{"report_id":"dd993a94-4d28-4976-9355-1312074b98fd","version":6,"status":"done","tags":[],"date":"2026-04-15T03:00:42Z","url":{"schema":"https","addr":"qfsglobalsecureledger.com","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"title":"QFS - Best Digital asset secure system","dom":{"size":43208,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27897)","md5":"229c1fc3417b09f2a909386f30d62136","sha1":"17113a3392045e1c2cd741ce80bf8971b2f66dde","sha256":"1b76c9d3d25bf6e806bdf451c83680289a55eeb5c0e1379208bb1aff53ad7723","sha512":"7ec0ac05811765e9e8174f6ace2452526812f4547c2d00cde6b7dd566bc0f044e839e5c7db35136808c5ab117b98ed3e3d4645d83b68e23cf71cae20cd758267","ssdeep":"768:Xj28FTbfsTO+LDGmPKHs9TvfqaSQXOSqGMWYWf:Xj28FTbfsTO+LDrPKHshqa/XOj6rf","tlshash":"3e1395276780462c9c5392a4f399e54ea32df684ef6359eef7c62410c2d93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qfsglobalsecureledger.com","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T03:00:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":6,"received_data":245778,"sent_data":3270,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-12T22:38:35.592234Z","alert_count":0,"request_count":3,"received_data":189612,"sent_data":1365,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.77.181.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-04-09T04:03:53.786716Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.icons8.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2011-10-04","domain_rank":218854,"first_seen":"2017-05-26T09:10:54Z","last_seen":"2026-04-09T15:04:35.040961Z","alert_count":0,"request_count":3,"received_data":7965,"sent_data":1393,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"63.183.43.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-04-09T06:12:41.731574Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":614,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-04-09T06:35:05.195253Z","alert_count":0,"request_count":2,"received_data":30539,"sent_data":897,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-04-13T01:43:53.819484Z","alert_count":3,"request_count":20,"received_data":9072989,"sent_data":12987,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-04-09T05:25:16.838112Z","alert_count":0,"request_count":3,"received_data":324626,"sent_data":1405,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"216.58.201.182","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-04-13T01:22:49.901812Z","alert_count":0,"request_count":3,"received_data":84636,"sent_data":1359,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-04-09T04:03:53.715073Z","alert_count":0,"request_count":1,"received_data":18549,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":10952,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-04-09T05:25:25.913267Z","alert_count":0,"request_count":1,"received_data":7734,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"qfsglobalsecureledger.com","ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":55,"request_count":55,"received_data":17519281,"sent_data":25877,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}]},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-04-13T01:27:31.466415Z","alert_count":0,"request_count":6,"received_data":3603,"sent_data":3555,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.magnific-popup.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"639eb4009fb160e118755f6a3720d24f","sha1":"7dae45313fce58e0b296ea16a73f38a9cfd5cc79","sha256":"fa7a4e4527c4194953ce8211b9f3c40c496ea9627ba4c44775d77a306ac7d547","sha512":"61eee055301e91a8a722cdf45620f200336680d94f3ea02d923aec5c3e1fe2fd20159e0722b7ee1f3bee9c1c5c2798f6124c508b531e920acc35a153d89ee268","ssdeep":"","tlshash":"9c11ed9478b734a58af3a2bdd61b4619b0bdd9d374680c03e0ca4e983d7a89fe242754","size":1000,"data":"","first_seen":"2023-05-21T19:57:00Z","last_seen":"2026-06-06T18:05:23.443176Z","times_seen":490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","size":62371,"data":"","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dc50446c6dbfa9479fc43c8e436cb27e","sha1":"04761c4112241807c70a29a5d17336c04526d966","sha256":"2eebb843d15b2f22e468a9c24f8ac76c9190e0544d0be6517e19114f8cdbbb43","sha512":"2a0b8bd743b1431ad4b70e782dd12901e961b60c8a1d042765457f2e03defb9822d1280194db7775e626ee09653decf1c215fbecf023e47eaffb41b9553a0064","ssdeep":"","tlshash":"79d02bc068498428c550c77a10171140c935bb31dd1c0cb1d912fa57f83234b2ca7293","size":244,"data":"","first_seen":"2026-04-09T14:30:38.627687Z","last_seen":"2026-04-17T06:59:24.359749Z","times_seen":1294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-06-16T17:46:19.266034Z","times_seen":196614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/owl.carousel.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c295a4822a69df9b107aa07c2f2723eb","sha1":"7fb1eb134444bf896ba88f198d71790725163c0e","sha256":"06a09ba60a6d08b11ad99417c577870a55603b5ae2220526aaa5fa29198035d7","sha512":"715c442476ee1d49bd67327d5e6730dd3e1683c31ca06d60287d8c54a8ad9796d96e0194e5c32aea8a515be8fa8bc141a4cead7830b1a0f0a5039ba7895edb07","ssdeep":"","tlshash":"15119e65b0902a0fcbf665a4253a026b32bc351738c706bc7073abcc6c3c858757da38","size":1000,"data":"","first_seen":"2025-03-21T13:37:19.175935Z","last_seen":"2026-06-06T17:34:25.998631Z","times_seen":612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"43fed148b92abbec9687af1356c7e347","sha1":"2bf8f41cb838b29ccecca244812738379bf6e57d","sha256":"eb074cd8374ba297218e47323e01f47212c25e4129582cb9f77072841386bda3","sha512":"d42e80fa6d2d14679a0d72f25cb95d148f1a4b750368ed95d829c079dc33671d2da1e5531ec6f734c9758f93f2eca8574ed7f27bc9c15ba4e9efdf08982ddfc0","ssdeep":"","tlshash":"c71000000c00000c000000000000000000000000000000000000000000000000000030","size":2,"data":"","first_seen":"2023-03-10T18:32:14Z","last_seen":"2026-04-17T06:59:24.447038Z","times_seen":3604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d6ff1ddccaf97e074ac78d7d1749a658","sha1":"82ad3da0ddfd300d797c6ecb6684ffd871709181","sha256":"3ea1dbea78e232d2444e39d273b098d8c4a367e61b45c33f1f4303cb1eeb734d","sha512":"48ee2a1c5d6cf7d615a2aed8f7c13bec4a1047a6d5a1b47ca503f31772f59cd1017f0915f80e994559553e44b520ecde6808fc5d4ca68701b21bbd8e0dcbc8e5","ssdeep":"","tlshash":"c710000000c000000000000000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-09-06T10:27:18Z","last_seen":"2026-06-07T19:29:41.576512Z","times_seen":3834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8e1bb4c6b92f11df69d1fdb7ed90f3bc","sha1":"991bd3e6814e763c443fbecc3de82ccf14868d7e","sha256":"b787be5be3ab588aae67971152ce3fdd6a6c918e465050fe93ee3b1eea0fbf6a","sha512":"f08fe8dbd26c211a0d3ffe69fb8b03566322609084a84f05bccb0cde73de439f2caf249eed9b1de35c2b5f7534db56b36d41bfa8c12c598a7d5e68c3b0d5dbea","ssdeep":"","tlshash":"9911428ff1b66701b8e6a9c014eb4d3ed12175069cb02c0f481bd1b006f06a72162e0f","size":1034,"data":"","first_seen":"2026-04-09T14:30:38.715893Z","last_seen":"2026-04-17T06:59:24.449415Z","times_seen":1297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.appear.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad1f16b6a13daf29169bf73cf29206d0","sha1":"990aaf5e09871660d3cda1f13367e2ae3425782f","sha256":"6eff971a28cb7a683daa4437b7b29832d3c78b8a35e3a4f42dbf5181e0942f05","sha512":"775f3aaef476b3be2930be2ccd81d7fbde95207fcf902f9bbfe4a0ead6aca314da1a7102015328f34416fb251106f72ab3e5c60f6e2f787745ff5f2ac1f98c68","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyM:X3/skfRwbDOrdfFjg/2cmVflyM","tlshash":"bb910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","size":4227,"data":"","first_seen":"2023-03-07T12:10:28Z","last_seen":"2026-06-16T10:26:51.687122Z","times_seen":690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ef1cb6e72d149b184cc241037203f60b","sha1":"cacdf0823fa0a658842237b801fd60d5112a61f1","sha256":"5bddbdea794b5ac1ebd76c5987e666ec03cc3f70f07276253550ba7bb8876cc0","sha512":"6aa7238dae3b76f3b26ef053488a47a36d1b91aa3bc5ad9fbfca1137bdfd6f04d9b1324af8d14966d48c449dbcba5f8bfb007a9ed67eb7c1771d955f6e5d3ece","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000c000000000000000000c00000000","size":2,"data":"","first_seen":"2023-03-08T05:16:31Z","last_seen":"2026-05-07T16:36:45.493955Z","times_seen":2900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-06-16T17:46:19.266034Z","times_seen":196614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8277e0910d750195b448797616e091ad","sha1":"3c363836cf4e16666669a25da280a1865c2d2874","sha256":"18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4","sha512":"48fb10b15f3d44a09dc82d02b06581e0c0c69478c9fd2cf8f9093659019a1687baecdbb38c9e72b12169dc4148690f87467f9154f5931c5df665c6496cbfd5f5","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-06-16T17:46:19.285996Z","times_seen":54402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-06-16T17:46:19.118574Z","times_seen":280980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cf2d753c03f8760a7603fa34ab0ef518","sha1":"f328760fd241677c38b823a0882cc89eb7d14078","sha256":"1888911de168ad3ece7cd5207512a7f06ada52b368fbcaa2da30e59d1f79ce84","sha512":"e107d688390b515855f2e2df3c536a40e482bd5b06af60cd6287e84b8ddd95d4bcaeeb1bd3de543f798a177318777c21bd2786a4ae18bd8b3d82a5963cecbb9f","ssdeep":"","tlshash":"0dd097f5f5e330086222a68621bdc0041018603abc9a48806399ca8b262220c03cb819","size":229,"data":"","first_seen":"2026-04-09T14:30:38.790161Z","last_seen":"2026-04-17T06:59:24.408308Z","times_seen":1293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec453ccd34b371daa0a05ad06e2adbd7","sha1":"cc3af89f640c944238a2648c2bb6e7b223c90e47","sha256":"c2eb425f5db2905a49e235b6baf2478f439ee86f9036316efe55ff003bb5270d","sha512":"5e8dcf11431936336865ead212cbdcbffbe0f745f85064eb53c7bf89697b41f3a474e6c2086cfd8827b23db88cb4d1158d4f6054904adc3db56f03479eef8560","ssdeep":"","tlshash":"5dd02bd068498428c550c77a10171180c935bb35dd1c0cb2d912fa57f83234b2ca7293","size":246,"data":"","first_seen":"2026-04-09T14:30:38.91164Z","last_seen":"2026-04-17T06:59:24.427014Z","times_seen":572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-06-16T17:46:19.266034Z","times_seen":196614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3700f097e741a7702f7e4ac61ed88c1a","sha1":"98cd3704dd19c3089ee3013ed0e63a6468550540","sha256":"4eeac15ae345b99db2b063be34cfa006fd7d551f5805a296e5f9fc72ff6efcad","sha512":"e4efb4b4173a7e1e48d041cf16a79dea8d8a8885bb53cf028cd6f2b04b7546dbac7eb625dcb0737e4c6d438e00b46c16e489a689561c90491c34ab551bcb6329","ssdeep":"","tlshash":"c71000000000000000000000c000000000000000000000000c00000300000000000003","size":2,"data":"","first_seen":"2023-03-10T09:28:47Z","last_seen":"2026-05-05T13:31:23.29605Z","times_seen":1886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5206560a306a2e085a437fd258eb57ce","sha1":"c9ee5681d3c59f7541c27a38b67edf46259e187b","sha256":"de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc","sha512":"40422e2733a73dec2f9aac48e2ab48d3b2fdcdc1e3a88bc7ea855227e62c029246da1dd49dd057bb8a8b796b3b2a6f60d9d8a85de53df597e422b2f68c54cfb6","ssdeep":"","tlshash":"c70000000000000cc00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:04:13Z","last_seen":"2026-06-16T17:46:19.173115Z","times_seen":64608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fde758c3f4539dd4a2013ad9c875547","sha1":"a748c80378af1a062b593f003c4aebb151e16d9a","sha256":"59a234703f2c3a4a99e738577791baf041d3b16e55013fae262962b8a015bebc","sha512":"98be438ffd6651938784cdf2fa3a40d3508658249ff13d2a2df12404c609a63c2fe70be3df68953f29791a36d712a2ccda914260d5e5ce12f7ff71f7933cd984","ssdeep":"","tlshash":"927000282c082000008a3823820b000ea222020c08080c8082c022a80cb30ca2022c08","size":25,"data":"","first_seen":"2026-04-09T14:30:38.862658Z","last_seen":"2026-04-17T06:59:24.297761Z","times_seen":1364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5a544a1c14fe313c3245c3267a292b8e","sha1":"ff9dedefe9ee78b3339d23163d8b29a3c83c6016","sha256":"ad3e69e9aa860657cc6476770fe253d08198746b9fcf9dc3186b47eb85c30335","sha512":"0e80f39667629731acd790ff27dca09d2f8e771228ea70073e7545b8a0ac6037960a84f8b2e2541eb9135aef8b3b17182052c26833b067ec4efd4c6cbcd58756","ssdeep":"","tlshash":"c710000003000000000000000000000000000000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-07-29T09:11:33Z","last_seen":"2026-06-15T06:56:26.665896Z","times_seen":4127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"41f598e6dcd36b3c751272d11bac0d5a","sha1":"1cc1cbc38136337e90a150c8918057a8b8891819","sha256":"5d8d2e37d26c3db3345eb7595fef365b59ee5ca477323a5745621a0f1c73da3e","sha512":"30efa9c7380852f30d017dc1bc9048ba610e3bfc601875e32b92b016074f0b989245436568d0ac27cfc39f32062aaac7931b45272dd0262eb8c0cd5c44a37c6d","ssdeep":"","tlshash":"85b08c8c1926002614c098208fbbce08c30d602644290e0d4161b4c60d80e101973482","size":129,"data":"","first_seen":"2026-04-09T14:30:38.623395Z","last_seen":"2026-04-17T06:59:24.304507Z","times_seen":1297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b34cab55d3c63f2423425c354cf90756","sha1":"24aa05536e683c08a81c5932191936aef825259b","sha256":"fb2c7d8dd35f85951b7c92b4b4c3b7332d67bb93c82a2b3303eb2106251bc75c","sha512":"cce7cbb016833d7a790332258363fd73a7d1da763f9cf5fed6eb77c57f0da7553ee594658f00b433b3616d19c5cce68760066652e5a02c9f2056975522955cc0","ssdeep":"","tlshash":"c710000000000000000000000000000000000003000000000c00000000000000000000","size":2,"data":"","first_seen":"2023-03-14T16:29:28Z","last_seen":"2026-04-17T06:59:24.324536Z","times_seen":2634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5a544a1c14fe313c3245c3267a292b8e","sha1":"ff9dedefe9ee78b3339d23163d8b29a3c83c6016","sha256":"ad3e69e9aa860657cc6476770fe253d08198746b9fcf9dc3186b47eb85c30335","sha512":"0e80f39667629731acd790ff27dca09d2f8e771228ea70073e7545b8a0ac6037960a84f8b2e2541eb9135aef8b3b17182052c26833b067ec4efd4c6cbcd58756","ssdeep":"","tlshash":"c710000003000000000000000000000000000000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-07-29T09:11:33Z","last_seen":"2026-06-15T06:56:26.665896Z","times_seen":4127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b2b6ee3754ad6d61ed4909c98453043e","sha1":"91ef6cf78a9b2bf83f97792cf49d9f8e7f8ba011","sha256":"23f4cab0d406c8965bccb10ea471c31cfa8ef17809349ccd86ec1c977610a6a3","sha512":"7cdc6ca1ec85b4cf1bcee15d4b5fefad14508cc3d7fad1d7358c32feebe2940a55410ea9322edb756ec2a56e5026ae281d539ae16ae915fc1196f6ccb41a16ac","ssdeep":"","tlshash":"d0a011cc3aa8082008a322a2800b288c0bb03028a02828cc0028c2880bb02ba0082003","size":79,"data":"","first_seen":"2026-04-09T14:30:38.765058Z","last_seen":"2026-04-17T06:59:24.445319Z","times_seen":1290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2860b307d383aee35e17fc8bfc46b670","sha1":"b6893dac2cf0fdff672e86f0e198766cff2ee1fd","sha256":"3d9dd81cfd4303f2fb00f15ad55cffd5830571b88ffc4216d15b8b937c1b3729","sha512":"e2549c78e8d902cb3aae994c96564ba1b90a03b914412b1a44af5ab4d684860d61c0ed323eedb6257ce6bb82b9133bf64d8c1c7d549e5aa335347fb58a49bea0","ssdeep":"","tlshash":"15f002ca2bf857c14caa74ca509f3d3e84c022343dd698ae1965b2e505a4ed730a6f44","size":613,"data":"","first_seen":"2026-04-09T14:30:38.60118Z","last_seen":"2026-04-17T06:56:24.122154Z","times_seen":551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3e459341c191b42e6663a6ccb5cf83c7","sha1":"8da2351a6497315f6ea629483640659d0258f528","sha256":"c58d1c2e44560374d295e875d512ec0ea016e0e98b32ea2d8b41bea173619270","sha512":"218eafd1faa08e87a4019740349e3d2efc12eabd34ec3ec37ae8f2a4e45b6762daaab3ae148d25bdfbcee2db82c08d7fdbd15f1763f5c339d64459957c25f9a0","ssdeep":"","tlshash":"0ec0c080c7101361034641401103714f104021bf37d453380331d0c3ca542cc0065cfa","size":164,"data":"","first_seen":"2026-04-09T14:30:38.858103Z","last_seen":"2026-04-17T06:59:24.309764Z","times_seen":1300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b34cab55d3c63f2423425c354cf90756","sha1":"24aa05536e683c08a81c5932191936aef825259b","sha256":"fb2c7d8dd35f85951b7c92b4b4c3b7332d67bb93c82a2b3303eb2106251bc75c","sha512":"cce7cbb016833d7a790332258363fd73a7d1da763f9cf5fed6eb77c57f0da7553ee594658f00b433b3616d19c5cce68760066652e5a02c9f2056975522955cc0","ssdeep":"","tlshash":"c710000000000000000000000000000000000003000000000c00000000000000000000","size":2,"data":"","first_seen":"2023-03-14T16:29:28Z","last_seen":"2026-04-17T06:59:24.324536Z","times_seen":2634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DKnwhA04.