"eventTimeMs\":1785413022093,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"348\"}},{\"eventTimeMs\":1785413022224,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"478\"}},{\"eventTimeMs\":1785413022518,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIDQ==\"},\"context\":{\"lastActivityMs\":\"773\"}},{\"eventTimeMs\":1785413022520,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"775\"}},{\"eventTimeMs\":1785413022622,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"876\"}},{\"eventTimeMs\":1785413022623,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"877\"}},{\"eventTimeMs\":1785413022625,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"C3r23r9JvRBW2Q94\"},\"context\":{\"lastActivityMs\":\"879\"}},{\"eventTimeMs\":1785413023521,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAABCcQA==\"},\"context\":{\"lastActivityMs\":\"1774\"}},{\"eventTimeMs\":1785413023521,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggBIhEKAwoBawoGCgRhR0lmEgIIAQ==\"},\"context\":{\"lastActivityMs\":\"1776\"}},{\"eventTimeMs\":1785413023522,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAAC5AIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgFvCgYKBGFHSWYSCREAAAAAANB4QCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAABAIhgKAwoBawoGCgRhR0lmEgkRAAAAAAAAAAA=\"},\"context\":{\"lastActivityMs\":\"1776\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"nT1rasS9A_Lzq7YPk_2GgQI\",\"clientCounter\":\"28450\"}}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Thu, 30 Jul 2026 12:03:44 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28,"size_decoded":381,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-07-30T13:17:17.057746Z","times_seen":282595,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.084Z","timestamp":1785413021084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 06:33:56 GMT","end":"Tue, 29 Sep 2026 07:33:46 GMT"},"fingerprint":{"sha1":"95:C5:B1:CC:FD:2D:A2:1D:9E:F8:29:11:70:8F:C2:32:DB:0A:16:D8","sha256":"67:23:C0:55:AC:EE:9D:BF:1F:32:F6:C6:31:3A:5A:3F:85:B5:50:88:71:96:38:D1:BB:37:21:B0:0C:CF:B9:EA"}}},"request":{"raw":"GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapper.leadball.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 12:03:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\netag: \"af7ae505a9eed503f8b8e6982036873e\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:55 GMT\r\ncdn-cachedat: 08/01/2025 14:01:18\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1333\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 45cec85c2afb6828b98ce9490a2b84f6\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nage: 94136\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a23438b5c9a2b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":78088,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-07-30T13:24:16.7229Z","times_seen":524989,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/css/styles_new/style.css","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.880Z","timestamp":1785413020880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /css/styles_new/style.css HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Oct 2019 11:48:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d99d4ab-8ba7\"\r\nexpires: Sun, 13 Sep 2026 12:03:40 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35751,"size_decoded":5940,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"2cc94d56419beeec898be1880a00456d","sha1":"89a5d0e35a49c0529df6e4efa4206cf1da2e761e","sha256":"8403ca28f24d837f4b950eec47413c976ad867e112583f3ae8b7fc31eecd2156","sha512":"b9cb90350ca6855adc158133ba93dada6277a4ed3fbcb3af68c59d5b8c216203825beee5694d6f0ac435d9c74e89c9ccb56889c93e5c51d85fc598924b8a9bb5","ssdeep":"768:BKRN83DOeb9qQyblVECAzoHw2oXA7toXFS7E5xUrjTKNO2H4XH/YwFqwbqzwBzwZ:BBDOeb9qQyblVECA8Hw2oXmtoXFS7E5r","tlshash":"21f24f161c802e44411bd8347fceae10d62e5233591fae99b17926bde385ce9127efce","first_seen":"2026-07-30T03:04:38.717727Z","last_seen":"2026-07-30T12:04:47.570861Z","times_seen":5,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/images/su.png","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.902Z","timestamp":1785413020902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /images/su.png HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 6573\r\nlast-modified: Mon, 23 Sep 2019 19:57:05 GMT\r\netag: \"5d892391-19ad\"\r\nexpires: Sun, 13 