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"04d0691ef560adb488e4b6f4644c5265","sha1":"703691dce49d4244b1c58dc10ab8a285e19b2942","sha256":"b1f432b4a9c8585760646aeb5a5e9686154ca139027818dd7ad9744e290ac647","sha512":"af80daf0b9be2e06be01828c6be6eda731cd8f1ab5f767eec9359f247367758117387dd844c0e725415cde1ef33f7e62cd579a1d9cb6d0fdd569bebf417073cc","ssdeep":"6144:QsJU8SN+jtxVR/ZgQu2W/rLEPhCWVcq9kNE:QwU8SNr2W/rLgjV3uE","tlshash":"b0544ad47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283592,"data":"","first_seen":"2026-03-26T09:27:08.846862Z","last_seen":"2026-04-23T05:43:00.852938Z","times_seen":1023,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c90b440e841a6b82e1f9b3299164296b","sha1":"5ef8766de935324424b563aa3eb0c7466b293c94","sha256":"94091dd64a21ffe94214bc6d17deeb43873a5cf2f0a71b4b5caa9a5c81b6967d","sha512":"131e9c4698b461db40dc8b4a28f2ab88e6e07e0b9e2bafd183cb0a426b6b70006ca425f1a8336126f063b557f538571928d7af23161e4aea869cc515377fa8bd","ssdeep":"","tlshash":"c7100000000000000000003000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-12T21:10:46Z","last_seen":"2026-06-07T03:50:25.388584Z","times_seen":2500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"10174562c7be5ce6a1f49646c84e4d92","sha1":"9c778b075d5a98485603ef80e0bd6f962a144fb5","sha256":"a44ece8547f1bd4dea4a8e2dde0159922b4495c78553b1096352f394f3ed2492","sha512":"a8ed4380b113d741c4a18b401fd69260c00a266f5573e1315f25baeba07a4d1b8d045021e7a4383b5ef11f7cf1bcc287e62eeb8597ca2470250f068af6bd7789","ssdeep":"","tlshash":"c190028421536050027ea09001371059e6793948a51c1d59544001412a5445ea115618","size":49,"data":"","first_seen":"2026-04-09T14:30:38.935925Z","last_seen":"2026-04-17T06:59:24.433498Z","times_seen":1295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-06-16T17:46:19.195298Z","times_seen":164075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-06-16T17:46:19.118574Z","times_seen":280980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9df66c6e5040ded7bfec840b806c624","sha1":"269668e0aeb7b1b968bb2b1237de7cb249c911ee","sha256":"e4a28a1c6f879932c4c3681b438defa8623b46bdfbcc3aa5631307acde309abc","sha512":"cfc99466fc8773d21ea031e803e5e2d6780fd62087d368d2dc7c3dee3efff07a478e1b19c77ab7c1d90864eca1d2ba6b6abc585d138b2e1a485ab48e84ecc214","ssdeep":"","tlshash":"6211216d5b6730ba8e1f0795f6c3a4a8569808910642ec033fcf8d9a4fc22713719748","size":1000,"data":"","first_seen":"2025-02-14T14:43:49.836962Z","last_seen":"2026-05-05T23:44:39.745843Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2f4a327329377ccfdb84b4c2f8994c85","sha1":"506410462a9f8d9ea8ea4fd04c8ed98bb859f9df","sha256":"cc4219a2b2c2a9d94b2bcc96eac6a87a040db596ac1d453f0fefbb338697d2e9","sha512":"efe4497895a0c643df62208c889126f267421ffbcd991fdd54017bc27c70d45279f6b1c799f7e44fd68b612426ef704e02c9c1ee4d744118def2579bd5090850","ssdeep":"","tlshash":"c7100000c000000000000c00000c000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T23:41:36Z","last_seen":"2026-04-17T06:59:24.427858Z","times_seen":1723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T16:57:42.461603Z","times_seen":61104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22770fbdd1177351a869401a0e1427bc","sha1":"a84fdb0f561ba218a613da03931e2c27f3feb715","sha256":"501bdc4f8cb2ded40f4a8bdd4c452602322c7bae5db48131dbe17124c5bf769c","sha512":"23cc87b54b8e0775621dd20e5f69cb509c703fc95528381abc7a2e414faeaa1c4fa097c3a7c108abc55d6b14d8454a66890b9a03d91768ad48d0d494d9264f06","ssdeep":"","tlshash":"c710000000000000000000030000000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-26T05:45:08Z","last_seen":"2026-05-10T05:47:48.555199Z","times_seen":3885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5439ca79b206d9b807f9448aadfec5b1","sha1":"0c5f27c191a5ea5fc685f8b714be567d17e6bf42","sha256":"889f5a5434bb54931851a9a93114fa76c327c13f48f0e4f6fddd8e5d2a707edd","sha512":"f1f7264158397f579947a1e5b787a4ecc5484360dcd094dc54834179534da64669c060f18b84b3086a0d1a003c03d9ce490e41abf670f60c780c3b5dfb5d4fd9","ssdeep":"","tlshash":"36d0a7e713859e489239a52e15a6d26c86a019088c39684d4e610da886a0a26866aa92","size":232,"data":"","first_seen":"2026-04-09T14:30:38.809324Z","last_seen":"2026-04-17T06:59:24.299947Z","times_seen":1328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2ba67d6a4d20b3b76a56dbb8968608a","sha1":"03207e969b4f76089ce22be972d5611e43525fce","sha256":"5f5ba24cb103199f2c493cb04282f6c51822a9a3034fd4e53d7bb8a318b0dc70","sha512":"577fc0cabeef8419c313cbb234b8e778c18bb43ce8696b2abc316db709f3e4bedb6335ba7442cf486299ce0cccd241cba5b1b48831227d0072eb5cb2e507ae55","ssdeep":"","tlshash":"ebc02b386e2a606a8384e26c3f67c8c8ccf20f3300f9156c4911e0068938f81008fc80","size":142,"data":"","first_seen":"2026-04-09T14:30:38.66216Z","last_seen":"2026-04-17T06:59:24.455988Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2f4a327329377ccfdb84b4c2f8994c85","sha1":"506410462a9f8d9ea8ea4fd04c8ed98bb859f9df","sha256":"cc4219a2b2c2a9d94b2bcc96eac6a87a040db596ac1d453f0fefbb338697d2e9","sha512":"efe4497895a0c643df62208c889126f267421ffbcd991fdd54017bc27c70d45279f6b1c799f7e44fd68b612426ef704e02c9c1ee4d744118def2579bd5090850","ssdeep":"","tlshash":"c7100000c000000000000c00000c000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T23:41:36Z","last_seen":"2026-04-17T06:59:24.427858Z","times_seen":1723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"084243855820f9ca47f466f645784636","sha1":"a67acd6e68f872b807a1c9afe3a2453564e57877","sha256":"7292b55d8cfc45bafdf2e1b0f95fa765a408db524664d882aa49d9769f9c9ead","sha512":"963dba6aa91543f42099b2d5b58cd06f7db9eb144dc6c7b7b42928dbf2d723d241be4ee693599767bfc0caa153d1288ae1b9fd62b10152962b782e5c32548da1","ssdeep":"","tlshash":"c710000000000003000000000000000000000000000300000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T13:20:54Z","last_seen":"2026-06-03T06:52:08.227785Z","times_seen":1988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5a0a9da899fc98b05b3f0ab937331bd7","sha1":"c0380ec6b4d4685dad89c20bc653477a564f0ea9","sha256":"ff2cb12fa8d973524c4e2ba19ecbe6dd0156c2f490bd42739b896817724f8628","sha512":"427a696d1e74668dd950628ee9c8fec79d49bc74cc2639db77d8b29781640d16964519fa94ea74bb305b30c5eee81ec3dc81bc79bcb8cdad7423a61836c6559a","ssdeep":"","tlshash":"8aa011ec3aa8082008a322a2800b288c0bb0b028a02828ce0028c2880bb02ba0082003","size":79,"data":"","first_seen":"2026-04-09T14:30:38.926404Z","last_seen":"2026-04-17T06:59:24.320555Z","times_seen":1297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1fc378d7a35ac46d0e8dcee217de3147","sha1":"2b4a6c6493bf4748649fc44568f80657a84c6daf","sha256":"3f6eb2b437feb99af5cc9c880deb85d3bbe2ed13c039d5697bc114ff92b4a3fc","sha512":"fd7a615fab8bd87272faaf95e260eaa10e0d7fdd7e58ced2026b800e0f4ebf37ed632c27d026f912fe210ec3b647dcec858b18bab2be9d402427a37aba0cca6e","ssdeep":"","tlshash":"4aa02202282830820282288b303380bcbbf382000000c88c2f38c20c2fb88cb0383c23","size":72,"data":"","first_seen":"2026-04-09T14:30:38.873433Z","last_seen":"2026-04-17T06:59:24.438205Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e34dff622740a5e2d6ed9c41d3c49688","sha1":"fadd56ec452f32494dcac8d1adde33d451bf70c7","sha256":"3f98114b0f77b7da78bca527117c4f3126aafbba8b94b68b0bc3ccd13944258d","sha512":"f711324b51b9640ffb3788c2388375542c59df3dcf4a7c772d5ab609148dcde0e150db258d86a8a11488168374f0fcf95f7ca2831eb7fb12876e2bb9b6f666a4","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000000000000000003","size":2,"data":"","first_seen":"2023-03-10T14:46:11Z","last_seen":"2026-05-02T05:24:20.939964Z","times_seen":3374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"058ac59368f70bd163b88a66263676d9","sha1":"852689ed4db57e777e9966a7087739546d433336","sha256":"4ba0eea9fb91eb991682a33a2e9bdf815af2ba73b266ec517603d861627c0e1c","sha512":"474a592232c0e1c757f25e1629a248fadfba2ca1988767a1f137e8fded4758d385527fd9d66eec1cf28d6c6cf59b46dc9a878de2f443679f15e3b51c2e4354ac","ssdeep":"","tlshash":"cae05c80c54a17d10cd6dda9f01b628036591931a0bf8f5fe822d303c97a942eac7f8d","size":435,"data":"","first_seen":"2026-04-09T14:30:38.897214Z","last_seen":"2026-04-17T06:59:24.45111Z","times_seen":1310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6abe33f215bcc63cbd8f92c19e7cd537","sha1":"edb1529a1829b390f3060008f2c609a109472f43","sha256":"c70d6cef7d4fc20aecb20ae557e7e26c84ad39d97ce91f386f34114cabaffff7","sha512":"95c914d92d2e70981be0f0acbf2a36670c8406a07ada88d0df71c0249c930368020594790435db2734aa7228833551a4d5d4d300e3d92ed23122e13071a183d8","ssdeep":"","tlshash":"c71000000000000c000000000000000000000000000000c00000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T14:13:33Z","last_seen":"2026-05-30T01:12:13.001603Z","times_seen":2812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"29ef5aae50cb12d155df2c036ad69cfb","sha1":"4ad350bf051a3efed83890826a754cf6e183fb5e","sha256":"401148004524f7d1f7d884e9d5ba71ba37f8315cc5da8ae30b6ada2adca38d3c","sha512":"a84e959ad1bbf2c645d19e8578035c665580d293fcc3fe1a55bd62446e289886e24dc875a06e925e99c8d32121e4ba59f0844405cdbbd3558c24f121e269cdde","ssdeep":"","tlshash":"4fd0c2c46206634332e738d9e0535205dd985da3229689cfd54344fe4c108cf89d323c","size":286,"data":"","first_seen":"2026-04-09T14:30:38.592229Z","last_seen":"2026-04-17T06:59:24.407415Z","times_seen":1299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"10174562c7be5ce6a1f49646c84e4d92","sha1":"9c778b075d5a98485603ef80e0bd6f962a144fb5","sha256":"a44ece8547f1bd4dea4a8e2dde0159922b4495c78553b1096352f394f3ed2492","sha512":"a8ed4380b113d741c4a18b401fd69260c00a266f5573e1315f25baeba07a4d1b8d045021e7a4383b5ef11f7cf1bcc287e62eeb8597ca2470250f068af6bd7789","ssdeep":"","tlshash":"c190028421536050027ea09001371059e6793948a51c1d59544001412a5445ea115618","size":49,"data":"","first_seen":"2026-04-09T14:30:38.935925Z","last_seen":"2026-04-17T06:59:24.433498Z","times_seen":1295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd3ecd8a8c3b500b832886406e26a877","sha1":"0b9aa32e07a98f15f1ccdb10a7c7ff5db89ffa11","sha256":"ea898919b965e747df19c2e62f319ebdef610c120e186c096a679d8fb79fe653","sha512":"48911e9f20f0d9182cb666d5a51d2bf38ea707c79b83d90647717f0fcad875b066059e0d21206fbbd0cfb512cba1d2fe4355157300013bedec95aa1649737974","ssdeep":"","tlshash":"67e0f13e3c348055479601f881f7f5283d0a34600440d9138496c87d5cf0fda6d01a94","size":418,"data":"","first_seen":"2026-04-15T02:59:49.499677Z","last_seen":"2026-04-15T03:01:03.477687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a4b7daba322f2d920018430a252b6a17","sha1":"458deb35894d47392fc729b79e4ac404cdaeae79","sha256":"f2a43e26e0132e6523442f2e86fd49ebe19f5d886e3510ce69d59428c3ad08c1","sha512":"0648d5172d0bcaa73e19805a20c4de54f42b4eec38b235df8c330c8f4a53877aa5804004f6f1fb5338e1dd0e3e761a8c0759cd6113f144be297055843f199969","ssdeep":"","tlshash":"7ba024f41710040444410441001f401cf3d03130f10d5c0c4c5cd0cc177d54300054c7","size":68,"data":"","first_seen":"2026-04-09T14:30:38.881335Z","last_seen":"2026-04-17T06:59:24.40456Z","times_seen":1298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fac166dcd2811ce169e58cb5ca85d4e0","sha1":"26cb34c6a8931cfd683cec577f5204df5dfbf427","sha256":"5cf67e2d728e5794eda9ec59e10dcf186aff044dcb8a01215ef5753ad1480da9","sha512":"bad75f997761fc47f786be109f5ff70a40077fc02feba82de564c0f737a7bce30c1a0740dfc4fe16f6949ebfc118f2540865db917c8a8f67632eea0dbf608dd3","ssdeep":"","tlshash":"bcd0a7d45619dd059e28195b065b5578c1717c18592c2c4f99806dc899701d28666603","size":222,"data":"","first_seen":"2026-04-09T14:30:38.833634Z","last_seen":"2026-04-17T06:59:24.40161Z","times_seen":1323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery-3.5.1.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-16T17:32:59.795245Z","times_seen":252155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T17:46:19.150687Z","times_seen":324621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8e1bb4c6b92f11df69d1fdb7ed90f3bc","sha1":"991bd3e6814e763c443fbecc3de82ccf14868d7e","sha256":"b787be5be3ab588aae67971152ce3fdd6a6c918e465050fe93ee3b1eea0fbf6a","sha512":"f08fe8dbd26c211a0d3ffe69fb8b03566322609084a84f05bccb0cde73de439f2caf249eed9b1de35c2b5f7534db56b36d41bfa8c12c598a7d5e68c3b0d5dbea","ssdeep":"","tlshash":"9911428ff1b66701b8e6a9c014eb4d3ed12175069cb02c0f481bd1b006f06a72162e0f","size":1034,"data":"","first_seen":"2026-04-09T14:30:38.715893Z","last_seen":"2026-04-17T06:59:24.449415Z","times_seen":1297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b787d22d9cb06342658bf546039117bc","sha1":"a7ce5b0c7e956b8e3c1a5c254c910d57c56e1b57","sha256":"f5fe88ee08735ae259265495a93c8de2b0eacfecf0cd90b5821479be3199fa8c","sha512":"a4f3b3c9e61b838f8cda07cdaa4a403bfec911a3ef199a1cd92d1a2513fa584029e231e927f8506d3397015250c44e1db5e39d557064a6d00c1e50418addef88","ssdeep":"","tlshash":"c710000000000000000000000000300000c000000000000000000000000c0000000000","size":2,"data":"","first_seen":"2023-05-04T03:04:02Z","last_seen":"2026-06-07T06:38:30.330968Z","times_seen":1841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"57cec4137b614c87cb4e24a3d003a3e0","sha1":"23eb4d3f4155395a74e9d534f97ff4c1908f5aac","sha256":"18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552","sha512":"4921de1edb2ecc8ca3a22823705194b902cfa471675f2d1ae8bf67d0c7b060a7c192e36ffca9f1a0d90ac2dbbdaf429ee1ec97e160eb00dc80b07000935304f3","ssdeep":"","tlshash":"c700000000000000c00030300000000000000000000000000000000300000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T16:57:42.376112Z","times_seen":41852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1458757494dece69a3262c2326c7f2eb","sha1":"ad7d6e1bd6e49ff9dc7188af0661ef831ff2702e","sha256":"f3c8034a412f3e9d8872238e696e92c73e54641b5a65a0bb22f8b55eb9bf08a1","sha512":"f5609eb78cfbf3ca545dc3796214a3c0e3faa7c64e77b7026642f13715666b82d8ec465d44a0445cb31062f757d17ebf874ede2ca830f17f052e0e1b13788937","ssdeep":"","tlshash":"d37000082c08280802a23823000b000800a22e0000002a08020000880c38a2e2002c08","size":22,"data":"","first_seen":"2026-04-09T14:30:38.677564Z","last_seen":"2026-04-17T06:59:24.450265Z","times_seen":1293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","size":62371,"data":"","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ed70b57d5025bafd77dbe52bd8e88885","sha1":"9b8453aa0328147873c0247cf9f13d7e4102e572","sha256":"45f3ebd2611510d0b46a962af03af8cf1c8497612ee6635927e827286dc51008","sha512":"af303601233be75ab01fb365d9bb97585e6f8bbd0b91199cec1ece3f9ea3099fedf00d792f23a1e3d4e0ec05c5fbd1bd49572338cc4c2c708404d2ad01da41a6","ssdeep":"","tlshash":"1f1121e3724e9574d0a73143701acb1148fee2067cc0518c196ae1d82be44756addf82","size":1013,"data":"","first_seen":"2026-04-09T14:30:38.866871Z","last_seen":"2026-04-17T06:55:51.8787Z","times_seen":553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-06-16T17:46:19.264689Z","times_seen":188653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/bootstrap.