Sep 2026 12:03:40 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6573,"size_decoded":6916,"mime_type":"image/png","magic":"PNG image data, 150 x 140, 8-bit/color RGBA, non-interlaced","md5":"90951970fffda746869fd310808ce1a7","sha1":"1c866569c5b8f901531bf63f0438efb90ea06b91","sha256":"bb4680481461db179a152db83cbbce17fc0a5975ccae3422f385fbb668f99f91","sha512":"8602989b6c52c088b398abf3110700a6f9efec2275caae4dd397ccb83ddab65333ebc189d0ebe782c4fa1cc669c82ebb0d151fddc1039690b6d667dea9616add","ssdeep":"96:cY2AdcfN6VNuL6+kIjkdchDwfHfVQN0SuKqYdcvb1H0HkTVYZYSv0IVtFPKS9:cxfNmkkx6Jc/FVKqYdczVpgfhVtNKS9","tlshash":"94d1afc822c934c45bb9d9c545f1e660ca6689631dc0b21277f398c6009aa9b8c2cccd","first_seen":"2026-07-30T03:04:38.739976Z","last_seen":"2026-07-30T12:04:47.575311Z","times_seen":5,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjtGyNL4U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.076Z","timestamp":1785413021076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjtGyNL4U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapper.leadball.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:16:45 GMT\r\nexpires: Thu, 29 Jul 2027 13:16:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82016\r\nlast-modified: Wed, 27 Aug 2025 19:19:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18108,"size_decoded":18920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18108, version 1.0","md5":"d919015fb9ab2191b9541ac982746799","sha1":"ca30ddad824629de2bee6872d54158e65c6c9738","sha256":"0cb2c5c2d5750826f2ec6c675d772f8014b7bb708c28128a76beba154b43ae49","sha512":"23386556a818bc33a15808c84088673434d43da9b00c7c5d2a58068991460efd21b6e5c80c28c29dcf9546d2471b2721daf15443cf59cee7f6a13b469d5939e2","ssdeep":"384:uTOA+mwd/AXdXXnP0mOrkn5Oa1ArLNSAJS7xfylGNAQhvd/Rl:Nmg/IdHn8rYX1aLNSmS7tylcAQJN","tlshash":"c082d1ac68fed31ef11db179b3461eba1a4484068676cbc121e77e2280247559b32dd9","first_seen":"2025-09-03T01:47:43.100585Z","last_seen":"2026-07-30T12:04:47.568123Z","times_seen":1096,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.082Z","timestamp":1785413021082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapper.leadball.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 23:01:51 GMT\r\nexpires: Wed, 28 Jul 2027 23:01:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133310\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26588,"size_decoded":27401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-07-30T12:04:47.549403Z","times_seen":12669,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":39,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/images/favicon.png","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.360Z","timestamp":1785413021360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 787\r\nlast-modified: Wed, 22 Jul 2020 07:02:48 GMT\r\netag: \"5f17e498-313\"\r\nexpires: Sun, 13 Sep 2026 12:03:41 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":787,"size_decoded":1128,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"c5088e888c97ad440a61d247596f88e5","sha1":"865a0d1bb7e1245e046c5e1bae988cce53330280","sha256":"d0cadf240e89340b93df35240e7809039c1c574be05fbe2cf3243e2f487bc9ec","sha512":"ae2a039fc7c2ec70ad33eec78b3392d96d7899fb8bfffce45808c5d9e1ae6b3a73607b85d04433de16da43a8c007cb158e5d461302845edd15cba387d4b7e946","ssdeep":"","tlshash":"3101c530a610efb8c39b8eaaa6a0c2741219119d967aa63a080de03fce608c042d003c","first_seen":"2023-05-03T14:02:32Z","last_seen":"2026-07-30T12:04:47.5797Z","times_seen":1560,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/0yu1L0TTWwn4JrxTGrUURY4SClWBtj5J3j2yLp5o0I8.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:42.227Z","timestamp":1785413022227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /js/th/0yu1L0TTWwn4JrxTGrUURY4SClWBtj5J3j2yLp5o0I8.