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5936d43b4ea323e8398af58e6123f85","sha1":"d4bd87ef940d878bc67c860c9c9bd70552299156","sha256":"5feec37f78f2b1bf0f413c869dfb76a1da96be4ae68c1fd1eaf60178b1936b1e","sha512":"7efcc4f964a6146836d0a78310502fe6ba067fde29fa82c6c5d09bf269611307574f80a2416ab3fa0f4597fa72dbbba71bba07682d7663c69bd59b33ec48389f","ssdeep":"","tlshash":"9e111b827600f8c34ba15ae8a03f6507f052a83b0a64f4d9f71adef58d7046f10e2d65","size":1000,"data":"","first_seen":"2025-04-18T12:21:07.791102Z","last_seen":"2026-04-15T03:01:03.483077Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d5236c8e67d7d1041d6cf447ac99a6c7","sha1":"1db75602190e7e6dd86954e47e295bfe8e2cc937","sha256":"827b9a5231652cb4f69034392aad552d319a72196d126a000eaee2c3c234abb2","sha512":"f3d7c1715b03eba5f0d13d6a86a23eff864ae827c77f082faa4e04733bc69b5dbf0d068676c4dd544aa6d34e3159bcb01b3d2f10b349c48827b2c30256cfadb4","ssdeep":"","tlshash":"d6e068c0e41617d308e3dcddf01b668037081e21b5bf8f9be501a31288a89c6aad7f9c","size":371,"data":"","first_seen":"2026-04-09T14:30:38.915851Z","last_seen":"2026-04-17T06:59:24.463438Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T17:46:19.150687Z","times_seen":324621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c90b440e841a6b82e1f9b3299164296b","sha1":"5ef8766de935324424b563aa3eb0c7466b293c94","sha256":"94091dd64a21ffe94214bc6d17deeb43873a5cf2f0a71b4b5caa9a5c81b6967d","sha512":"131e9c4698b461db40dc8b4a28f2ab88e6e07e0b9e2bafd183cb0a426b6b70006ca425f1a8336126f063b557f538571928d7af23161e4aea869cc515377fa8bd","ssdeep":"","tlshash":"c7100000000000000000003000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-12T21:10:46Z","last_seen":"2026-06-07T03:50:25.388584Z","times_seen":2500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2ecc54065af518ab39939cb8c7edb69","sha1":"7c7c5748b8e19a746bc5f19555f2be49bca6e947","sha256":"cc858e7a5627d6f9ffa6a0dd0bc5dc074507229415429912c13b6f99e1ce7284","sha512":"e984b09ed268990a7e59e1ca60218e34cbbff2b8621203dd5aad730ecbfb67b2d4db2a0c1ceae35e283f1e57ae596dc30a4caf3775e40f0a03dd20755156c0f5","ssdeep":"","tlshash":"13c080dc7b1df869e7013093518f410fafd624149905541c470415995fb05054553c3c","size":166,"data":"","first_seen":"2026-04-09T14:30:38.68409Z","last_seen":"2026-04-17T06:59:24.488151Z","times_seen":1324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cf3e3b2a4906e332d5f9a1f4993d972","sha1":"44eed5afc34038e5c490e8392aa92f5496d9109d","sha256":"12cac94cb78b8f62ebee9b93820de42e5dd1b6d711e8bfa50870e142ee45a86e","sha512":"1b3e6b8261b6184281766fc1772607591e451751fb49fba220b53e697f27389ad6e48504d08f242045418f8926656d186b2d7c8e8bacd218cae4087b2d5fe7b6","ssdeep":"","tlshash":"e4c08c8c1926002614c0d8208fbbce08c30d602644290e0d4161b4c60d80e101973482","size":131,"data":"","first_seen":"2026-04-09T21:05:22.221652Z","last_seen":"2026-04-17T06:59:24.296333Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2ba67d6a4d20b3b76a56dbb8968608a","sha1":"03207e969b4f76089ce22be972d5611e43525fce","sha256":"5f5ba24cb103199f2c493cb04282f6c51822a9a3034fd4e53d7bb8a318b0dc70","sha512":"577fc0cabeef8419c313cbb234b8e778c18bb43ce8696b2abc316db709f3e4bedb6335ba7442cf486299ce0cccd241cba5b1b48831227d0072eb5cb2e507ae55","ssdeep":"","tlshash":"ebc02b386e2a606a8384e26c3f67c8c8ccf20f3300f9156c4911e0068938f81008fc80","size":142,"data":"","first_seen":"2026-04-09T14:30:38.66216Z","last_seen":"2026-04-17T06:59:24.455988Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bae3f90cb000352645e35fad60da411c","sha1":"00023f94c170125b979cb1914925d06ab1abfbce","sha256":"1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12","sha512":"d83d07979674822b4c966ddcb3bd4feb84830834e1f9fb255774ae237056cc357599e3aab9c6f47242aada2148a65c9ea11c859b1e8f550004535cc363fa02db","ssdeep":"","tlshash":"03800000203008388088000f3032cb8afaa0a22ae2322800c8a88c2cb0e8f80ba28838","size":35,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T17:46:19.218714Z","times_seen":169275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"084243855820f9ca47f466f645784636","sha1":"a67acd6e68f872b807a1c9afe3a2453564e57877","sha256":"7292b55d8cfc45bafdf2e1b0f95fa765a408db524664d882aa49d9769f9c9ead","sha512":"963dba6aa91543f42099b2d5b58cd06f7db9eb144dc6c7b7b42928dbf2d723d241be4ee693599767bfc0caa153d1288ae1b9fd62b10152962b782e5c32548da1","ssdeep":"","tlshash":"c710000000000003000000000000000000000000000300000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T13:20:54Z","last_seen":"2026-06-03T06:52:08.227785Z","times_seen":1988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d161222836b4b10ba954c1f62fdea532","sha1":"41b8d4744466bd45f0694503fa18b6b6c7188d7f","sha256":"5236b254f6781f55f7eeebd7059e14fb6e6112a851866b3d801b7f9826e2d87d","sha512":"d2c8da9f679ac585b2c42ca6fcf2af223f74780dd46376685ee2e61ce723f4bc2d2312669d7fc1e0010567ce5f6a336fac251537deca89d1574f9561f5419ffa","ssdeep":"","tlshash":"2e70000a2c08282000a23820080b080802220a08002000802000008c0c3082a2002808","size":22,"data":"","first_seen":"2026-04-09T14:30:38.708876Z","last_seen":"2026-04-17T06:59:24.434443Z","times_seen":1302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2f4a327329377ccfdb84b4c2f8994c85","sha1":"506410462a9f8d9ea8ea4fd04c8ed98bb859f9df","sha256":"cc4219a2b2c2a9d94b2bcc96eac6a87a040db596ac1d453f0fefbb338697d2e9","sha512":"efe4497895a0c643df62208c889126f267421ffbcd991fdd54017bc27c70d45279f6b1c799f7e44fd68b612426ef704e02c9c1ee4d744118def2579bd5090850","ssdeep":"","tlshash":"c7100000c000000000000c00000c000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T23:41:36Z","last_seen":"2026-04-17T06:59:24.427858Z","times_seen":1723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-06-16T17:46:19.229937Z","times_seen":252306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-06-16T17:46:19.245508Z","times_seen":155998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-06-16T17:46:19.17949Z","times_seen":165184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1fc378d7a35ac46d0e8dcee217de3147","sha1":"2b4a6c6493bf4748649fc44568f80657a84c6daf","sha256":"3f6eb2b437feb99af5cc9c880deb85d3bbe2ed13c039d5697bc114ff92b4a3fc","sha512":"fd7a615fab8bd87272faaf95e260eaa10e0d7fdd7e58ced2026b800e0f4ebf37ed632c27d026f912fe210ec3b647dcec858b18bab2be9d402427a37aba0cca6e","ssdeep":"","tlshash":"4aa02202282830820282288b303380bcbbf382000000c88c2f38c20c2fb88cb0383c23","size":72,"data":"","first_seen":"2026-04-09T14:30:38.873433Z","last_seen":"2026-04-17T06:59:24.438205Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4eec229016c6db9d74615d9228cfaa6e","sha1":"b528d8284279db91d827702caad2bc340fb7e071","sha256":"d34cce1d2a5670fa051bd45d555dcf97369a15d780d608b0c954629975cb4dd6","sha512":"e160a2849e1b4ee5e516633506a3590e959fac82d10a53051fba8ec09423071bc89041cb0751939816c87c76bf924d2ee9abf3e9253bc079084c492df3bebee1","ssdeep":"","tlshash":"8ac080c6a159882483d144574132124cd1581cd5d4484511c251f45575b17055134697","size":154,"data":"","first_seen":"2026-04-09T14:30:38.855112Z","last_seen":"2026-04-17T06:59:24.45859Z","times_seen":1291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-06-16T17:46:19.118574Z","times_seen":280980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5a0a9da899fc98b05b3f0ab937331bd7","sha1":"c0380ec6b4d4685dad89c20bc653477a564f0ea9","sha256":"ff2cb12fa8d973524c4e2ba19ecbe6dd0156c2f490bd42739b896817724f8628","sha512":"427a696d1e74668dd950628ee9c8fec79d49bc74cc2639db77d8b29781640d16964519fa94ea74bb305b30c5eee81ec3dc81bc79bcb8cdad7423a61836c6559a","ssdeep":"","tlshash":"8aa011ec3aa8082008a322a2800b288c0bb0b028a02828ce0028c2880bb02ba0082003","size":79,"data":"","first_seen":"2026-04-09T14:30:38.926404Z","last_seen":"2026-04-17T06:59:24.320555Z","times_seen":1297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-06-16T17:46:19.229937Z","times_seen":252306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","size":62371,"data":"","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1458757494dece69a3262c2326c7f2eb","sha1":"ad7d6e1bd6e49ff9dc7188af0661ef831ff2702e","sha256":"f3c8034a412f3e9d8872238e696e92c73e54641b5a65a0bb22f8b55eb9bf08a1","sha512":"f5609eb78cfbf3ca545dc3796214a3c0e3faa7c64e77b7026642f13715666b82d8ec465d44a0445cb31062f757d17ebf874ede2ca830f17f052e0e1b13788937","ssdeep":"","tlshash":"d37000082c08280802a23823000b000800a22e0000002a08020000880c38a2e2002c08","size":22,"data":"","first_seen":"2026-04-09T14:30:38.677564Z","last_seen":"2026-04-17T06:59:24.450265Z","times_seen":1293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.ajaxchimp.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"36d1b0e5a3a7397b267e704beb2f7272","sha1":"86df23e41520d19dd0c6928e4a5de89c1ae172a2","sha256":"2dcc9f6916671ee0ee4c5f7c7b6f13c519189b65d371a39309c0d95b79050c28","sha512":"e728f97a563dbba72519ef7ff7b6e3de3265c3cf8ef574affed6e67bc9bf2d1f1c2a79d3e7ead1f2a1d6fd4610fcca332e0ddcbd31de608a4ce64464b404926e","ssdeep":"","tlshash":"4741444025101bc2418b21f2e4c7bbe370e7d5958824f558e668e0e30ee4dcdae27a9e","size":2381,"data":"","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-06-16T10:41:08.610824Z","times_seen":4928,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","size":510435,"data":"","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f502ac14e14405587d798139e860b5f","sha1":"b267cfc679f39f2d95f9d3fa41bca0eafb931aa6","sha256":"39d2483e41bf71db160191d9a148b4bc26c0739e732727e37be0f18bdc8cabca","sha512":"f5bc3d4834c9c4ed165d49476795fb1170fdc577b58fe4b21dfc67cfb4f6eebf045a3812ef48a2f15758e790ce7e111cf9dbd9ffcc3438288c7340e6eeb7661f","ssdeep":"","tlshash":"b1c022ccbb3e600d9121f90031f84e46cb4125ac4407ede3a70128b4448180aca1f406","size":194,"data":"","first_seen":"2024-08-23T10:18:17Z","last_seen":"2026-06-16T17:46:19.246087Z","times_seen":160815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2a5dbfd249d091c1886dddef461d1b7c","sha1":"d441ad79bf41005f096d8d6434b85a900c5f7d6a","sha256":"31a2f2e45183d66497142175c93c11e0272d73b265213433acef155ad0170fae","sha512":"5926be6034bea804605ae79bf64089c14528acef26410f1f55afa4b5160f489f0e414ca8a79622fdaae3c73ce44f50ce25a14275514f21de92958ab90596ea07","ssdeep":"","tlshash":"dfd023d92d65c091708920d9d45a895913f5d415cc757d08573700c51d5060329e7f76","size":213,"data":"","first_seen":"2026-04-09T14:30:38.730467Z","last_seen":"2026-04-17T06:59:24.327014Z","times_seen":1312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2f3f489a00553e7a01d369c103c7251","sha1":"a0509b7780628bd9d9abc7eb8a2163477341053a","sha256":"23794d91c53ae875c8e247d72561e35d9d06ee07c70c9e0dbcc977a6d161504a","sha512":"0f446282a46dfefa3995e9e78443c907aca544aff495badfcb632b9df2457f8491babf852d8ebbe7ecc9392461b559e9e242960f13e624e79dbcfca44a6e5de1","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000003300000000000000000300000000","size":2,"data":"","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-06-16T16:23:07.012956Z","times_seen":7708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-06-16T17:46:19.264689Z","times_seen":188653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-06-16T17:46:19.17949Z","times_seen":165184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-06-16T17:46:19.229937Z","times_seen":252306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bae3f90cb000352645e35fad60da411c","sha1":"00023f94c170125b979cb1914925d06ab1abfbce","sha256":"1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12","sha512":"d83d07979674822b4c966ddcb3bd4feb84830834e1f9fb255774ae237056cc357599e3aab9c6f47242aada2148a65c9ea11c859b1e8f550004535cc363fa02db","ssdeep":"","tlshash":"03800000203008388088000f3032cb8afaa0a22ae2322800c8a88c2cb0e8f80ba28838","size":35,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T17:46:19.218714Z","times_seen":169275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e34dff622740a5e2d6ed9c41d3c49688","sha1":"fadd56ec452f32494dcac8d1adde33d451bf70c7","sha256":"3f98114b0f77b7da78bca527117c4f3126aafbba8b94b68b0bc3ccd13944258d","sha512":"f711324b51b9640ffb3788c2388375542c59df3dcf4a7c772d5ab609148dcde0e150db258d86a8a11488168374f0fcf95f7ca2831eb7fb12876e2bb9b6f666a4","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000000000000000003","size":2,"data":"","first_seen":"2023-03-10T14:46:11Z","last_seen":"2026-05-02T05:24:20.939964Z","times_seen":3374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-06-16T17:46:19.243887Z","times_seen":173167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-06-16T17:46:19.119153Z","times_seen":245154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c90b440e841a6b82e1f9b3299164296b","sha1":"5ef8766de935324424b563aa3eb0c7466b293c94","sha256":"94091dd64a21ffe94214bc6d17deeb43873a5cf2f0a71b4b5caa9a5c81b6967d","sha512":"131e9c4698b461db40dc8b4a28f2ab88e6e07e0b9e2bafd183cb0a426b6b70006ca425f1a8336126f063b557f538571928d7af23161e4aea869cc515377fa8bd","ssdeep":"","tlshash":"c7100000000000000000003000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-12T21:10:46Z","last_seen":"2026-06-07T03:50:25.388584Z","times_seen":2500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ef1cb6e72d149b184cc241037203f60b","sha1":"cacdf0823fa0a658842237b801fd60d5112a61f1","sha256":"5bddbdea794b5ac1ebd76c5987e666ec03cc3f70f07276253550ba7bb8876cc0","sha512":"6aa7238dae3b76f3b26ef053488a47a36d1b91aa3bc5ad9fbfca1137bdfd6f04d9b1324af8d14966d48c449dbcba5f8bfb007a9ed67eb7c1771d955f6e5d3ece","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000c000000000000000000c00000000","size":2,"data":"","first_seen":"2023-03-08T05:16:31Z","last_seen":"2026-05-07T16:36:45.493955Z","times_seen":2900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96dbc3cb25d74cc6b9a4dd2fe99b6fde","sha1":"051b8a2e57c40aded9a57bd7ebad3b6180e2afce","sha256":"b05155c4157fc50c57769ac6eb0abd676322ee414c86557a9ced67a03fdb8b64","sha512":"1eddff130c41bded1569e11149ca33a98cf968f0529f4d9cec3b4593804b4b7dcae352f592213f53974527802d9c8324c56e4df6126619ccf5a86dced3a7f836","ssdeep":"","tlshash":"c710000000000000000000000300000000000000000000000000000000000c00030030","size":2,"data":"","first_seen":"2023-03-10T10:20:25Z","last_seen":"2026-06-01T11:53:28.752386Z","times_seen":2576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2a0cf8b99c32f636994897b6f23b9f8","sha1":"eadf7de96a87dc865ec032e97665daabe217015d","sha256":"9aad9adb7835a74d5538d11a7589fbb6cac17bda8f9c8abbbb8b5ec1f6fc9d79","sha512":"e7b9c24417834231eb0f3f9dc526fb84b847a410f2a66b9b533cb50cfb1f533d30ac2c8d20f985dd2c3e2be8026773614bd5392383eaec672d41ab9a4254e85b","ssdeep":"","tlshash":"c710000000000000000000000000003000000000300030000003000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:25:56Z","last_seen":"2026-04-17T06:59:24.332109Z","times_seen":1848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6abe33f215bcc63cbd8f92c19e7cd537","sha1":"edb1529a1829b390f3060008f2c609a109472f43","sha256":"c70d6cef7d4fc20aecb20ae557e7e26c84ad39d97ce91f386f34114cabaffff7","sha512":"95c914d92d2e70981be0f0acbf2a36670c8406a07ada88d0df71c0249c930368020594790435db2734aa7228833551a4d5d4d300e3d92ed23122e13071a183d8","ssdeep":"","tlshash":"c71000000000000c000000000000000000000000000000c00000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T14:13:33Z","last_seen":"2026-05-30T01:12:13.001603Z","times_seen":2812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1e8a887c5edce93937553ee7da10662c","sha1":"f8e834d0a698608360b9eaf06ed27a60d372db2d","sha256":"2a1bce1c5dffedad6a679fa7a36827cdb876157811539e01850bb52a17f23afd","sha512":"35cb8b6b3a8af5a0f45fc656eabf6927e9427556b027f3b2faed86d2487fc875b0b349c474a0e239bec12259659515d05dbf1fe04e00b62a66c7cb19ec225887","ssdeep":"","tlshash":"b8c022fa286886bf403302900cf78d8500ea309fa9a50b482934a241089404863b2a43","size":188,"data":"","first_seen":"2026-04-09T14:30:38.810932Z","last_seen":"2026-04-17T06:59:24.494428Z","times_seen":1313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T17:45:53.580284Z","times_seen":146541,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-06-16T17:46:19.119153Z","times_seen":245154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/odometer.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bd78e273cf3c8d00f2f667427123e3f","sha1":"4ee20812bbf0210b176d268e4c4c5ffac6c71f65","sha256":"2ac6a8ee97c232164995a36252283a542751be6652ebcf77a1367719eb91c94a","sha512":"cdb850d4c8607661014da1e0b22134bbfe7ceea39827e74a996604ab28a8bfa61094989fe4ac6056314a96e722597978422ac5c1a8909d200eb8d70901865de4","ssdeep":"","tlshash":"1a117b46467001a3a337a7c3d3d69724b9fc0409e9152076337c89a6baa6c3bf207e95","size":1000,"data":"","first_seen":"2025-08-08T11:45:06.378308Z","last_seen":"2026-04-15T03:01:03.493026Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0b9503d19c4340380b3105a1948bbf0","sha1":"2cb8800360b77cb89c67355ce2d2666f6a2ab280","sha256":"77085d9de83ed4a6dae0417298b1693dcccf0f9fb04203e174185db03761f511","sha512":"092b1b7cafd2725a9c89b24e4b0ef5f967830365b9c8ff933a354f04618bcbc749a3b61cb09d5a379c991994237dc18b99f8d3135106dd97a028c84c7a650c61","ssdeep":"","tlshash":"c710000000000000000000000000000000003000000000003000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:49:28Z","last_seen":"2026-05-09T02:35:42.489724Z","times_seen":1501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cf0718f692dfc8f934a63412c80eed07","sha1":"8a227144b70c4cb121dbf38ee03e6a929b910c56","sha256":"9a1926854f7c3f6c8de5983cc26c08089cd4c43a454ee9e009488b24d6019b6d","sha512":"d1fd773f3978d45ad5f07c2d8bb8925b7bd1cfd4acf455b3559038b74416cb75c9505fe4c00f397f20be00f64a03f86983f0c4866dac99506abdc8f2e761aee3","ssdeep":"","tlshash":"4dd097f5f5e330486222a68621bdc0041018603abd9a48806399ca8b262260c03cb819","size":231,"data":"","first_seen":"2026-04-09T14:30:38.743033Z","last_seen":"2026-04-17T06:44:31.300263Z","times_seen":555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"92eb5ffee6ae2fec3ad71c777531578f","sha1":"e9d71f5ee7c92d6dc9e92ffdad17b8bd49418f98","sha256":"3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d","sha512":"5267768822ee624d48fce15ec5ca79cbd602cb7f4c2157a516556991f22ef8c7b5ef7b18d1ff41c59370efb0858651d44a936c11b7b144c48fe04df3c6a3e8da","ssdeep":"","tlshash":"c700000000000003c00000300000000000000000000000000003000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-06-16T17:44:28.683384Z","times_seen":76966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1e8a887c5edce93937553ee7da10662c","sha1":"f8e834d0a698608360b9eaf06ed27a60d372db2d","sha256":"2a1bce1c5dffedad6a679fa7a36827cdb876157811539e01850bb52a17f23afd","sha512":"35cb8b6b3a8af5a0f45fc656eabf6927e9427556b027f3b2faed86d2487fc875b0b349c474a0e239bec12259659515d05dbf1fe04e00b62a66c7cb19ec225887","ssdeep":"","tlshash":"b8c022fa286886bf403302900cf78d8500ea309fa9a50b482934a241089404863b2a43","size":188,"data":"","first_seen":"2026-04-09T14:30:38.810932Z","last_seen":"2026-04-17T06:59:24.494428Z","times_seen":1313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a4b7daba322f2d920018430a252b6a17","sha1":"458deb35894d47392fc729b79e4ac404cdaeae79","sha256":"f2a43e26e0132e6523442f2e86fd49ebe19f5d886e3510ce69d59428c3ad08c1","sha512":"0648d5172d0bcaa73e19805a20c4de54f42b4eec38b235df8c330c8f4a53877aa5804004f6f1fb5338e1dd0e3e761a8c0759cd6113f144be297055843f199969","ssdeep":"","tlshash":"7ba024f41710040444410441001f401cf3d03130f10d5c0c4c5cd0cc177d54300054c7","size":68,"data":"","first_seen":"2026-04-09T14:30:38.881335Z","last_seen":"2026-04-17T06:59:24.40456Z","times_seen":1298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3700f097e741a7702f7e4ac61ed88c1a","sha1":"98cd3704dd19c3089ee3013ed0e63a6468550540","sha256":"4eeac15ae345b99db2b063be34cfa006fd7d551f5805a296e5f9fc72ff6efcad","sha512":"e4efb4b4173a7e1e48d041cf16a79dea8d8a8885bb53cf028cd6f2b04b7546dbac7eb625dcb0737e4c6d438e00b46c16e489a689561c90491c34ab551bcb6329","ssdeep":"","tlshash":"c71000000000000000000000c000000000000000000000000c00000300000000000003","size":2,"data":"","first_seen":"2023-03-10T09:28:47Z","last_seen":"2026-05-05T13:31:23.29605Z","times_seen":1886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T17:46:19.150687Z","times_seen":324621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"978251915c807c1a9e86800de2d32a6a","sha1":"9eee27207621a18a15817b50c991ae3f611bb30d","sha256":"551e9e2739aa5dff81b73fb7272846d1f903ae9612ad0fdae19ba59450144669","sha512":"5cfd534f4d50355b2c2b52b1857c2839f35dc7094a9c9de55aea2b6a8fa0131f23525ed0117cbd0fb6ce673c32806cfccffbf303dc57cd60cf49d77f47bf60e0","ssdeep":"","tlshash":"72a0129819402805c4241097c11740146ea073410004944e041dc68c17724920002a73","size":76,"data":"","first_seen":"2026-04-09T14:30:38.734887Z","last_seen":"2026-04-17T06:59:24.305329Z","times_seen":1288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-06-07T08:19:02.131151Z","times_seen":267242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-06-16T17:46:19.119153Z","times_seen":245154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b02291d744e3deef22e73fb825e8b70","sha1":"1c42375c92a03abd287e2420da0b0853d6df9172","sha256":"89b993678475e989b8c44730142039f382c0f66ce8666ad0f5c19cda23ce1da5","sha512":"5ea3a71ef1f5544487f35a3f7a2d2d38f01856a0dd18a01dbe91b360e6cad5c31191a2a8aa8ecf56a3ea1c2fb598487d170ffa4559948598efe572ace80642cd","ssdeep":"768:YLmhGD4F/WHwfGDXdW7JEsAO7J7mqzd8yo47u822cahmMoeNXftZuzSr:kQ2fO7+yx7t2lahq2r","tlshash":"907365240868a8768893e507ddb6ff3e9cf416790bc89a6dbcb7975c01ec6610daf413","size":75400,"data":"","first_seen":"2026-04-15T03:01:03.496467Z","last_seen":"2026-04-15T03:01:03.496467Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ebd826c0efa50d4a5d7b42b382c7a2e1","sha1":"a43d080173bbdb3c4f7d2797a3bc1c7a013fc3a6","sha256":"13f4749ae26a75e8bc67969b49cd1c1b5003d94b729ac51569e35fd30ce6d0fc","sha512":"544cc2c84587d6603a6148aba7a21b111b356c5fe0eef66b1310671a7fd29a76261753d79097530fd09a9c9b906e83e0cb7fc5c5c3bd205d275bbbbf51b33b46","ssdeep":"","tlshash":"9570000a2c08200000a33820080b080802220a08000080800220008c0c380aa3002a08","size":22,"data":"","first_seen":"2026-04-09T14:30:38.927594Z","last_seen":"2026-04-17T06:59:24.41641Z","times_seen":1306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0b9503d19c4340380b3105a1948bbf0","sha1":"2cb8800360b77cb89c67355ce2d2666f6a2ab280","sha256":"77085d9de83ed4a6dae0417298b1693dcccf0f9fb04203e174185db03761f511","sha512":"092b1b7cafd2725a9c89b24e4b0ef5f967830365b9c8ff933a354f04618bcbc749a3b61cb09d5a379c991994237dc18b99f8d3135106dd97a028c84c7a650c61","ssdeep":"","tlshash":"c710000000000000000000000000000000003000000000003000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:49:28Z","last_seen":"2026-05-09T02:35:42.489724Z","times_seen":1501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6943130dba69694584f43322ec8c964f","sha1":"8465676eb0101e1352683678403caa4ce0cd6f84","sha256":"cde9fd846618af6a67c42378b7ef0de58a6e6264f304ba734a24ab71be7d88cd","sha512":"3abedb6a6091a724255b3ff9866f9a529aff248fa44c0e1e9ae426e43bfc772b40769ad99ac8d5fcb4ddabef8c833427084388478bfe22e1352983dd3c19774d","ssdeep":"","tlshash":"e8e072b09929fadfa202235d903ad04d37dcce40ac2c3aae840200ecde0cb80218e93c","size":296,"data":"","first_seen":"2026-04-09T21:05:22.205806Z","last_seen":"2026-04-17T06:55:51.949415Z","times_seen":533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b787d22d9cb06342658bf546039117bc","sha1":"a7ce5b0c7e956b8e3c1a5c254c910d57c56e1b57","sha256":"f5fe88ee08735ae259265495a93c8de2b0eacfecf0cd90b5821479be3199fa8c","sha512":"a4f3b3c9e61b838f8cda07cdaa4a403bfec911a3ef199a1cd92d1a2513fa584029e231e927f8506d3397015250c44e1db5e39d557064a6d00c1e50418addef88","ssdeep":"","tlshash":"c710000000000000000000000000300000c000000000000000000000000c0000000000","size":2,"data":"","first_seen":"2023-05-04T03:04:02Z","last_seen":"2026-06-07T06:38:30.330968Z","times_seen":1841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0c609e39c29ff8a3df65f4fa64ad7b75","sha1":"0046724f9e36186c3bdbf0158bf6a9472ac37612","sha256":"da887ab0cfa19e6bccd1d2263ec0ea5b2bf8c87cb32f66dfad3ba714dce01c4b","sha512":"6feefff9dc2c72bf0fd45154cf4cb9f71499fc1df648a04864efb7df6d058a1048f0e70dc0ad06950b40da269f81dcdc3aa4eafc51ca0681270ae79590a8cbbe","ssdeep":"","tlshash":"4fd02e2f99fc2bbca3c2b2880cc3500873e8acb6a61002c980fb6c8091014cbd09e00c","size":256,"data":"","first_seen":"2026-04-09T21:05:22.232758Z","last_seen":"2026-04-17T06:55:51.953128Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cd957338498985e538753ea8d071e0f9","sha1":"b840ebf240f19d160e8d0c3b90b5eff17293f607","sha256":"0fbc26485e232f572b1a21f1c9e05f832c54fbba1ef95a67cbbb0102d1774cbe","sha512":"e8f3caec3f7e52f6bc4ecb8398d22e1994d974eae79aca3ddcbc91152b5743d12932dfbeb98bcf61e003474177d412333e7dbc886e1f68c220de3c3d8af96677","ssdeep":"","tlshash":"c710000000c000000000000000000000000000000003000000000000000c0000000000","size":2,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-05-21T20:02:56.425041Z","times_seen":2190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-06-16T17:46:19.243887Z","times_seen":173167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2eb17d23bd2fc3c2214db05c280669b","sha1":"42bc8fa73176b494796c9a7d0836a0c623ae3c66","sha256":"d1fc0ab2e06246c380633117045110e0b7f6da75c5466a9a484b1ff999a76817","sha512":"a28ea15da09b873903adcb696781f94ff296e979648d2fee6831ee8d0b7c9117754db2d7d63201bc728a0ddd9442f60b9d192e252fda7711985cad0abae4c6b5","ssdeep":"","tlshash":"62f0e1d946c6439148953ced59dba41c46e4bb3c2e972b1e3b8052ea19bc8e738cad00","size":588,"data":"","first_seen":"2026-04-09T21:05:22.153886Z","last_seen":"2026-04-17T06:59:24.351223Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-06-16T17:46:19.245508Z","times_seen":155998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-06-07T08:19:02.131151Z","times_seen":267242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fbade9e36a3f36d3d676c1b808451dd7","sha1":"395df8f7c51f007019cb30201c49e884b46b92fa","sha256":"594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06","sha512":"5ae625665f3e0bd0a065ed07a41989e4025b79d13930a2a8c57d6b4325226707d956a082d1e91b4d96a793562df98fd03c9dcf743c9c7b4e3055d4f9f09ba015","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000300000000300000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T17:46:19.263483Z","times_seen":56052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f374759f30517a5de5bbe4c07eb079f9","sha1":"74eccb760c00d3ac42813a8fc304543fa0078503","sha256":"d8ba607b3b194cc1463e166f54eda6976656ef23042c9d0b4297d391596d9df0","sha512":"984d28add61e4b53a6ebf26e42728837c4a58a1a975b36df0698986dc1b8b1c86fc9eebff8bd772cd4a0e41756ce7f919ddb90778c8a0f5ac7882d750a11491a","ssdeep":"24576:No+pIPUKIWbouNnyWMhxfJqdePN5r0C3Ze0XVxfq:NBOPUK7bozVhxfJqdePN5De","tlshash":"4e655dd932d2f86143a3e0eb183b0101f57a99497448ca5cbabddeda1da0d07617bfb4","size":1486235,"data":"","first_seen":"2026-04-13T11:27:10.050236Z","last_seen":"2026-04-16T01:05:21.931651Z","times_seen":1080,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/wow.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"21fe90eedcbaafb4ed529d78418d30bd","sha1":"a16375b80220d315151f57bab2d4ee03c9fe1d20","sha256":"7852a22b72ead62cfc4a1b1ca32874b3e222f232a991a6d1432313572f534135","sha512":"30be63048c2b41ea7953dbc137b4c9047704196430cdf1995334092a41fe8c6336f1f109c195c5b47c857ee92838e4ff8d255d7ca8b8280793bc012d35b7fcdf","ssdeep":"192:tmEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:EEE/Amu6qUxVBxGkAI///IR","tlshash":"99f1baa5374a70718e9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","size":8155,"data":"","first_seen":"2023-03-07T01:37:53Z","last_seen":"2026-06-16T17:49:24.947142Z","times_seen":5959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6984e64250b12e9cb2a122e5bf0f76c9","sha1":"4634af473d047237e8fd11103ddfc5adebe87863","sha256":"7219eb9c822d2773d3c6315860d236975e0c87a824d9441d5487824452353e9e","sha512":"7f435aa5bfeaab87b7502c7b93eba916a397d51922ea7412f432e246890ed57d5dedb1d012ecc3f553d47c7623fc00e9cae0ba643fba84ef29288d7b8f6ff7fe","ssdeep":"","tlshash":"b5b012852e462d14201511164433989c1f916f20e823e48d4614c71e1fb238f12478e3","size":95,"data":"","first_seen":"2026-04-09T14:30:38.928756Z","last_seen":"2026-04-17T06:59:24.339541Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2ba67d6a4d20b3b76a56dbb8968608a","sha1":"03207e969b4f76089ce22be972d5611e43525fce","sha256":"5f5ba24cb103199f2c493cb04282f6c51822a9a3034fd4e53d7bb8a318b0dc70","sha512":"577fc0cabeef8419c313cbb234b8e778c18bb43ce8696b2abc316db709f3e4bedb6335ba7442cf486299ce0cccd241cba5b1b48831227d0072eb5cb2e507ae55","ssdeep":"","tlshash":"ebc02b386e2a606a8384e26c3f67c8c8ccf20f3300f9156c4911e0068938f81008fc80","size":142,"data":"","first_seen":"2026-04-09T14:30:38.66216Z","last_seen":"2026-04-17T06:59:24.455988Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b787d22d9cb06342658bf546039117bc","sha1":"a7ce5b0c7e956b8e3c1a5c254c910d57c56e1b57","sha256":"f5fe88ee08735ae259265495a93c8de2b0eacfecf0cd90b5821479be3199fa8c","sha512":"a4f3b3c9e61b838f8cda07cdaa4a403bfec911a3ef199a1cd92d1a2513fa584029e231e927f8506d3397015250c44e1db5e39d557064a6d00c1e50418addef88","ssdeep":"","tlshash":"c710000000000000000000000000300000c000000000000000000000000c0000000000","size":2,"data":"","first_seen":"2023-05-04T03:04:02Z","last_seen":"2026-06-07T06:38:30.330968Z","times_seen":1841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5a828c16cfcd165f5178aee432e46ff5","sha1":"e60f666b5c646f4a496a7e9e6c6b991a4df05371","sha256":"bf0f55267382a59da0970f63acce218fcfa3ad279d248b2e1d0bf8d913f8d76b","sha512":"c538791e1a8f60276997bfa00617a9046fb077487f50c98854da50033114768c6218f5db79e1c91b40289dfbefca783335ee7cd9cf11eb06ec1ca1b5c2e2fd50","ssdeep":"","tlshash":"5af002637a831100ba6a3d31b0165d02ac58b1710679402855d0a1f241f1be72d9df2d","size":613,"data":"","first_seen":"2026-04-09T14:30:38.740338Z","last_seen":"2026-04-17T06:44:31.247891Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fde758c3f4539dd4a2013ad9c875547","sha1":"a748c80378af1a062b593f003c4aebb151e16d9a","sha256":"59a234703f2c3a4a99e738577791baf041d3b16e55013fae262962b8a015bebc","sha512":"98be438ffd6651938784cdf2fa3a40d3508658249ff13d2a2df12404c609a63c2fe70be3df68953f29791a36d712a2ccda914260d5e5ce12f7ff71f7933cd984","ssdeep":"","tlshash":"927000282c082000008a3823820b000ea222020c08080c8082c022a80cb30ca2022c08","size":25,"data":"","first_seen":"2026-04-09T14:30:38.862658Z","last_seen":"2026-04-17T06:59:24.297761Z","times_seen":1364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22770fbdd1177351a869401a0e1427bc","sha1":"a84fdb0f561ba218a613da03931e2c27f3feb715","sha256":"501bdc4f8cb2ded40f4a8bdd4c452602322c7bae5db48131dbe17124c5bf769c","sha512":"23cc87b54b8e0775621dd20e5f69cb509c703fc95528381abc7a2e414faeaa1c4fa097c3a7c108abc55d6b14d8454