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23517\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Jul 2026 17:04:17 GMT\r\nexpires: Tue, 27 Jul 2027 17:04:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 Jul 2026 10:00:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 241165\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":61916,"size_decoded":24328,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (60656)","md5":"2405a4982598196aedf5a014bdcbcb24","sha1":"c681d510e0db42bd1049dd589f540ae90d523d77","sha256":"d32bb52f44d35b09f826bc531ab514458e120a5581b63e49de3db22e9e68d08f","sha512":"c0d8b8d7f698d46aa7be0654e8d48008bd953e5d269b0b9ae99b9313b42721c93c2371287559d625b48dd1df988b3bf82b651fe35619328b7de53bdd0d0a1353","ssdeep":"1536:jpjfdev3FuvJ2XPtZ0X/3Kt3558jqI2f2qHzWJppBo:mNuR4tCXit3FfXkpq","tlshash":"8d5319cfb2c2733149e770f2106b410a52bea6689cc8685fb546faf5297084f5877f29","first_seen":"2026-07-29T21:44:57.744334Z","last_seen":"2026-07-30T14:13:14.14473Z","times_seen":81,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":3,"connect":22,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/css/styles_new/responsive.css?2","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.881Z","timestamp":1785413020881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /css/styles_new/responsive.css?2 HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Dec 2019 15:09:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5df64ca1-1406\"\r\nexpires: Sun, 13 Sep 2026 12:03:40 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5126,"size_decoded":1595,"mime_type":"text/css","magic":"ASCII text","md5":"2ec66011eb186a4b1b8a3535b5b5e3fb","sha1":"cd8cfdf35e7b8b55629a356aa867429e732fcaf7","sha256":"ac573263f081ce5bda1a2a1fba337ec456d571a0d5b7a77f2c9c094a57900ed7","sha512":"4b59549b34e26e4aa3f9558cfc07b5c8551e6548cd29754b2cdb712f774871f12dd683677c9b750dc2c6205807696ac4002641eab1986bcd0e11b7217d9a04ab","ssdeep":"48:fFH6Ja32FH6JpQDuUEJpuH6JpQJebUqvI2vylps3ujlPU6JFyIvdSF24JxRmSThc:gJwJtJobEoJoIvZAnimV1nMX0JAcsl","tlshash":"ffb12203df801108550be1d9bc6762a4137a1113ef555fded4762929fbce29805f2deb","first_seen":"2026-07-30T03:04:38.711644Z","last_seen":"2026-07-30T12:04:47.576162Z","times_seen":5,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadball.ru/whats/float.php?id=TrKH7_Grf52c47huT90Q","fqdn":"leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.086Z","timestamp":1785413021086,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /whats/float.php?id=TrKH7_Grf52c47huT90Q HTTP/1.1\r\nHost: leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T13:31:02.025041Z","times_seen":17616648,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:41.990Z","timestamp":1785413021990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 05:41:18 GMT\r\nexpires: Fri, 30 Jul 2027 05:41:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 22943\r\nlast-modified: Thu, 29 May 2025 23:30:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22796,"size_decoded":23608,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-07-30T12:04:47.54527Z","times_seen":19968,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/1azQZTgqR1Y/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AHUBoAC4AOKAgwIABABGDYgWChyMA8=\u0026rs=AOn4CLDH-J3_ATgknNNLck9I2NAvTD24uQ","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.86","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:41.996Z","timestamp":1785413021996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:24 GMT","end":"Mon, 21 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"99:EB:44:FC:A9:EB:62:72:A5:7C:E5:77:BF:06:63:47:1B:54:C7:D7","sha256":"CD:4A:F6:7A:9F:60:AA:84:9F:37:94:1B:BE:E7:AB:41:46:38:9E:68:4A:4F:36:B3:D0:84:EC:FA:44:D7:A9:DD"}}},"request":{"raw":"GET /vi/1azQZTgqR1Y/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AHUBoAC4AOKAgwIABABGDYgWChyMA8=\u0026rs=AOn4CLDH-J3_ATgknNNLck9I2NAvTD24uQ HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24726\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 12:00:18 GMT\r\nexpires: Thu, 30 Jul 2026 14:00:18 GMT\r\ncache-control: public, max-age=7200\r\netag: \"0\"\r\ncontent-type: image/jpeg\r\nage: 204\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24726,"size_decoded":25389,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3","md5":"bc7471629a7d655e917939082b52cac1","sha1":"7eecd40156a6dca8a696b71157160478ef732dfb","sha256":"7bf685f8e0501c4bed048d51b0d1baced3ceb2aad1a54b2df367da3366d58222","sha512":"1a59a50e3f6459584d5187b08ca75daa9574d506be5701096961ea5cf46370995612cd25335240641e48a13519fd2618f185f3b24932d8e21229ce12bfd6b2bd","ssdeep":"768:h/M4eFPeRGTwxkmFIzqyIr5t+8NNSGM0huG:5mY0mFgPIr5k8iGRR","tlshash":"fdb28eeb49e4e10f1c9788965289b5fc7e43a116938f304678a64c3fdb0c81d79efa48","first_seen":"2026-07-30T03:04:38.721116Z","last_seen":"2026-07-30T12:04:47.546438Z","times_seen":5,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":16,"receive":13,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:42.537Z","timestamp":1785413022537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:20 