a66890b9a03d91768ad48d0d494d9264f06","ssdeep":"","tlshash":"c710000000000000000000030000000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-26T05:45:08Z","last_seen":"2026-05-10T05:47:48.555199Z","times_seen":3885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"04cf63667fc721663b5d6dbac6274e24","sha1":"cadffdc91f03286ca4a3fae36d6100146a6114d4","sha256":"46d446c3f35c25237f518cc9455517e621a3b660e8e8cae439bb8b54b6a02b5d","sha512":"f61481099e831a2759ad4b818f99b89c14cb4d8cc6d7ca6adc1ddf6af7a7481d1dbaf76304129fdc7b6c56e9133991aa2ffcf693eb59e7e2114f8b07f4bc1fbb","ssdeep":"","tlshash":"ebd0c2c46206634332e738d9e0535205dd985da3229689cfd54344fe5c108cf89d323c","size":288,"data":"","first_seen":"2026-04-09T21:05:21.997279Z","last_seen":"2026-04-17T06:59:24.45699Z","times_seen":589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d9c307cb7f3c4a32822a51922d1ceaa","sha1":"b51a60734da64be0e618bacbea2865a8a7dcd669","sha256":"8ce86a6ae65d3692e7305e2c58ac62eebd97d3d943e093f577da25c36988246b","sha512":"6b3b006aa3a86286c359a6d243d62a61e46f0c5f7d1db587faa26fbe72718eaee33f774af164e3ba790d4ae4136a25dc993d3246f7be6691fa7346d0be0f1a71","ssdeep":"","tlshash":"c700000000000000c000c0300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T17:46:19.204842Z","times_seen":60958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d161222836b4b10ba954c1f62fdea532","sha1":"41b8d4744466bd45f0694503fa18b6b6c7188d7f","sha256":"5236b254f6781f55f7eeebd7059e14fb6e6112a851866b3d801b7f9826e2d87d","sha512":"d2c8da9f679ac585b2c42ca6fcf2af223f74780dd46376685ee2e61ce723f4bc2d2312669d7fc1e0010567ce5f6a336fac251537deca89d1574f9561f5419ffa","ssdeep":"","tlshash":"2e70000a2c08282000a23820080b080802220a08002000802000008c0c3082a2002808","size":22,"data":"","first_seen":"2026-04-09T14:30:38.708876Z","last_seen":"2026-04-17T06:59:24.434443Z","times_seen":1302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c90b440e841a6b82e1f9b3299164296b","sha1":"5ef8766de935324424b563aa3eb0c7466b293c94","sha256":"94091dd64a21ffe94214bc6d17deeb43873a5cf2f0a71b4b5caa9a5c81b6967d","sha512":"131e9c4698b461db40dc8b4a28f2ab88e6e07e0b9e2bafd183cb0a426b6b70006ca425f1a8336126f063b557f538571928d7af23161e4aea869cc515377fa8bd","ssdeep":"","tlshash":"c7100000000000000000003000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-12T21:10:46Z","last_seen":"2026-06-07T03:50:25.388584Z","times_seen":2500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6ae29a7b55260bdcf12d187d2c1808f1","sha1":"7b2502406c917533d2f555f36f70ed3d3f31354d","sha256":"30bc13b8a0f58143c1259108db64a2db02535ddc89f59d544b70000627bebcd6","sha512":"fc66c2f803430ffca1d58cb095c94aaf988dfea6607c3385b2eb13b02b1553b15f00f53da5136e169fd938da46169fe02fdc6258923c589f1c248533cf6cdb73","ssdeep":"1536:zmqc0dLzEtDTn1Z2pdkhGX5G4WpM9LMlldDqSIbi:71LzEtHn1ZcdkhGX5G42RBq9i","tlshash":"e15317caf2d6733559e271f2001b910993be782adca8196f7d15e3f51e7098b4027f2a","size":62113,"data":"","first_seen":"2026-04-15T03:01:03.503041Z","last_seen":"2026-04-15T03:01:03.503041Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dfcf28d0734569a6a693bc8194de62bf","sha1":"a36a6718f54524d846894fb04b5b885b4e43e63b","sha256":"333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3","sha512":"da637b3f32d7c7e410ab619520e0cf4529169a5c326ecbf4ca7a3bc2330ad49a84fba4d6c8919264eec5dc75ef80137f78cda40e26f3f741b5c9ff259d6efdbf","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000300000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-06-16T17:46:19.193055Z","times_seen":64000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/popper.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1a19a7179db2cec26463ef8b0760358","sha1":"3602db1fe0f480b627e27db589b3eb2493b7851c","sha256":"0faeb94ad15f4a9f605be15aabc44c00fe862cb21eee4d7c5f0a52366c809202","sha512":"b5ee82ba817c2b4daa88218411a46fce2e4d1b8bd10e06834d2da2e9b78c61809d7c654af1dee19425518110bbe37735c91120a8b2d690bf5ee98dcf8c2573c1","ssdeep":"","tlshash":"5e117fce35e1b044666b0235e1bfa50f73faa4a6510d5452b09cd4a47c709be536385e","size":1000,"data":"","first_seen":"2025-04-18T12:21:07.788012Z","last_seen":"2026-04-15T03:01:03.50436Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bd63cda5e59ddb168ec03847f26b831b","sha1":"6edf35ef2232832ac3773615d43febc79f5a3826","sha256":"c08f008b22fde28129086d85bf15a301d653a9d1932b35e6bd0c8e97f9a9deca","sha512":"588f0a9db8e300cc21e03dfd77eab3a5c210b5a41a66addf5429beac69868d43545fa048669a4430e92591cefb730cc7ba7d90073e1e65ba72bf09ca41108bfd","ssdeep":"","tlshash":"c710000000000000000000000000000000000000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-06-10T11:06:44.527043Z","times_seen":2302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2c56ce519be7f3982c7b59284e30fd16","sha1":"d75e447489edc4d3fbd082cf3de15fe5b17295ed","sha256":"2bd0d1597fecb51fdb61707ab11d2c06b9aafe08dccd1b0a131e8c2a7c2e4e33","sha512":"83fcc272a446ac87e5ee02b2349c96ad2f4a35cb11ae130a8908e58bbff76943bc80c9d1fd25b8e6a69827be907a5507e195e395cfda341d1683af02e5a60f0e","ssdeep":"","tlshash":"54a0029f2894981b5131f3a63467e1053569383af11f0e1d057fca9145a47d431277ae","size":66,"data":"","first_seen":"2026-04-09T21:05:22.030197Z","last_seen":"2026-04-17T06:55:51.882647Z","times_seen":577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2a0cf8b99c32f636994897b6f23b9f8","sha1":"eadf7de96a87dc865ec032e97665daabe217015d","sha256":"9aad9adb7835a74d5538d11a7589fbb6cac17bda8f9c8abbbb8b5ec1f6fc9d79","sha512":"e7b9c24417834231eb0f3f9dc526fb84b847a410f2a66b9b533cb50cfb1f533d30ac2c8d20f985dd2c3e2be8026773614bd5392383eaec672d41ab9a4254e85b","ssdeep":"","tlshash":"c710000000000000000000000000003000000000300030000003000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:25:56Z","last_seen":"2026-04-17T06:59:24.332109Z","times_seen":1848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"10174562c7be5ce6a1f49646c84e4d92","sha1":"9c778b075d5a98485603ef80e0bd6f962a144fb5","sha256":"a44ece8547f1bd4dea4a8e2dde0159922b4495c78553b1096352f394f3ed2492","sha512":"a8ed4380b113d741c4a18b401fd69260c00a266f5573e1315f25baeba07a4d1b8d045021e7a4383b5ef11f7cf1bcc287e62eeb8597ca2470250f068af6bd7789","ssdeep":"","tlshash":"c190028421536050027ea09001371059e6793948a51c1d59544001412a5445ea115618","size":49,"data":"","first_seen":"2026-04-09T14:30:38.935925Z","last_seen":"2026-04-17T06:59:24.433498Z","times_seen":1295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-06-16T17:46:19.226919Z","times_seen":232487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2f3f489a00553e7a01d369c103c7251","sha1":"a0509b7780628bd9d9abc7eb8a2163477341053a","sha256":"23794d91c53ae875c8e247d72561e35d9d06ee07c70c9e0dbcc977a6d161504a","sha512":"0f446282a46dfefa3995e9e78443c907aca544aff495badfcb632b9df2457f8491babf852d8ebbe7ecc9392461b559e9e242960f13e624e79dbcfca44a6e5de1","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000003300000000000000000300000000","size":2,"data":"","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-06-16T16:23:07.012956Z","times_seen":7708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"630d66cfdff7bd52dd19abd0ca5b5558","sha1":"ad82d1a160a855a302eda7224cc0cb7a5473c949","sha256":"4683cea81996cd2a8f30db0ef4820c286603da70d5b275840942ecbdc84daf83","sha512":"531ff10feaa134c81281d167ba0cc6ba93ced16f4b1b02127946461636791125ec3a4701519e644fe0eac7a6f362efc92674de5e28c7f05c174c5a0a332126ff","ssdeep":"","tlshash":"e3b02bc0b04c0400f3d1901b20364004e77d1894ec04c984d152a899697330b043cf2a","size":129,"data":"","first_seen":"2026-04-09T14:30:38.885234Z","last_seen":"2026-04-17T06:59:24.499191Z","times_seen":1298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b2b6ee3754ad6d61ed4909c98453043e","sha1":"91ef6cf78a9b2bf83f97792cf49d9f8e7f8ba011","sha256":"23f4cab0d406c8965bccb10ea471c31cfa8ef17809349ccd86ec1c977610a6a3","sha512":"7cdc6ca1ec85b4cf1bcee15d4b5fefad14508cc3d7fad1d7358c32feebe2940a55410ea9322edb756ec2a56e5026ae281d539ae16ae915fc1196f6ccb41a16ac","ssdeep":"","tlshash":"d0a011cc3aa8082008a322a2800b288c0bb03028a02828cc0028c2880bb02ba0082003","size":79,"data":"","first_seen":"2026-04-09T14:30:38.765058Z","last_seen":"2026-04-17T06:59:24.445319Z","times_seen":1290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b34cab55d3c63f2423425c354cf90756","sha1":"24aa05536e683c08a81c5932191936aef825259b","sha256":"fb2c7d8dd35f85951b7c92b4b4c3b7332d67bb93c82a2b3303eb2106251bc75c","sha512":"cce7cbb016833d7a790332258363fd73a7d1da763f9cf5fed6eb77c57f0da7553ee594658f00b433b3616d19c5cce68760066652e5a02c9f2056975522955cc0","ssdeep":"","tlshash":"c710000000000000000000000000000000000003000000000c00000000000000000000","size":2,"data":"","first_seen":"2023-03-14T16:29:28Z","last_seen":"2026-04-17T06:59:24.324536Z","times_seen":2634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-06-16T17:46:19.253921Z","times_seen":173791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-06-07T08:19:02.131151Z","times_seen":267242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"29ef5aae50cb12d155df2c036ad69cfb","sha1":"4ad350bf051a3efed83890826a754cf6e183fb5e","sha256":"401148004524f7d1f7d884e9d5ba71ba37f8315cc5da8ae30b6ada2adca38d3c","sha512":"a84e959ad1bbf2c645d19e8578035c665580d293fcc3fe1a55bd62446e289886e24dc875a06e925e99c8d32121e4ba59f0844405cdbbd3558c24f121e269cdde","ssdeep":"","tlshash":"4fd0c2c46206634332e738d9e0535205dd985da3229689cfd54344fe4c108cf89d323c","size":286,"data":"","first_seen":"2026-04-09T14:30:38.592229Z","last_seen":"2026-04-17T06:59:24.407415Z","times_seen":1299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"978251915c807c1a9e86800de2d32a6a","sha1":"9eee27207621a18a15817b50c991ae3f611bb30d","sha256":"551e9e2739aa5dff81b73fb7272846d1f903ae9612ad0fdae19ba59450144669","sha512":"5cfd534f4d50355b2c2b52b1857c2839f35dc7094a9c9de55aea2b6a8fa0131f23525ed0117cbd0fb6ce673c32806cfccffbf303dc57cd60cf49d77f47bf60e0","ssdeep":"","tlshash":"72a0129819402805c4241097c11740146ea073410004944e041dc68c17724920002a73","size":76,"data":"","first_seen":"2026-04-09T14:30:38.734887Z","last_seen":"2026-04-17T06:59:24.305329Z","times_seen":1288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1e8a887c5edce93937553ee7da10662c","sha1":"f8e834d0a698608360b9eaf06ed27a60d372db2d","sha256":"2a1bce1c5dffedad6a679fa7a36827cdb876157811539e01850bb52a17f23afd","sha512":"35cb8b6b3a8af5a0f45fc656eabf6927e9427556b027f3b2faed86d2487fc875b0b349c474a0e239bec12259659515d05dbf1fe04e00b62a66c7cb19ec225887","ssdeep":"","tlshash":"b8c022fa286886bf403302900cf78d8500ea309fa9a50b482934a241089404863b2a43","size":188,"data":"","first_seen":"2026-04-09T14:30:38.810932Z","last_seen":"2026-04-17T06:59:24.494428Z","times_seen":1313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c90b440e841a6b82e1f9b3299164296b","sha1":"5ef8766de935324424b563aa3eb0c7466b293c94","sha256":"94091dd64a21ffe94214bc6d17deeb43873a5cf2f0a71b4b5caa9a5c81b6967d","sha512":"131e9c4698b461db40dc8b4a28f2ab88e6e07e0b9e2bafd183cb0a426b6b70006ca425f1a8336126f063b557f538571928d7af23161e4aea869cc515377fa8bd","ssdeep":"","tlshash":"c7100000000000000000003000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-12T21:10:46Z","last_seen":"2026-06-07T03:50:25.388584Z","times_seen":2500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7fde758c3f4539dd4a2013ad9c875547","sha1":"a748c80378af1a062b593f003c4aebb151e16d9a","sha256":"59a234703f2c3a4a99e738577791baf041d3b16e55013fae262962b8a015bebc","sha512":"98be438ffd6651938784cdf2fa3a40d3508658249ff13d2a2df12404c609a63c2fe70be3df68953f29791a36d712a2ccda914260d5e5ce12f7ff71f7933cd984","ssdeep":"","tlshash":"927000282c082000008a3823820b000ea222020c08080c8082c022a80cb30ca2022c08","size":25,"data":"","first_seen":"2026-04-09T14:30:38.862658Z","last_seen":"2026-04-17T06:59:24.297761Z","times_seen":1364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1fc378d7a35ac46d0e8dcee217de3147","sha1":"2b4a6c6493bf4748649fc44568f80657a84c6daf","sha256":"3f6eb2b437feb99af5cc9c880deb85d3bbe2ed13c039d5697bc114ff92b4a3fc","sha512":"fd7a615fab8bd87272faaf95e260eaa10e0d7fdd7e58ced2026b800e0f4ebf37ed632c27d026f912fe210ec3b647dcec858b18bab2be9d402427a37aba0cca6e","ssdeep":"","tlshash":"4aa02202282830820282288b303380bcbbf382000000c88c2f38c20c2fb88cb0383c23","size":72,"data":"","first_seen":"2026-04-09T14:30:38.873433Z","last_seen":"2026-04-17T06:59:24.438205Z","times_seen":1366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5b146dcb8559d8678a8be0a425c71f86","sha1":"e583efab42fecca5815da74de6982dfa7b82e008","sha256":"bd50374f7518ccc492b21be4e92bb91eca102ab2a8f29c592b2af5ea386acbfc","sha512":"f7084f99d8e691a3883fec950fabfd6418bad029e2b15e4e72f4cddd2321eba193c08861e4f3198ee073bef12db8cd0eb862d52790348f8fcd3b7966dec8f70b","ssdeep":"1536:Dmqc0dLzEtDTn1Z2pdkhGX5G4WpM9LMlldDqSIbi:r1LzEtHn1ZcdkhGX5G42RBq9i","tlshash":"ff5317caf2d6733559e271f2001b910993be782adca8196f7d15e3f51e7098b4027f2a","size":62307,"data":"","first_seen":"2026-04-15T03:01:03.507517Z","last_seen":"2026-04-15T03:01:03.507517Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d5236c8e67d7d1041d6cf447ac99a6c7","sha1":"1db75602190e7e6dd86954e47e295bfe8e2cc937","sha256":"827b9a5231652cb4f69034392aad552d319a72196d126a000eaee2c3c234abb2","sha512":"f3d7c1715b03eba5f0d13d6a86a23eff864ae827c77f082faa4e04733bc69b5dbf0d068676c4dd544aa6d34e3159bcb01b3d2f10b349c48827b2c30256cfadb4","ssdeep":"","tlshash":"d6e068c0e41617d308e3dcddf01b668037081e21b5bf8f9be501a31288a89c6aad7f9c","size":371,"data":"","first_seen":"2026-04-09T14:30:38.915851Z","last_seen":"2026-04-17T06:59:24.463438Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c345adfb4360eb2faad464f7d63971e0","sha1":"31276ae7c89a83dcf1068a4c37a928c8803c78ec","sha256":"36f788e3cd8987438bc7213a4f50d71ab57f7fe9e64a2812adafe9e0aa910d79","sha512":"7846dc396ec2948d4b9651fe45a2c97ac8554df7e5338b881c36223236090e148d4c327596d848af81e00df275bb4a1e8a0a9a892eec4114b805f16df35473ed","ssdeep":"1536:jmqc0dLzEtDTn1Z2pdkhGX5G4WpM9LMlldDqSIbi:L1LzEtHn1ZcdkhGX5G42RBq9i","tlshash":"fd6317caf2d6733559e271f2001b910993be782adca8196f7d15e3f51e7098b4027f2a","size":68687,"data":"","first_seen":"2026-04-15T03:01:03.508255Z","last_seen":"2026-04-15T03:01:03.508255Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3cf4eac2f79fc1596aa36d062649217a","sha1":"f28064d46add3ebd4b82e81ba5203daea8131d26","sha256":"4e3ef4bb3568ec11e0058c57f1fe5ac07b119834d614e554b8b1bc0d90da9ce2","sha512":"bc6d312a3c51ba9a69dae5f94f0870f868ddea5ea6477b2eda01d44edb8457bfa4be80e842d62d0c42de35e81936924c443c4d32a61b10155d07b4001d208d8c","ssdeep":"","tlshash":"70a012cc3a68042004e321914007144c0bb43128a45458cc4014c24807b02750041003","size":79,"data":"","first_seen":"2026-04-09T14:30:38.941738Z","last_seen":"2026-04-17T06:59:24.323718Z","times_seen":1300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2f547b466c1fddb29e277760fc0dbe6","sha1":"a08414355baac881b57c6704cc9817b963ee6736","sha256":"d8ebf479ab43ce6ca5da3df5149b5c029fb8a3c053ccc3727b5f28bcdfabe355","sha512":"82d98cccd4ad81ae834ee8858f00c733ea142e6e4ba5d000da4f017f6a174c36150f6553ae190d4600d4b932a5c2dd035a402427fe6fee5a9f035116b9c5221b","ssdeep":"","tlshash":"a98000282c08200220823823820b002e222a0c20000a2e8002c00a8c0cb00ab3082c08","size":26,"data":"","first_seen":"2026-04-09T14:30:38.943749Z","last_seen":"2026-04-17T06:59:24.301452Z","times_seen":1367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b787d22d9cb06342658bf546039117bc","sha1":"a7ce5b0c7e956b8e3c1a5c254c910d57c56e1b57","sha256":"f5fe88ee08735ae259265495a93c8de2b0eacfecf0cd90b5821479be3199fa8c","sha512":"a4f3b3c9e61b838f8cda07cdaa4a403bfec911a3ef199a1cd92d1a2513fa584029e231e927f8506d3397015250c44e1db5e39d557064a6d00c1e50418addef88","ssdeep":"","tlshash":"c710000000000000000000000000300000c000000000000000000000000c0000000000","size":2,"data":"","first_seen":"2023-05-04T03:04:02Z","last_seen":"2026-06-07T06:38:30.330968Z","times_seen":1841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d6ff1ddccaf97e074ac78d7d1749a658","sha1":"82ad3da0ddfd300d797c6ecb6684ffd871709181","sha256":"3ea1dbea78e232d2444e39d273b098d8c4a367e61b45c33f1f4303cb1eeb734d","sha512":"48ee2a1c5d6cf7d615a2aed8f7c13bec4a1047a6d5a1b47ca503f31772f59cd1017f0915f80e994559553e44b520ecde6808fc5d4ca68701b21bbd8e0dcbc8e5","ssdeep":"","tlshash":"c710000000c000000000000000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-09-06T10:27:18Z","last_seen":"2026-06-07T19:29:41.576512Z","times_seen":3834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f38ee76ce06ccd13940482aced1c7391","sha1":"69590b192b270e6205f5adcc15d42b8500bf48e7","sha256":"550a92e330a86fa0a314c5bdde5a76c4168d753b45144d2780cbf2c26aa033dc","sha512":"947c90d8346b5e7d63d5c61af54e2770ddfb44738ebebb3a4937d1d3a70e24b3359f7d9e1388f06e43b7e28da5243b4deac70330a6e98eca03cb99d1febf96e0","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000000000000000000c000000","size":2,"data":"","first_seen":"2023-03-10T08:48:35Z","last_seen":"2026-06-07T19:29:41.658245Z","times_seen":4132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.meanmenu.