GMT","end":"Mon, 21 Sep 2026 08:39:19 GMT"},"fingerprint":{"sha1":"2A:E6:04:0E:76:A4:02:27:67:28:31:4D:E5:61:19:26:CA:0E:32:84","sha256":"D4:ED:C4:F8:DB:31:8A:2D:35:15:01:14:C0:49:CB:47:FF:5B:CC:17:14:82:63:9B:A8:6F:61:4D:AA:E5:96:94"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1823\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1823,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$hhk5GX1RAAZADYULYA3eDj-EfQ9070unAEABEArZ1KFmY9Vu0Q2yDWiMvXHMRKKDpMLkPUhLPbBxcHWQ8hnSRJ0dubVho60DxchH1MO0j4UB7x31gnoBM7TongAAAOHOAAAADvQBB-IAUr9KmucBNFw0GYjHq3PqZjD_1AS6Ba0Rx4p8QN2-Dn_XPwszSG-5eChEHNTBRT15OXnw5nI90IyjiqC1dYt9dO53EMKMjoLXmds4SK7qxBy29agFBIMmKflxhZhrSgHLK01W3a2J39VXiOXwp5U1Z2oT942_ksEwCcntPAk8TzunryMAdMwY_PPqWiTddTmorkpcr5fAQ0zGsdtn5SA8sztaWj8rJGKcCipoXAh1xVden8OKGv2cxhLEOjeXwjHTF4e24JazmFt7gt5DxYN_MpCc62jgqJhlETye4VXdou0lR_fn0oVp0ll9edYEPKaJijMhAZmWSlJY8Eg2QrmT1WpvU333wP69iX4MH1gaH2peepSOXwlYLX_LIouEvDN5SH3Hm54FZeEET3EVpqeT8KGRVFYXUZyCh-aZ0ArYHzCUND_xomHghm8eBxi_srtX4QaZRnjOBRO-jChs2CrQy-KyICgFSG9FmWOGo3nqenOAj65OR0B3BMIFzMQv6yBzF6ScY-yH7OjDSxIvSfVXUUbgonbjQwilZ777eqYqYbloAQ8sFigeNR5yxx_95-6AuoM-wa1w6I59Q_UIdVGCD2Of77I_p3o3Pinm-rUm6k1N8CsLv4D0-MEZvi_KL4-cG_0OV8IuJkThr3elIRYMetODOJMbXRCUWd2PvHcDLxBH-Eo-7zXmsiZ9Y-xtSpDUYdKuLzdlqid33xITCJB-t_a-W6WzTfD4QO16J0CzQv6594L9-BBxUZsk3HwJZtIydRZwhRhhZ73It0mF0FoQh3_yQrHSWKR0iUO_rUL3WP13L67Zh4W_HxlQNiZtxDbIVLcmyir3QiGpEIbvYrhc4iQZe8R88Abgda7IM0_3WvcbHEfXgp2HWbDOEBmYwAhao50Jr1EZPpQLzCS0yqCe5g_7QjzWuORJ6zBAPisrJVSmdSyYU7yeUL5qN7HMr5dJ5IkJFD35j2j_jSWAKMRLInn88UGsa7WP0mbFC7MF8IoUDhPTUR6mZSJ5AeijB90JmDRmXya--xMzAEPHQJwBoPriK5zuTG4wptr7OfDUuscXKRmDAHOZAu5UHhdwpO01VomKDkwFXg3muK_Dd8sErqqmREUuJdfGfHSTa62Pw2BWVRM0U3CrgUPjLWJsqTq1B2fXWfg0B61_AOOyg57tTkpgPLX82AvAs7CRqM2s5r0TwliQXi2wvA8Bj5ZINZh0VAKHPjMnmEFPqIYDfoN3i8SbtRS-4bLHkcTl-2zx8-Ty1ZEphB1qo9a1aTXQhza2dfLs9HuNPNaqHslxpxkkXy9NoFa8t5srw8QKtkrRpeZg8kOignEmAUPumr__O_raIUv00xgFsc1Q5aAtH4AbDDlRwmkViftMIq1PV6gF0vDknnFkbYy6vKowzv56FPo15qYXebvh3p3m1Z-VPsMSmDe8hzFeQx6_Lhx_pkcblgKkjgQo_btvHAaXYdm7DbHwgveiJsgekhKUehMhifGdVgTMo7FoQf4sb_7RpRP-C4e7jDr3f-JoqI5crQhOXV3UGlUGprJABiMGoiWgNSFAqPS2xfkBPPfrUdyU77svDox-7aG-LD1u2UH6AA3Md9x-dWL_E6J6MV9aLo_c2Nl05Ovd18PZzsnfPcrpFg___lwAdsNkA7MC1cc\"]"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Thu, 30 Jul 2026 12:03:42 GMT\r\nserver: ESF\r\ncontent-length: 116\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":98,"size_decoded":660,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"d27ffafca21d1806231972f1fe66c27d","sha1":"73d8490afc7ec5963e15131293202d751ebfbbe7","sha256":"3a0403e5ae9aef7bf389f9aae909847d473c4d24d23f22427c8d99b2399b199d","sha512":"d0b15c20d345842ed2e5d1f5b192354d3cab3e383667d839b3d7ecfb8d3d7c455389c4c8a2e4efc3720d56e6eee4e6c6456aac00f1e8dc15ae0532fae8ae74dc","ssdeep":"","tlshash":"ffb01210a22a1870206181d1e34444c74e41349134f415c4b41611d866f8d02fb6a65f","first_seen":"2026-07-30T12:04:19.555948Z","last_seen":"2026-07-30T12:04:19.555948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/1azQZTgqR1Y","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.958Z","timestamp":1785413020958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /embed/1azQZTgqR1Y HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, base-uri 'self';object-src 'none';script-src 'nonce-Z-3vIUosweAzXFZ8ZTL0jQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 30 Jul 2026 12:03:41 GMT\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-YNID=20.YT=GkNX5wJV1A7oiWZ1y6-QiyVEqPhfBM0qxxuM1TP77t2WCxzfIFVnEQqFW6rTQY5h95dJCod5riBQeRjPch6zfPlAyXE3kX7oZIW-C5MUSvtg5L2RtzQ9bLyJc8RGtNUB3daYWsebZRrIzbvTirNqZIEIL8y9QO04CLAZl7S_VlAse38hPwNVykaqs59QOcCQ9_8TGdv9P1Z7ym7oUlQYTlXPicwyILDofjtmrxyobOg-090UfL3HjU75rVZ190IDndWjsAVsIEY1jfEK_PTC5BuFK7J_vbzBouqqg656TAnIZ-KFkRpCONRrbvh25Jyw-zE3n9F-6marJzQOZoPetw; expires=Tue, 26-Jan-2027 12:03:41 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=SjQ3arW38fc; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Fri, 03-Nov-2023 12:03:41 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=lCXxExTSJvs; Domain=.youtube.com; Expires=Tue, 26-Jan-2027 12:03:41 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgGQ%3D%3D; Domain=.youtube.com; Expires=Tue, 26-Jan-2027 12:03:41 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CKCix8HRkKO1GxDYjJfnrfqVAxjYjJfnrfqVAw%3D%3D; Domain=youtube.com; Expires=Tue, 26-Jan-2027 12:03:41 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147611,"size_decoded":60724,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52128)","md5":"73c3945c620beec645f0aa14a284dfca","sha1":"f5057857cbe3d169e5d7cf403f8bb44eb6d8dc9a","sha256":"417cceff03ff43bb9fa9846a6e397fad44b1d2ef6f2d3ffb645a7ead2f02437c","sha512":"adce265ecb0c2fd0453e7f6d81dda41553cd6b926c1e300f05a64c1aaa551acf155e221e5b4a59a996aa3cfe2d251ec84776f6836d0876c7c6b48236bed4b707","ssdeep":"1536:kC7L6CMUpzYVM6bBszhG13o43UEwgcJMSr1IYrMB8Dts6n1nbKs:XGCxYgq30EwgkLP+6l1","tlshash":"5de30a640858b8b6c5939547edbaff3e9ce8023907c9956dbcbbd35c01ec6520eaf412","first_seen":"2026-07-30T12:04:19.557085Z","last_seen":"2026-07-30T12:04:19.557085Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":22,"connect":19,"send":0,"wait":95,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:41.337Z","timestamp":1785413021337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 02:17:07 GMT\r\nexpires: Fri, 30 Jul 2027 02:17:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 35194\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-30T13:30:20.666878Z","times_seen":950029,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/css/styles_new/bootstrap.css","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.876Z","timestamp":1785413020876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /css/styles_new/bootstrap.css HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Sep 2019 19:52:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d89226d-114b3\"\r\nexpires: Sun, 13 Sep 2026 12:03:40 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70835,"size_decoded":11858,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"a4b82c478f0076716d71fc4ebb5f84f5","sha1":"d8c3db82f68031b144b06d50460309d51ea03370","sha256":"74e697653b045eb9b7789a8136e1c1bd3027e1c16952257c8aa17796c1a17f84","sha512":"88939c25796719cf7399723beb1275a3f1f49d3c4b8da2c963e87e4cd4b2454ea1ddd72adbb50eeb9efc9781f6916f544c7abb2bd0d547002767614bddf63929","ssdeep":"768:1LbZtiIAq/3VZxqzcwkILvUEtI5IWKy+iUhdn10w8sC+CqT3x6pmekOG5AqyF8Lv:xw03VPzqyFKn","tlshash":"8e632063e62210836233c7b4f643c853ef1863b6d6568d7afae5986c83f95045252f8f","first_seen":"2026-07-30T03:04:38.710652Z","last_seen":"2026-07-30T12:04:47.569956Z","times_seen":5,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,600,700|Ubuntu:400,500,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.884Z","timestamp":1785413020884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Open+Sans:400,600,700|Ubuntu:400,500,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 30 Jul 2026 12:03:40 GMT\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24039,"size_decoded":2656,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2f25f983fdf1543e74aa11ac4cd6ff88","sha1":"962ccc3e473cc66efc6e95354070a116f0b5f48c","sha256":"fd9330c01ef2aeb5006803d9b4a5e430defcd95a34d51fd18e9166e7c7324e8d","sha512":"427647ca9f37325cfcfc842593be1bbafbcc885f6b9a93e8d4e2e6c456a492d3e0e1e69b69a2f9ab9690aad95397f8b1412ea2eeccbf8d886a6324afd74241bb","ssdeep":"192:aCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIwV4pWzGSC77u2mIrqUnbqGIwh:Jt5qY4yf/qY45uOqY47aJl","tlshash":"a4b20aa100175840ab435cd223cebf35ee4fa2666044c0ba6bfd4adaeddad39537931d","first_seen":"2026-05-23T02:33:09.914676Z","last_seen":"2026-07-30T12:04:47.552148Z","times_seen":8,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":47,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.069Z","timestamp":1785413021069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapper.leadball.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 10:08:37 GMT\r\nexpires: Mon, 26 Jul 2027 10:08:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352504\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34924,"size_decoded":35737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-07-30T12:04:47.548389Z","times_seen":21334,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":35,"dns":4,"connect":0,"send":0,"wait":53,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.878Z","timestamp":1785413020878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 06:33:56 GMT","end":"Tue, 29 Sep 2026 07:33:46 GMT"},"fingerprint":{"sha1":"95:C5:B1:CC:FD:2D:A2:1D:9E:F8:29:11:70:8F:C2:32:DB:0A:16:D8","sha256":"67:23:C0:55:AC:EE:9D:BF:1F:32:F6:C6:31:3A:5A:3F:85:B5:50:88:71:96:38:D1:BB:37:21:B0:0C:CF:B9:EA"}}},"request":{"raw":"GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://whatsapper.leadball.