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e766f83bd6115e8c5ef3d95c07a9126","sha1":"22ef6499abd142d66363299a0b138f0ba1582e76","sha256":"114817c3d63b010fca17c5d431c6e38ce4220ea9e316532bbddba933ffeba2a7","sha512":"d06659002ceb6a9f3bad307632270866bde2978f507e98b05d1028515951058d4e739722a9e03834d87e8dbd9639ccdbf1f38295e035ebb6ca354df80d07ca2f","ssdeep":"96:n771uMXsA2XNnaToz99t56txMsLcCMoGIh7b6eFSEvU:77QMXsTP6VQCMlIhKAvU","tlshash":"0dc1ee6bb5b044f8a0bb7855b93eb23030f3640bf949e90032ad65262f1997515b2ffd","size":5931,"data":"","first_seen":"2023-03-07T22:42:44Z","last_seen":"2026-06-10T09:22:24.156981Z","times_seen":181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2f547b466c1fddb29e277760fc0dbe6","sha1":"a08414355baac881b57c6704cc9817b963ee6736","sha256":"d8ebf479ab43ce6ca5da3df5149b5c029fb8a3c053ccc3727b5f28bcdfabe355","sha512":"82d98cccd4ad81ae834ee8858f00c733ea142e6e4ba5d000da4f017f6a174c36150f6553ae190d4600d4b932a5c2dd035a402427fe6fee5a9f035116b9c5221b","ssdeep":"","tlshash":"a98000282c08200220823823820b002e222a0c20000a2e8002c00a8c0cb00ab3082c08","size":26,"data":"","first_seen":"2026-04-09T14:30:38.943749Z","last_seen":"2026-04-17T06:59:24.301452Z","times_seen":1367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-06-16T17:46:19.253921Z","times_seen":173791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"41f598e6dcd36b3c751272d11bac0d5a","sha1":"1cc1cbc38136337e90a150c8918057a8b8891819","sha256":"5d8d2e37d26c3db3345eb7595fef365b59ee5ca477323a5745621a0f1c73da3e","sha512":"30efa9c7380852f30d017dc1bc9048ba610e3bfc601875e32b92b016074f0b989245436568d0ac27cfc39f32062aaac7931b45272dd0262eb8c0cd5c44a37c6d","ssdeep":"","tlshash":"85b08c8c1926002614c098208fbbce08c30d602644290e0d4161b4c60d80e101973482","size":129,"data":"","first_seen":"2026-04-09T14:30:38.623395Z","last_seen":"2026-04-17T06:59:24.304507Z","times_seen":1297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b34cab55d3c63f2423425c354cf90756","sha1":"24aa05536e683c08a81c5932191936aef825259b","sha256":"fb2c7d8dd35f85951b7c92b4b4c3b7332d67bb93c82a2b3303eb2106251bc75c","sha512":"cce7cbb016833d7a790332258363fd73a7d1da763f9cf5fed6eb77c57f0da7553ee594658f00b433b3616d19c5cce68760066652e5a02c9f2056975522955cc0","ssdeep":"","tlshash":"c710000000000000000000000000000000000003000000000c00000000000000000000","size":2,"data":"","first_seen":"2023-03-14T16:29:28Z","last_seen":"2026-04-17T06:59:24.324536Z","times_seen":2634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-16T17:46:19.208931Z","times_seen":221801,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"084243855820f9ca47f466f645784636","sha1":"a67acd6e68f872b807a1c9afe3a2453564e57877","sha256":"7292b55d8cfc45bafdf2e1b0f95fa765a408db524664d882aa49d9769f9c9ead","sha512":"963dba6aa91543f42099b2d5b58cd06f7db9eb144dc6c7b7b42928dbf2d723d241be4ee693599767bfc0caa153d1288ae1b9fd62b10152962b782e5c32548da1","ssdeep":"","tlshash":"c710000000000003000000000000000000000000000300000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T13:20:54Z","last_seen":"2026-06-03T06:52:08.227785Z","times_seen":1988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"73bebce395b6f1efedcf6842fbdb4d76","sha1":"42a0d3068dfe7945d084813fd66eb69745020815","sha256":"a898df22bfc74a1ae298c73211ab3b319e5b8da7543d6cd002a8dc4f8723be43","sha512":"ae747c3e0ee4f2e3f9ee5ea12badfba3309cdbaf779c150111a5dd773db27343bbab108d83a9593a9481210ac446f74cc296f345286b96d39a4794197cbdd3a9","ssdeep":"","tlshash":"c71000000000000000000000030000000000c000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:07:29Z","last_seen":"2026-06-03T19:25:42.155095Z","times_seen":3137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cf2d753c03f8760a7603fa34ab0ef518","sha1":"f328760fd241677c38b823a0882cc89eb7d14078","sha256":"1888911de168ad3ece7cd5207512a7f06ada52b368fbcaa2da30e59d1f79ce84","sha512":"e107d688390b515855f2e2df3c536a40e482bd5b06af60cd6287e84b8ddd95d4bcaeeb1bd3de543f798a177318777c21bd2786a4ae18bd8b3d82a5963cecbb9f","ssdeep":"","tlshash":"0dd097f5f5e330086222a68621bdc0041018603abc9a48806399ca8b262220c03cb819","size":229,"data":"","first_seen":"2026-04-09T14:30:38.790161Z","last_seen":"2026-04-17T06:59:24.408308Z","times_seen":1293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ebd826c0efa50d4a5d7b42b382c7a2e1","sha1":"a43d080173bbdb3c4f7d2797a3bc1c7a013fc3a6","sha256":"13f4749ae26a75e8bc67969b49cd1c1b5003d94b729ac51569e35fd30ce6d0fc","sha512":"544cc2c84587d6603a6148aba7a21b111b356c5fe0eef66b1310671a7fd29a76261753d79097530fd09a9c9b906e83e0cb7fc5c5c3bd205d275bbbbf51b33b46","ssdeep":"","tlshash":"9570000a2c08200000a33820080b080802220a08000080800220008c0c380aa3002a08","size":22,"data":"","first_seen":"2026-04-09T14:30:38.927594Z","last_seen":"2026-04-17T06:59:24.41641Z","times_seen":1306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"73bebce395b6f1efedcf6842fbdb4d76","sha1":"42a0d3068dfe7945d084813fd66eb69745020815","sha256":"a898df22bfc74a1ae298c73211ab3b319e5b8da7543d6cd002a8dc4f8723be43","sha512":"ae747c3e0ee4f2e3f9ee5ea12badfba3309cdbaf779c150111a5dd773db27343bbab108d83a9593a9481210ac446f74cc296f345286b96d39a4794197cbdd3a9","ssdeep":"","tlshash":"c71000000000000000000000030000000000c000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:07:29Z","last_seen":"2026-06-03T19:25:42.155095Z","times_seen":3137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5a544a1c14fe313c3245c3267a292b8e","sha1":"ff9dedefe9ee78b3339d23163d8b29a3c83c6016","sha256":"ad3e69e9aa860657cc6476770fe253d08198746b9fcf9dc3186b47eb85c30335","sha512":"0e80f39667629731acd790ff27dca09d2f8e771228ea70073e7545b8a0ac6037960a84f8b2e2541eb9135aef8b3b17182052c26833b067ec4efd4c6cbcd58756","ssdeep":"","tlshash":"c710000003000000000000000000000000000000300000000000000000000000000000","size":2,"data":"","first_seen":"2023-07-29T09:11:33Z","last_seen":"2026-06-15T06:56:26.665896Z","times_seen":4127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"43fed148b92abbec9687af1356c7e347","sha1":"2bf8f41cb838b29ccecca244812738379bf6e57d","sha256":"eb074cd8374ba297218e47323e01f47212c25e4129582cb9f77072841386bda3","sha512":"d42e80fa6d2d14679a0d72f25cb95d148f1a4b750368ed95d829c079dc33671d2da1e5531ec6f734c9758f93f2eca8574ed7f27bc9c15ba4e9efdf08982ddfc0","ssdeep":"","tlshash":"c71000000c00000c000000000000000000000000000000000000000000000000000030","size":2,"data":"","first_seen":"2023-03-10T18:32:14Z","last_seen":"2026-04-17T06:59:24.447038Z","times_seen":3604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fa9ef35e20b44910545531c7840f5fab","sha1":"6467404d94928ce85891bbbafea843681a4f078a","sha256":"f87a64699c04e68d61cec84a3fb6bb257a9334af69fefbed462a441c8176799d","sha512":"ef52fd6c4b6edd197035c0f420709db78c28b95db83b57ea6946bb7248dbf13d6e6a7db08a7bf7c4a96e04ee7d3c91674f46c2c940eaa133cc54be803c0e5b76","ssdeep":"","tlshash":"f201d0202616223d08e89fbe581331908675b166e65b0c377804eba3d5f545338615b3","size":767,"data":"","first_seen":"2026-04-09T14:30:38.634215Z","last_seen":"2026-04-17T06:59:24.350237Z","times_seen":1299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"73bebce395b6f1efedcf6842fbdb4d76","sha1":"42a0d3068dfe7945d084813fd66eb69745020815","sha256":"a898df22bfc74a1ae298c73211ab3b319e5b8da7543d6cd002a8dc4f8723be43","sha512":"ae747c3e0ee4f2e3f9ee5ea12badfba3309cdbaf779c150111a5dd773db27343bbab108d83a9593a9481210ac446f74cc296f345286b96d39a4794197cbdd3a9","ssdeep":"","tlshash":"c71000000000000000000000030000000000c000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:07:29Z","last_seen":"2026-06-03T19:25:42.155095Z","times_seen":3137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6984e64250b12e9cb2a122e5bf0f76c9","sha1":"4634af473d047237e8fd11103ddfc5adebe87863","sha256":"7219eb9c822d2773d3c6315860d236975e0c87a824d9441d5487824452353e9e","sha512":"7f435aa5bfeaab87b7502c7b93eba916a397d51922ea7412f432e246890ed57d5dedb1d012ecc3f553d47c7623fc00e9cae0ba643fba84ef29288d7b8f6ff7fe","ssdeep":"","tlshash":"b5b012852e462d14201511164433989c1f916f20e823e48d4614c71e1fb238f12478e3","size":95,"data":"","first_seen":"2026-04-09T14:30:38.928756Z","last_seen":"2026-04-17T06:59:24.339541Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5854246b025dfc6a7cc64db2e78ab0a1","sha1":"c99d9cc9debbea7e8a0f6a9ebf0977bbc430b00e","sha256":"dd5dd66346e86f2c57896094de4b32ed1ca12bde3c3abc1cab6889e6a211c24c","sha512":"4be19b11199806750604a8ebff51e0c5f6bf92da1d0ea225695e9bb9dcd8978607e0d1727c4dd497bef9dbf6c380f5aff3d12f62efb3124dcc90e3d65eee5f9a","ssdeep":"","tlshash":"cf51dc3cef61946bc4f9e47ab4831b43f32852478415981fbd6e089c5f4e8a4e69a738","size":2895,"data":"","first_seen":"2025-07-12T07:10:36.200304Z","last_seen":"2026-04-15T03:01:03.512165Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2a5dbfd249d091c1886dddef461d1b7c","sha1":"d441ad79bf41005f096d8d6434b85a900c5f7d6a","sha256":"31a2f2e45183d66497142175c93c11e0272d73b265213433acef155ad0170fae","sha512":"5926be6034bea804605ae79bf64089c14528acef26410f1f55afa4b5160f489f0e414ca8a79622fdaae3c73ce44f50ce25a14275514f21de92958ab90596ea07","ssdeep":"","tlshash":"dfd023d92d65c091708920d9d45a895913f5d415cc757d08573700c51d5060329e7f76","size":213,"data":"","first_seen":"2026-04-09T14:30:38.730467Z","last_seen":"2026-04-17T06:59:24.327014Z","times_seen":1312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f627f434fe2cf60a157a901b8d8b36f2","sha1":"57b4b6cf4138c0d0349c432308dea7cde1731ee5","sha256":"11f7e6059d8328f6d6f7cf114b134faa96c343dc11025b47c2321b6eb723c1ca","sha512":"469419298715d4f29695580d65e95dba1e8b0efb8a7a9d8cb7274042bec7d73259f6956ac016470d30b3d43fa214b30528a95ebd626e692ad349c96f7ae8e1f4","ssdeep":"768:tsqhGD4FdWHwfGDHul5vJETO7JZmqUd8yo4Su822vah6JMazN1UvZ6PeV:yUdSO7tyxSt20ahlV","tlshash":"de7353240868a872c8939407deb5ff3e9ce416790bc99a6dbdbb975c01ec6610e9f413","size":73801,"data":"","first_seen":"2026-04-15T03:01:03.512735Z","last_seen":"2026-04-15T03:01:03.512735Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f374759f30517a5de5bbe4c07eb079f9","sha1":"74eccb760c00d3ac42813a8fc304543fa0078503","sha256":"d8ba607b3b194cc1463e166f54eda6976656ef23042c9d0b4297d391596d9df0","sha512":"984d28add61e4b53a6ebf26e42728837c4a58a1a975b36df0698986dc1b8b1c86fc9eebff8bd772cd4a0e41756ce7f919ddb90778c8a0f5ac7882d750a11491a","ssdeep":"24576:No+pIPUKIWbouNnyWMhxfJqdePN5r0C3Ze0XVxfq:NBOPUK7bozVhxfJqdePN5De","tlshash":"4e655dd932d2f86143a3e0eb183b0101f57a99497448ca5cbabddeda1da0d07617bfb4","size":1486235,"data":"","first_seen":"2026-04-13T11:27:10.050236Z","last_seen":"2026-04-16T01:05:21.931651Z","times_seen":1080,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","size":510435,"data":"","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.nice-select.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-06-16T16:39:15.620846Z","times_seen":9390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-06-16T17:46:19.122654Z","times_seen":96584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fac166dcd2811ce169e58cb5ca85d4e0","sha1":"26cb34c6a8931cfd683cec577f5204df5dfbf427","sha256":"5cf67e2d728e5794eda9ec59e10dcf186aff044dcb8a01215ef5753ad1480da9","sha512":"bad75f997761fc47f786be109f5ff70a40077fc02feba82de564c0f737a7bce30c1a0740dfc4fe16f6949ebfc118f2540865db917c8a8f67632eea0dbf608dd3","ssdeep":"","tlshash":"bcd0a7d45619dd059e28195b065b5578c1717c18592c2c4f99806dc899701d28666603","size":222,"data":"","first_seen":"2026-04-09T14:30:38.833634Z","last_seen":"2026-04-17T06:59:24.40161Z","times_seen":1323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96ef36e736a8b0748aaf6fa927874af6","sha1":"370d5bb27c2c10cfad937ced1ac0615efef0eff6","sha256":"c97e30c9091a369e38ecdefac9ac1499f1edc5562b4ef33a2b25124348a60a89","sha512":"8bc88db614735267c4eb354ea3fca5c99d479222730cdc4c96ac9c40d922065449c1b4c269a90a67e560fb24dbd91d9261eef14a220655acb67114ca8e5b300a","ssdeep":"","tlshash":"1be02da30b3318a3f3b7208060061c8ef7b84d97ac3e386e891070609da0ec3885d5c0","size":321,"data":"","first_seen":"2026-04-09T14:30:38.737466Z","last_seen":"2026-04-17T06:59:24.413247Z","times_seen":1172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b787d22d9cb06342658bf546039117bc","sha1":"a7ce5b0c7e956b8e3c1a5c254c910d57c56e1b57","sha256":"f5fe88ee08735ae259265495a93c8de2b0eacfecf0cd90b5821479be3199fa8c","sha512":"a4f3b3c9e61b838f8cda07cdaa4a403bfec911a3ef199a1cd92d1a2513fa584029e231e927f8506d3397015250c44e1db5e39d557064a6d00c1e50418addef88","ssdeep":"","tlshash":"c710000000000000000000000000300000c000000000000000000000000c0000000000","size":2,"data":"","first_seen":"2023-05-04T03:04:02Z","last_seen":"2026-06-07T06:38:30.330968Z","times_seen":1841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-06-16T16:15:03.036052Z","times_seen":3371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","size":510435,"data":"","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-06-16T17:46:19.122654Z","times_seen":96584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"10db8021dffc13d3d0a71f94fbd60491","sha1":"fe476cca239bc61cb08a492b78f5caa33d338a44","sha256":"c0d4267dfa256bef05bcb91672723edad5cb4b1291986f582ee3d75159e225f1","sha512":"f34c08c9a9caad5762745c7cd8d843649809e77291fcb87b65c47bb3202399587f621b3684fa3bb055cb40cf7c26da045c27c31c7663bae7a3b140be86ec02a1","ssdeep":"","tlshash":"f0d0a7c2706db45117237c18099b7819a57a759a761e132c851280f71b6184b802bb1d","size":222,"data":"","first_seen":"2026-04-09T14:30:38.939343Z","last_seen":"2026-04-17T06:59:24.4297Z","times_seen":1292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T16:57:42.461603Z","times_seen":61104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b787d22d9cb06342658bf546039117bc","sha1":"a7ce5b0c7e956b8e3c1a5c254c910d57c56e1b57","sha256":"f5fe88ee08735ae259265495a93c8de2b0eacfecf0cd90b5821479be3199fa8c","sha512":"a4f3b3c9e61b838f8cda07cdaa4a403bfec911a3ef199a1cd92d1a2513fa584029e231e927f8506d3397015250c44e1db5e39d557064a6d00c1e50418addef88","ssdeep":"","tlshash":"c710000000000000000000000000300000c000000000000000000000000c0000000000","size":2,"data":"","first_seen":"2023-05-04T03:04:02Z","last_seen":"2026-06-07T06:38:30.330968Z","times_seen":1841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/custom.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c26a785c8d563dae861e970c6444189","sha1":"e65ba95e755885ef80d20a27055d24e882d2d777","sha256":"29ec1b8f57a1fe87ef14d3097960338658f8d62839f0b850c0a07288ff237fc3","sha512":"9e5df2561dc71589171275727cd9bb925a482d3d794597021b66079e423ec6a00ba887cabfad3e13d24cb1c8fe19cb2a4a6e25a4c988011533dda8739504d588","ssdeep":"192:GSVffzK6zBOIdsObuitTzB5PCP1YE0Y95M5U5cPP/l:GofzK6zBNdsObuitTzBZ+119auWfl","tlshash":"8ae14546f77c10a059bb71a98abe91c2573e2103f80765a7f0fd05285fc967e30b6947","size":7085,"data":"","first_seen":"2025-03-20T21:52:11.231494Z","last_seen":"2026-06-05T03:59:04.149047Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a4b7daba322f2d920018430a252b6a17","sha1":"458deb35894d47392fc729b79e4ac404cdaeae79","sha256":"f2a43e26e0132e6523442f2e86fd49ebe19f5d886e3510ce69d59428c3ad08c1","sha512":"0648d5172d0bcaa73e19805a20c4de54f42b4eec38b235df8c330c8f4a53877aa5804004f6f1fb5338e1dd0e3e761a8c0759cd6113f144be297055843f199969","ssdeep":"","tlshash":"7ba024f41710040444410441001f401cf3d03130f10d5c0c4c5cd0cc177d54300054c7","size":68,"data":"","first_seen":"2026-04-09T14:30:38.881335Z","last_seen":"2026-04-17T06:59:24.40456Z","times_seen":1298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"25d634a84b6d28fe88e5652767a38e85","sha1":"6956d3102bbb653ee09ce92bd96eea98d3ca6459","sha256":"5dcd9e40e69804d784812e00686f3b11403495e3618942e32cc15e709d9f49d8","sha512":"414e0a54e406f3a790c205efba1b9d60d537eb4840152fb4a1d2819a9d17c4a16c5ced546231e3561f500fc6898ed699762574e7466bfad7dadc55a684133449","ssdeep":"768:MsmhGD4FdWHwfGDmUqhIJEl1JO7J7mq7d8yo4Nu822vahfMaNS9xrv8D6ki:7ouYDO7WyxNt20ahKjX","tlshash":"1d7376540868a876c893a547deb6ff3e9cf406790bc8966ebcb7875c01ec6610e9f413","size":73666,"data":"","first_seen":"2026-04-15T03:01:03.515004Z","last_seen":"2026-04-15T03:01:03.515004Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f38ee76ce06ccd13940482aced1c7391","sha1":"69590b192b270e6205f5adcc15d42b8500bf48e7","sha256":"550a92e330a86fa0a314c5bdde5a76c4168d753b45144d2780cbf2c26aa033dc","sha512":"947c90d8346b5e7d63d5c61af54e2770ddfb44738ebebb3a4937d1d3a70e24b3359f7d9e1388f06e43b7e28da5243b4deac70330a6e98eca03cb99d1febf96e0","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000000000000000000c000000","size":2,"data":"","first_seen":"2023-03-10T08:48:35Z","last_seen":"2026-06-07T19:29:41.658245Z","times_seen":4132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e34dff622740a5e2d6ed9c41d3c49688","sha1":"fadd56ec452f32494dcac8d1adde33d451bf70c7","sha256":"3f98114b0f77b7da78bca527117c4f3126aafbba8b94b68b0bc3ccd13944258d","sha512":"f711324b51b9640ffb3788c2388375542c59df3dcf4a7c772d5ab609148dcde0e150db258d86a8a11488168374f0fcf95f7ca2831eb7fb12876e2bb9b6f666a4","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000000000000000003","size":2,"data":"","first_seen":"2023-03-10T14:46:11Z","last_seen":"2026-05-02T05:24:20.939964Z","times_seen":3374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fbade9e36a3f36d3d676c1b808451dd7","sha1":"395df8f7c51f007019cb30201c49e884b46b92fa","sha256":"594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06","sha512":"5ae625665f3e0bd0a065ed07a41989e4025b79d13930a2a8c57d6b4325226707d956a082d1e91b4d96a793562df98fd03c9dcf743c9c7b4e3055d4f9f09ba015","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000300000000300000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T17:46:19.263483Z","times_seen":56052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f374759f30517a5de5bbe4c07eb079f9","sha1":"74eccb760c00d3ac42813a8fc304543fa0078503","sha256":"d8ba607b3b194cc1463e166f54eda6976656ef23042c9d0b4297d391596d9df0","sha512":"984d28add61e4b53a6ebf26e42728837c4a58a1a975b36df0698986dc1b8b1c86fc9eebff8bd772cd4a0e41756ce7f919ddb90778c8a0f5ac7882d750a11491a","ssdeep":"24576:No+pIPUKIWbouNnyWMhxfJqdePN5r0C3Ze0XVxfq:NBOPUK7bozVhxfJqdePN5De","tlshash":"4e655dd932d2f86143a3e0eb183b0101f57a99497448ca5cbabddeda1da0d07617bfb4","size":1486235,"data":"","first_seen":"2026-04-13T11:27:10.050236Z","last_seen":"2026-04-16T01:05:21.931651Z","times_seen":1080,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"92eb5ffee6ae2fec3ad71c777531578f","sha1":"e9d71f5ee7c92d6dc9e92ffdad17b8bd49418f98","sha256":"3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d","sha512":"5267768822ee624d48fce15ec5ca79cbd602cb7f4c2157a516556991f22ef8c7b5ef7b18d1ff41c59370efb0858651d44a936c11b7b144c48fe04df3c6a3e8da","ssdeep":"","tlshash":"c700000000000003c00000300000000000000000000000000003000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-06-16T17:44:28.683384Z","times_seen":76966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fa9ef35e20b44910545531c7840f5fab","sha1":"6467404d94928ce85891bbbafea843681a4f078a","sha256":"f87a64699c04e68d61cec84a3fb6bb257a9334af69fefbed462a441c8176799d","sha512":"ef52fd6c4b6edd197035c0f420709db78c28b95db83b57ea6946bb7248dbf13d6e6a7db08a7bf7c4a96e04ee7d3c91674f46c2c940eaa133cc54be803c0e5b76","ssdeep":"","tlshash":"f201d0202616223d08e89fbe581331908675b166e65b0c377804eba3d5f545338615b3","size":767,"data":"","first_seen":"2026-04-09T14:30:38.634215Z","last_seen":"2026-04-17T06:59:24.350237Z","times_seen":1299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-06-16T17:46:19.122654Z","times_seen":96584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2f547b466c1fddb29e277760fc0dbe6","sha1":"a08414355baac881b57c6704cc9817b963ee6736","sha256":"d8ebf479ab43ce6ca5da3df5149b5c029fb8a3c053ccc3727b5f28bcdfabe355","sha512":"82d98cccd4ad81ae834ee8858f00c733ea142e6e4ba5d000da4f017f6a174c36150f6553ae190d4600d4b932a5c2dd035a402427fe6fee5a9f035116b9c5221b","ssdeep":"","tlshash":"a98000282c08200220823823820b002e222a0c20000a2e8002c00a8c0cb00ab3082c08","size":26,"data":"","first_seen":"2026-04-09T14:30:38.943749Z","last_seen":"2026-04-17T06:59:24.301452Z","times_seen":1367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T16:57:42.461603Z","times_seen":61104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-06-16T17:46:19.226919Z","times_seen":232487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/spop.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /spop.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 1251\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:04:13 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-16T17:41:07.761815Z","times_seen":133998,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":510,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T03:00:21.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Wed, 15 Apr 2026 03:00:21 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-16T13:06:29.977321Z","times_seen":145926,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":576,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T03:00:18.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290763\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-16T17:50:35.49609Z","times_seen":884618,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":179,"dns":1,"connect":12,"send":0,"wait":10,"receive":2,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T03:00:23.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1776222023610\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtmdW91djZlTk9NWSjB_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%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260414.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 899390650\r\nX-YouTube-Page-Label: youtube.embeds.web_20260414_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1776222019282\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C250%2C250\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 12427\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12427,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260414.01.00\",\"configInfo\":{\"appInstallData\":\"CMH--84GEKa20BwQvZmwBRC_lNEcEJjVgBMQmY2xBRD724ATEJ_PgBMQ05_RHBD8ss4cELa1gBMQpojRHBCUttAcEMz50BwQ-_bQHBCs9dAcEMKJ0RwQ_v_QHBCHrM4cELyk0BwQ8bTQHBCUg9AcEIHNzhwQntCwBRDD3oATEImwzhwQ9quwBRDVhbgiEN68zhwQ4IKAExDa984cEMbGzxwQ_o3RHBDI988cEMzfrgUQvbauBRDBj9AcEK7WzxwQuOTOHBC-irAFEIv3zxwQlP6wBRC0xIATEIKI0RwqTENBTVNOQlUzLVpxLURMaVVFcFFDbkE3NUZiMEdXT1VFaDdYd0N6S2dyQVFEemY4Rnk3Y0cteWEyNUFhZmlRMkVaZTZiQnZRZEhRYz0wAA%3D%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://qfsglobalsecureledger.com/\"}},\"events\":[{\"eventTimeMs\":1776222018868,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018871,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018885,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018885,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018886,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018886,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019317,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019381,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018028,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017788,\"latencyActionBaselined\":{\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017967,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018028,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018030,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017857,\"latencyActionTicked\":{\"tickName\":\"ndnss\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017858,\"latencyActionTicked\":{\"tickName\":\"ndnse\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017859,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017966,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017883,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017966,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018413,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018692,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018358,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018741,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018358,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018637,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019400,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018850,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019403,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019407,\"latencyActionInfo\":{\"serverTimeMs\":41,\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019481,\"screenCreated\":{\"csn\":\"lMXxuqhZBiYw_IXl\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"Qf_eadzKO76iv_IP6uuBmQk\"}}}},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1776222019482,\"latencyActionInfo\":{\"clientScreenNonce\":\"lMXxuqhZBiYw_IXl\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1776222019482,\"screenCreated\":{\"csn\":\"3sW1hzggVJ4SfuW9\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"lMXxuqhZBiYw_IXl\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1776222019483,\"visualElementHidden\":{\"csn\":\"lMXxuqhZBiYw_IXl\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1776222019483,\"latencyActionInfo\":{\"clientScreenNonce\":\"3sW1hzggVJ4SfuW9\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1776222019483,\"visualElementAttached\":{\"csn\":\"3sW1hzggVJ4SfuW9\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMI69Sy0-7ukwMV2MBPCB3txzPSygEEv_6nZg==\"}]},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1776222019486,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"22\"}},{\"eventTimeMs\":1776222019487,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"23\"}},{\"eventTimeMs\":1776222019502,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"zAUtg0yhAoZmtz-2\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"37\"}},{\"eventTimeMs\":1776222019505,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"40\"}},{\"eventTimeMs\":1776222019571,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"6zixflmwSY5N6phk\",\"clientScreenNonce\":\"lMXxuqhZBiYw_IXl\"},\"context\":{\"lastActivityMs\":\"107\"}},{\"eventTimeMs\":1776222019571,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"6zixflmwSY5N6phk\",\"clientScreenNonce\":\"3sW1hzggVJ4SfuW9\"},\"context\":{\"lastActivityMs\":\"107\"}},{\"eventTimeMs\":1776222019905,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"440\"}},{\"eventTimeMs\":1776222020279,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"815\"}},{\"eventTimeMs\":1776222020280,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"816\"}},{\"eventTimeMs\":1776222020282,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"818\"}},{\"eventTimeMs\":1776222020286,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"822\"}},{\"eventTimeMs\":1776222020562,\"visualElementAttached\":{\"csn\":\"3sW1hzggVJ4SfuW9\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1097\"}},{\"eventTimeMs\":1776222020562,\"visualElementShown\":{\"csn\":\"3sW1hzggVJ4SfuW9\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1097\"}},{\"eventTimeMs\":1776222020593,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"1128\"}},{\"eventTimeMs\":1776222020777,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"1312\"}},{\"eventTimeMs\":1776222020778,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"1313\"}},{\"eventTimeMs\":1776222020778,\"visualElementAttached\":{\"csn\":\"3sW1hzggVJ4SfuW9\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1313\"}},{\"eventTimeMs\":1776222020778,\"visualElementShown\":{\"csn\":\"3sW1hzggVJ4SfuW9\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1313\"}},{\"eventTimeMs\":1776222020778,\"visualElementAttached\":{\"csn\":\"3sW1hzggVJ4SfuW9\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1314\"}},{\"eventTimeMs\":1776222020778,\"visualElementShown\":{\"csn\":\"3sW1hzggVJ4SfuW9\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1314\"}},{\"eventTimeMs\":1776222020818,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"1353\"}},{\"eventTimeMs\":1776222021479,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIEw==\"},\"context\":{\"lastActivityMs\":\"2014\"}},{\"eventTimeMs\":1776222021482,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"2018\"}},{\"eventTimeMs\":1776222021609,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"2144\"}},{\"eventTimeMs\":1776222021609,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"2144\"}},{\"eventTimeMs\":1776222021611,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"0WT2qBG7swy5QxtA\"},\"context\":{\"lastActivityMs\":\"2146\"}},{\"eventTimeMs\":1776222022482,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAADSaQA==\"},\"context\":{\"lastActivityMs\":\"3017\"}},{\"eventTimeMs\":1776222022483,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"3018\"}},{\"eventTimeMs\":1776222022484,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAADdAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgFvCgYKBGFHSWYSCREAAAAAAJSaQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAABA\"},\"context\":{\"lastActivityMs\":\"3020\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"Qf_eadzKO76iv_IP6uuBmQk\",\"clientCounter\":\"19246\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 03:00:23 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-06-16T17:46:19.111557Z","times_seen":270775,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/fonts/flaticon.