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"269550530cc127b6aa5a35925a7de6ce\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:55 GMT\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-cachedat: 03/15/2026 23:52:32\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ace1238c6835e91b5fdbd46792597915\r\ncdn-cache: HIT\r\nage: 94137\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a23438b49850b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":7894,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-07-30T13:24:16.752852Z","times_seen":304010,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/css/styles_new/color.css","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.882Z","timestamp":1785413020882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /css/styles_new/color.css HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: text/css\r\ncontent-length: 188\r\nlast-modified: Mon, 23 Sep 2019 19:52:31 GMT\r\netag: \"5d89227f-bc\"\r\nexpires: Sun, 13 Sep 2026 12:03:40 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188,"size_decoded":527,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0c364bac35884d14536770b96d2964ce","sha1":"1ea78dae8ab8d518b644a83250e9dc6ea66a77c9","sha256":"b85030735483c2537b6daf6a740e2c334d5fdde4225671bd076be348aedd9fa1","sha512":"4c0f09e71950e71ea15f2e941745b8604b68eea61463fdbce8a20fd5b5409620934217359a6e671a937bacef1a09a3e0a8712cd21556252e5643658590dd1320","ssdeep":"","tlshash":"3ac01281e509284631575b1eb956eaf10bc8958054201b3474361a10500f0433d24f89","first_seen":"2026-07-30T03:04:38.734628Z","last_seen":"2026-07-30T12:04:47.571756Z","times_seen":5,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leadball.ru/whats/whatsapp_logo_2.php?c1=1dbea5\u0026c2=00000000","fqdn":"leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.897Z","timestamp":1785413020897,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /whats/whatsapp_logo_2.php?c1=1dbea5\u0026c2=00000000 HTTP/1.1\r\nHost: leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T13:31:02.025041Z","times_seen":17616648,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:41.079Z","timestamp":1785413021079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapper.leadball.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:19 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82402\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-30T13:30:20.6869Z","times_seen":318335,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":22,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:41.338Z","timestamp":1785413021338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 02:17:07 GMT\r\nexpires: Fri, 30 Jul 2027 02:17:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 35194\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-30T13:30:20.666878Z","times_seen":950029,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.60gHVOycP-w.2021.O/ck=ytembeds.base.HDMuiECnvBo.L.F4.O/am=AAAAgA/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywHI22L34fZMQz-12yQOji3t6ispuw/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:41.726Z","timestamp":1785413021726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.60gHVOycP-w.2021.O/ck=ytembeds.base.HDMuiECnvBo.L.F4.O/am=AAAAgA/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywHI22L34fZMQz-12yQOji3t6ispuw/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/1azQZTgqR1Y\r\nCookie: __Secure-YNID=20.YT=GkNX5wJV1A7oiWZ1y6-QiyVEqPhfBM0qxxuM1TP77t2WCxzfIFVnEQqFW6rTQY5h95dJCod5riBQeRjPch6zfPlAyXE3kX7oZIW-C5MUSvtg5L2RtzQ9bLyJc8RGtNUB3daYWsebZRrIzbvTirNqZIEIL8y9QO04CLAZl7S_VlAse38hPwNVykaqs59QOcCQ9_8TGdv9P1Z7ym7oUlQYTlXPicwyILDofjtmrxyobOg-090UfL3HjU75rVZ190IDndWjsAVsIEY1jfEK_PTC5BuFK7J_vbzBouqqg656TAnIZ-KFkRpCONRrbvh25Jyw-zE3n9F-6marJzQOZoPetw; YSC=SjQ3arW38fc; VISITOR_INFO1_LIVE=lCXxExTSJvs; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgGQ%3D%3D; __Secure-ROLLOUT_TOKEN=CKCix8HRkKO1GxDYjJfnrfqVAxjYjJfnrfqVAw%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 235739\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 12:54:47 GMT\r\nexpires: Thu, 29 Jul 2027 12:54:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 29 Jul 2026 09:09:15 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 83334\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":944905,"size_decoded":236652,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"cab40245b5f05cf3f9d6e7027e67308d","sha1":"99f732411e4e6f14a61d797ba10df21133cb5557","sha256":"bc78692839777357cb6174ade43e9fb3df105d990a6f66d5ada6d2dcfdb45ee6","sha512":"18bfe180005155a8294b8eb2e0b39c17a2466047d6ee755eafedf0150ea64059c97adeec7a507b06f3f1287504f5d7a248a9f6a9b3cf155223860058a01e9ca5","ssdeep":"12288:Rorh0EencTyXGld16WDVcIm4zDSG8UvCeoBJjlXc7WPz6/wWXqkZTNvl6hkTeubV:RdL6qtKoCZx1XH0AV3HoLYt/","tlshash":"cb159ff4b25271b4d107b926f9b78043b57f4503e10418b8f0a7be9c56fcaa82e76729","first_seen":"2026-07-29T18:06:15.05542Z","last_seen":"2026-07-30T14:22:28.265343Z","times_seen":51,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yt3.ggpht.com/yy24-dKRJhNx_GfG4zfszIo0ZaLdiKNd7Im0vR47lO3kuubw4jbiUPE-ZYJFUX6c3Q3heZtWvQ=s68-c-k-c0x00ffffff-no-rj","fqdn":"yt3.ggpht.com","domain":"ggpht.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:42.007Z","timestamp":1785413022007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:23 GMT","end":"Mon, 21 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"DC:48:07:2A:01:2D:A7:65:AA:F1:4C:DD:23:C4:A1:E7:2C:5C:EF:58","sha256":"09:30:03:A8:7D:7F:F6:BE:79:16:44:E4:E0:4C:56:8E:3D:5B:16:F3:9F:F3:3D:87:F0:7F:E6:B2:1D:48:7F:F5"}}},"request":{"raw":"GET /yy24-dKRJhNx_GfG4zfszIo0ZaLdiKNd7Im0vR47lO3kuubw4jbiUPE-ZYJFUX6c3Q3heZtWvQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1\r\nHost: yt3.ggpht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"channels4_profile.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 2409\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 12:00:18 GMT\r\nexpires: Fri, 31 Jul 2026 12:00:18 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 204\r\netag: \"v1\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2409,"size_decoded":2991,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3","md5":"f51208365c6d70c0df8e9c733b48743c","sha1":"9eb9fe8dc8bd244f53f257ab534282e0c522e79e","sha256":"534dd8e892ce0d274d666528e89dcbcd42d9f92e1288940e1a0a4d7a06a2a68c","sha512":"0229235166f59016d6461ff591f63789f9eb5184438baaa7ef0f0379b2b2d5613df607c90b9e6535529619e34bae8620ba798d9948efe961a6117e63049d6670","ssdeep":"","tlshash":"03413ddcfffe16e5cbef773d064a1281c2a5a0f4012b99d5e16125b14e462ec1c66168","first_seen":"2026-07-30T03:04:38.733654Z","last_seen":"2026-07-30T12:04:47.581516Z","times_seen":5,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":17,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?oxCpSg","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.156.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/1azQZTgqR1Y","date":"2026-07-30T12:03:42.419Z","timestamp":1785413022419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /generate_204?oxCpSg HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/1azQZTgqR1Y\r\nCookie: __Secure-YNID=20.YT=GkNX5wJV1A7oiWZ1y6-QiyVEqPhfBM0qxxuM1TP77t2WCxzfIFVnEQqFW6rTQY5h95dJCod5riBQeRjPch6zfPlAyXE3kX7oZIW-C5MUSvtg5L2RtzQ9bLyJc8RGtNUB3daYWsebZRrIzbvTirNqZIEIL8y9QO04CLAZl7S_VlAse38hPwNVykaqs59QOcCQ9_8TGdv9P1Z7ym7oUlQYTlXPicwyILDofjtmrxyobOg-090UfL3HjU75rVZ190IDndWjsAVsIEY1jfEK_PTC5BuFK7J_vbzBouqqg656TAnIZ-KFkRpCONRrbvh25Jyw-zE3n9F-6marJzQOZoPetw; YSC=SjQ3arW38fc; VISITOR_INFO1_LIVE=lCXxExTSJvs; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgGQ%3D%3D; __Secure-ROLLOUT_TOKEN=CKCix8HRkKO1GxDYjJfnrfqVAxjYjJfnrfqVAw%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 30 Jul 2026 12:03:42 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":172,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T13:31:02.025041Z","times_seen":17616648,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-30T12:03:40.325Z","timestamp":1785413020325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20523,"size_decoded":5900,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (766), with CRLF line terminators","md5":"47161e9950b02a9b09144e9f5e20cbb0","sha1":"30b5622ad2b58f7d8b167b88fa99d28c1e67fd41","sha256":"cea8223dc3e43a2cec83a4137e180f4fbf02337eb5399616c18f7b3842a5a86b","sha512":"06ba691a9bd6b63ebf2f69cded053672d8a67a2fd1656c865db8018892ee8e5236b5899967123e31c12f7dc7f4cb2d9576d93a84067d39dcb22db2088296f1b8","ssdeep":"384:eCX2uEfdZQVeOYfhWLu+OKou+mgB8g5C2Kqpds7ND4+L0izNLZLBRtjehK4Z754k:5X2uEfdZdJB8AC6dsRD7Zo","tlshash":"98928512b58d743f021380efe0317749a1afc97ae7274ea2b2fd12377781c55a62a25d","first_seen":"2026-07-30T03:04:38.728579Z","last_seen":"2026-07-30T12:04:47.573557Z","times_seen":5,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":65,"connect":29,"send":0,"wait":41,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/js/jquery.js","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.887Z","timestamp":1785413020887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /js/jquery.js HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Dec 2018 17:31:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5c056873-17ba1\"\r\nexpires: Sun, 13 Sep 2026 12:03:40 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97185,"size_decoded":34200,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32029), with CRLF line terminators","md5":"2b6294333db8eeb65bc7717144357d23","sha1":"74ef185a3cba75af7f4e1b3dcaf1b32b0db5c1af","sha256":"4946fcf019e50cf850a0344e45b3a8f93d5ead5e1dade33695025ef732913af1","sha512":"bf4197f2eca58ed25dfdd82d518fb0a6f900695318dc5a47e2039273c3bda02b1d73249d5ea7d047bfbda3a692606b430c836912e043f87751fdd900576bec9c","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOa99Twkxb7/Jp9s:y4J+03jL5TCOaLTwkxFdnCVQwKa98Hrc","tlshash":"3c93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:41:00Z","last_seen":"2026-07-30T12:04:47.577044Z","times_seen":435,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/js/jquery.main.js","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.890Z","timestamp":1785413020890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /js/jquery.main.js HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 06 Oct 2019 11:53:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d99d5bd-ea8\"\r\nexpires: Sun, 13 Sep 2026 12:03:40 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3752,"size_decoded":1862,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"40ce3a4ffbcdd3179f3b1ffb5b467b94","sha1":"3b749c3a9bdc4e7c4a1a98b82929a080ad65e95d","sha256":"511a2e980fccb72dd7b7ecbed70cad8ce7345cbb01303adfcc57681d5f4ae8f3","sha512":"3ed9cf4732c1ad13f234098bc809e8cfa9f2e77804db0b1215ca027aa45690703c580292a753390b52b53b16339fc476d8ca6c4e5e24fa9e4aba353fd37b2a4e","ssdeep":"","tlshash":"2b715359731e22df42e7b328f03f4b249e7dc632914411ed78a4945914f456923d1f6d","first_seen":"2026-07-30T03:04:38.73074Z","last_seen":"2026-07-30T12:04:47.57443Z","times_seen":5,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapper.leadball.ru/images/two_clicks.png","fqdn":"whatsapper.leadball.ru","domain":"leadball.ru","tld":"ru"},"ip":{"addr":"37.140.192.61","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatsapper.leadball.ru/","date":"2026-07-30T12:03:40.900Z","timestamp":1785413020900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapper.leadball.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 23:10:41 GMT","end":"Fri, 04 Sep 2026 23:10:40 GMT"},"fingerprint":{"sha1":"45:E0:A9:CE:3F:B6:72:66:65:1C:95:8A:5E:18:83:E3:C6:23:36:D6","sha256":"9D:04:2B:0A:7A:20:77:AB:C6:CE:1F:FA:F6:7F:BD:5A:CD:54:CC:47:73:0A:6E:88:0D:CE:31:EE:53:B5:A1:01"}}},"request":{"raw":"GET /images/two_clicks.png HTTP/1.1\r\nHost: whatsapper.leadball.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapper.leadball.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 30 Jul 2026 12:03:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 7204\r\nlast-modified: Mon, 23 Sep 2019 19:56:54 GMT\r\netag: \"5d892386-1c24\"\r\nexpires: Sun, 13 Sep 2026 12:03:40 GMT\r\ncache-control: max-age=3888000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7204,"size_decoded":7547,"mime_type":"image/png","magic":"PNG image data, 150 x 110, 8-bit/color RGBA, non-interlaced","md5":"c58d53d595d3ee9c0c7a747fec873d72","sha1":"6bc9528936ca7b818b903e6442e9b2ca8acb482e","sha256":"b7c2d8c8f7a44378f269e40fea7d7294468372157f3117081e925db9bc2fd755","sha512":"cfeef1e79078c6c5a344da4602279e45634d09102b270e1ba8d42ff3a755120e0a5a7d1bcdd0e488e9e96e8bcfa4ec45d1ae79c9e05188d0e836ad371250ca06","ssdeep":"96:kY2efssctXH90XTDhtCKt8eorlQc6GOuhDnkNUpC/iGnQiUrilhH+pFt:kF19HSXh1t8eorlQc6GHlnRE//QizJU7","tlshash":"dce18e80d670b844d38e9ecd0ee89237122bcdf0e2c5e9bb7d1bd8d74121975c11a5ae","first_seen":"2026-07-30T03:04:38.739066Z","last_seen":"2026-07-30T12:04:47.555323Z","times_seen":5,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"whatsapper.leadball.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"whatsapper.leadball.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}