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/fonts/flaticon.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/css\r\nContent-Length: 2033\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e026abe393b771d75b1addfea71af07c","sha1":"1b870657decf3c32d729ff7ee2e58e0eea6c0e43","sha256":"2f044492ff003efe4d3576c313e929db258467a344878d65540854c9d8d99b49","sha512":"3b1c23f5de5342f4835c452d0d69fd193f3e9e184010f0d43b614d828c5e2eb13e1e73509489e8e29b739b7b034e83272d906194f4ea811d2174ad4044c81b89","ssdeep":"","tlshash":"f74184b5846e04808351ae4427ef6240ef44b06d88d8ac69e1165e9cfff5e2cd7867dc","first_seen":"2025-08-11T22:38:38.372851Z","last_seen":"2026-04-15T03:01:03.412077Z","times_seen":7,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":296,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/unpkg.com/aos%402.3.1/dist/aos-3.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /unpkg.com/aos%402.3.1/dist/aos-3.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-16T13:06:29.977321Z","times_seen":145926,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":500,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/wow.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/wow.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 8155\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:06 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8155,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8099)","md5":"21fe90eedcbaafb4ed529d78418d30bd","sha1":"a16375b80220d315151f57bab2d4ee03c9fe1d20","sha256":"7852a22b72ead62cfc4a1b1ca32874b3e222f232a991a6d1432313572f534135","sha512":"30be63048c2b41ea7953dbc137b4c9047704196430cdf1995334092a41fe8c6336f1f109c195c5b47c857ee92838e4ff8d255d7ca8b8280793bc012d35b7fcdf","ssdeep":"192:tmEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:EEE/Amu6qUxVBxGkAI///IR","tlshash":"99f1baa5374a70718e9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","first_seen":"2023-03-07T01:37:53Z","last_seen":"2026-06-16T17:49:24.947142Z","times_seen":5959,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":697,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/yLeji6EidI8","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /embed/yLeji6EidI8 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, base-uri 'self';object-src 'none';script-src 'nonce-PCA4jdpcdlbsffCiN8tlzg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 15 Apr 2026 03:00:17 GMT\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\ncross-origin-resource-policy: cross-origin\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-BUCKET=CMEB; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 03:00:17 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nYSC=F3faQ2nyJoI; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Thu, 20-Jul-2023 03:00:17 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=qKP3W1Dcg3E; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 03:00:17 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgPw%3D%3D; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 03:00:17 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CO7u6PeAxKzApQEQvoew0-7ukwMYvoew0-7ukwM%3D; Domain=youtube.com; Expires=Mon, 12-Oct-2026 03:00:17 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":137056,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52117)","md5":"23680cce8b0421c9fdc02cff24a7feed","sha1":"5e3a49c337f6a3a43435ec5255f1046ca587c584","sha256":"76eed752b7ddb1538a157605ebb9ff8a346ffbf6c4d5e4a46eeb043fabaae2af","sha512":"ed28ef70abd2ba6ef962ebe0f81523f8d525d85a85a903a36e32f7ca8f93944b6820ea38c612ab4eee8a8ac0dd81f84faf28137c60d594151162d1de1edb9ad6","ssdeep":"1536:PouYDO7WyxNt20ahKjnd4jU2wggR6+UpIpK8zLVgFqc8s6Wxao:3Cy0Kjnv2wggR65uLzL6csJ","tlshash":"e2d31b240858a876c9939807edb6ff3e6cf8013947c9956ebcbb975c01ec6650eaf413","first_seen":"2026-04-15T03:01:03.414202Z","last_seen":"2026-04-15T03:01:03.414202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":50,"dns":0,"connect":7,"send":0,"wait":61,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:19.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:39:53 GMT","end":"Mon, 15 Jun 2026 08:39:52 GMT"},"fingerprint":{"sha1":"84:73:AD:21:D7:99:85:74:5C:48:5A:0D:AC:D6:69:F6:B8:C0:F7:92","sha256":"E0:8F:67:97:65:DF:94:C4:50:AD:BB:CB:88:9B:3D:53:89:9B:60:FF:F3:D8:C7:40:94:0F:14:65:BC:FB:C3:B8"}}},"request":{"raw":"GET /js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23855\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Apr 2026 05:15:38 GMT\r\nexpires: Thu, 08 Apr 2027 05:15:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Apr 2026 17:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 596682\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61131)","md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":521,"dns":1,"connect":38,"send":0,"wait":8,"receive":2,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/xrp-banner.jpg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/xrp-banner.jpg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 33464\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 679x452, components 3","md5":"0d673fd99a33de616295dc90a8adffaa","sha1":"7701fb6fd297e59f23bb1b9811f3e9d9560ae7ef","sha256":"1fc74aed1ff2080a87c9cedef897966974fbb3aff63b07d86b4888cf8dbe9ddb","sha512":"46a182cd66cfb20ccdee6cfc5896989166da46176d6541fe2fc3150215e87c171b95579f205a078beb00dc1a34e07b14cdae3cc43cab8ec066f276a4223e3c90","ssdeep":"768:CRXm3frkJSx8Y5fbrRwauPgOh1ld16US/jyUKNTWTYKxT5TgeYXkp:6A8YBblw71P16USL5tLse4kp","tlshash":"a3e2e0a30247d418823408e7dbdf5b68e1808a759bfe86b36ac53c712b967f1d5e3446","first_seen":"2025-07-12T07:10:36.142285Z","last_seen":"2026-06-15T21:52:39.518207Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":1008,"dns":0,"connect":0,"send":0,"wait":109,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:21.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1716\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1716,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$2Ec5RyNRAAaFLtUppS7eguTRbHj4Vx6nAEABEArZ1LA5orFMXv_-X121y8hvFZQ34DPput-HWXeP6h4Pp5fv0RqEdBwGXD70VgWEi9JMn1Ldo2hG2pDimGOyngAAAtvOAAAAFvQBB-IAUtk78SkYEvRgmFbBV1PAtzQ1kiT-TEWZAsqtQV2L7jG5KNRWaTVbQNa9PUkPmdZ83WqBuI3PKC3LjeKqX0dbyMetCbAFa9KldtaI5pSE7lInxicFBDPNB28OUNPVM3GUt1l1FppISN-8xmnd_M3Z5m0RKTkTlTstiJc4vNXwILrQH937ty1uXsbDmFOQRGxiwjKdb5EEn27t84IDSiVCMwzLAt9bl6WinsrPxe7FZBsRcBQqdqFkAnGsGLj4eUpK7MktNxcslQ9bJAGykH5HCbcZA3bJn2gVOMKVI0BmH2Ptx2UgWSGOg64ty-q2bM6e9wQEbP1HrIMkTeOGdsoPz9DnaZd_gFnYcZqUFsf2ZrmmJP2jxFvkV1zSaugCghZqfcRfojBI5fr_38U5MssVFgPKVeCdoQBRw-uC6-UuBqWPZ-iGQZRTdCKIGe9PntkGmqlharwylFRr6DRa1yB857GsRXJUqygC4yI7W3-b4JY0pw1zBg0jI_t4EifU9WCdFMcP_d49-esLe5nxxuUr5nuEr0O8zw8sEWI5-VBSiLcvS2Ww_rOYSqyFVfPRHbYhbJF_PzTg2hK_Cfx70jjocypCw8x9qKnZWj_kLAY1twgzkHsz5D53Ji59Nl2zwgkJyhBYMXggB6nBehAmJ-3L7WohO9clWxaR3oPF4vqxFb5BfCjKRCHsvPZPNLw2Y2Gpljy2EZeOqcG4uchbXzT2yv4V2U-YtFM_V3urucUBB4U1iTSTzJN21NIB6l-_l9UaplfikWhSlPTFUMMV33PKS-CKT9mRmx76xHflVoN3OYjIhM-sxCwg2WmC_CbTi6oyHz0_DMzp812RvBT1q89t60szu5UOMoe9gh4UmZBqloJopceQp0-u4gqvhrEZNdyqswPC7UrndWhBPGO8eh6OnkcyNQAoIG9lgB5Yb3dKea29jy4sVR_D37YPvTAEylnxG7SYwb4dwKhjBpApLpzxCTavRpO-2uEVlViFrZ-ec1-V9mI4yR6hKLuPFQRa37nwezTdXfK91QZ-EQYaqd7kuALvbKoWP1iQuGEWju3qhhs2zMRpVzGlDZlWTmNwrYC5-CKX3R_Pl1z3QYhowH3eyZlRjnAXn83bq4tPvhy3nmv3pnhYMzzA9E5pZh9r7x4aMf6K373vZpehI1s1rNTRMy9_x477itPfCJoAFt2q93AN1Ku7T-3D24dv6e8S-2Zhk2XATqf_yDkunj6VZ4YtN3IZQfQGtATD9SPcX13MehuIl5E_pzXl1M-bs3f_kR2iMUrV69RJXorzSUJ-LwZd2Jdp01CvvfJLEGL19KxehSWtZKzf4hdtjIpPvvf933ThkrkJ0NJwA0iQTWHJi9SO51Ei5KJgk67ocCR2xwzTRcgsLb9rHnvq0OZzFmy7UfMmnkBMbLMwus-TITSttz8bo9Yb0eTffaHkFtpY6aUZl3zLNobjAqlUZ3XbclG02DvJs6AVLl8-aswDi0ocbHcIjo4A3n_V4CEm5Ut9LcOca3OmpACO9ktuuqEJfp27LsZRqE2zjk8uVE0E\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Wed, 15 Apr 2026 03:00:21 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"5547692c74ae9226fee6d31bdccae8e7","sha1":"40a8c442a54f2d5c681d58fe1f7d816e6b8dc47a","sha256":"9b56c417cc68f519d95a42c1acf5964634811aecbde84f417f08735be00c6dde","sha512":"d50cfd65d1523666ab146d7403da701257cdd4f9728190b5488135e7f78f0c11e8d41176b619c9fc3a020fa00d2900893bbb583f63e459d81255ebec5cf67e03","ssdeep":"","tlshash":"e4b01260048f09839090d90437f4138b431365667d0f0729c0d3454130b29777802c7a","first_seen":"2026-04-15T03:01:03.417078Z","last_seen":"2026-04-15T03:01:03.417078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:20.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:33:12 GMT","end":"Wed, 24 Jun 2026 10:33:11 GMT"},"fingerprint":{"sha1":"D0:0A:A6:39:E7:85:DF:64:B0:13:66:E3:06:E8:BF:2D:3C:AE:EA:7A","sha256":"70:D5:91:24:1D:F0:F9:7F:57:55:99:71:1F:A5:15:C2:B9:C7:21:65:6B:42:A2:34:4A:6D:A7:53:70:BE:C0:7B"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://qfsglobalsecureledger.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 03:00:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69c4f8c4-7b0\"\r\nexpires: Thu, 26 Mar 2026 09:24:15 GMT\r\nlast-modified: Thu, 26 Mar 2026 09:13:40 GMT\r\nx-77-nzt: k7tOQDMlAskCffFbGDkeaywfuP68AGOMXcTtcNgHsacNwGML1/NAmDhEgeCADMMAOCE29RM\r\nx-77-nzt-ray: fdb54123223ecef944ffde69d3c62718\r\nx-77-cache: HIT\r\nx-77-age: 46\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c90dc4144123441dfd1880b64a38850","sha1":"3542d9742c4d15ebd275a7f4d00fdeaab0bf2811","sha256":"3f96750d0608315f91b97aa38ed18ba3172c6205e3bae64070fdd3b1ecd96055","sha512":"85219432d56f6d5daff42ab232594e813a0a26d63b22bd8b2de79a3f6cc650f5b4d00035a356cee95137c30b588d3882f294d3e42a7cd1dc90c2ac3ed5a1a010","ssdeep":"","tlshash":"b9411593c4f80d531b9c522bb8944a015d50c3c7e8893d0d36ad8a6f2f0ceba15e67ad","first_seen":"2026-03-26T09:27:08.856479Z","last_seen":"2026-04-23T05:43:00.886942Z","times_seen":1025,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":30,"dns":1,"connect":8,"send":0,"wait":7,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/21.37.56.jpeg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /21.37.56.jpeg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 79773\r\nConnection: keep-alive\r\nLast-Modified: Sat, 14 Mar 2026 00:54:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79773,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"fee54bf92676c42ccf6e3cfe3da5d025","sha1":"558503f601bbb72dc8e904ba499926b68cb5b1b1","sha256":"1c8d2c44d81cb3146e9e3854a07f7017f826ce4bee8a78f6bef9688d27709e69","sha512":"5bc40b3dc9ff45557e8b0ef60a3a7e3afd1b515ba3690df48c3908913118dc036a9bc5759b5151ac7ab4e59b5e7a955020f985a953fff6f2110c7bc1ad4e426f","ssdeep":"1536:WKp1nSmfxvqfBamAyx0Fyt/P6TCyf3PFQB2FaT18EsKafXRuvBLywHZtGb4Uo:amfxKamZxfJ6TdYTmEspXsZHHZB","tlshash":"ce73f1d2769bd72beb106bb949b787f13f324c4fef56920d4050bbb5282017829e588d","first_seen":"2026-04-15T02:59:49.44386Z","last_seen":"2026-04-15T03:01:03.418616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":1012,"dns":0,"connect":0,"send":0,"wait":112,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/counter-shape4.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/counter-shape4.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 5271\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5271,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 371 x 255, 8-bit colormap, non-interlaced","md5":"2280efee7bcb1ad3a1434f981a87f0ce","sha1":"3dc89ae8638e55dca8fb854e97ff42f3dbb15717","sha256":"79f6e3b4d41c5c76da464eb1cf5bb960ee042536b32f57e470b415c416dd6c92","sha512":"a2d8ce91f84fa2f1213b65ee418eff2816ce6d6cac4a980b1fee560387ceef5962bd1018fbaee1ddb09b645ed3e2601c713d4dbd24a2d1a7b04ba86d819af8fe","ssdeep":"96:DHJ+MI6t7QtMwZBrHuIS8flc8N8Nitgoiia9OSCz4YiNB5MHoiD706TXU2c7:D0MqtRVHPfbN2iEia9PCzDmMHoV6TXU1","tlshash":"9cb18eec35d85b713365c49a6bd4c3082562730b95b3ce96484e178e0c26b3b7b51cb1","first_seen":"2025-05-02T13:08:05.699387Z","last_seen":"2026-04-15T03:01:03.419337Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1116,"timings":{"blocked":1007,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/trustpilot.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/trustpilot.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:18 GMT\r\nContent-Type: image/png\r\nContent-Length: 7965\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7965,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 247 x 139, 8-bit/color RGBA, non-interlaced","md5":"299e966a1e48c90f856f71659599fb37","sha1":"5ec61356526e2b921a733eeae3bfb898f884c034","sha256":"08fd90ecb9d2ceb9deae377abbefae14c238bad17d401ffc8e1a03c4b98cb7fe","sha512":"d8b2ed5b090b1936117f345d99f130a9df278965e69143627590ef4836dc13b21919e9a55fa659e6b7e90f81375621999411fe9b3581df344f61b90a4c18c53b","ssdeep":"192:Uukn2c483Ock/YfTf2f+j9OtschJoD2DwFHZtkVKw40L:mn2cNf2f+EtB82Dwt7k8wV","tlshash":"f5f15b84e1437ad45182fe5d3a8dd4ff2a268b411fe0e49facd1972669320f4c9761c5","first_seen":"2025-02-16T20:38:08.807192Z","last_seen":"2026-04-15T03:01:03.420338Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1742,"timings":{"blocked":1561,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/odometer.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/odometer.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10262\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10262,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10240)","md5":"d928a13757dbaa0d5755c6252a4d2fdb","sha1":"e1ebff681214e87f52fe88602a309c94924ca17b","sha256":"0490e46e0015407d9aa0ad0854635b87b7be7befc7345b25afe85d0d21ec2c6a","sha512":"1916eefc9c258e1830174b228774ac1de84bbbe764b7e1348d36163562cc09c6206ed0fa2a72ebf3656fc270ef8a6acb383d1aec3ad9dfb1ac6c8fb45799731d","ssdeep":"192:HABz7vQK8QecCHAOcu2a+OdI5s/GMb8XuulT:gBXv18QecCxVxz+7dlT","tlshash":"e6228580ba11a735835371e151bf0609b7bb99aea404401df67c9dd9be29c38e12bf74","first_seen":"2023-03-10T13:51:16Z","last_seen":"2026-06-14T05:29:29.391363Z","times_seen":94,"resource_available":true,"data":null}},"time_used":893,"timings":{"blocked":784,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T03:00:18.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 196759\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:09 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51129\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":591066,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"fb598e722e3ca661b8d52298a2b80050","sha1":"63af5c9411b329a6ad1b874d7ccbec0cccb7d53d","sha256":"c86f07d1a6e35e37aed78daa25e6c0011cc94f45f68f2474d498602f9921d51a","sha512":"7916c6378acc030835e3e374ac5dc0ece8b5933743082aa5598c2f58153dc4ce516f6fe92acfd65a29bed63df6e908cb711bdbbb39a5e3808257a67f272e6aef","ssdeep":"12288:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGtpYdJpO8vVhmRvezgHzDzOt5iMaPShv9Sk:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGte","tlshash":"30c44ad873a2706792a2f5e4903f0102b17a6856f40c8cbcf29cddd26db594a51bbf78","first_seen":"2026-04-14T14:26:58.186965Z","last_seen":"2026-04-15T17:30:11.960589Z","times_seen":832,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T03:00:16.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 42224\r\nConnection: keep-alive\r\nLast-Modified: Sun, 15 Mar 2026 10:10:10 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}],"data":{"size":42224,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2221)","md5":"f5849d1b503fa6e2af87f621542c4f7b","sha1":"1ac305fdd76faaff1ba97e12f67326935ea92820","sha256":"f4a0cc2731316635fb03bce25615547a83f5a87606da7a7d9b9852c153cc64e3","sha512":"8158682bb2cd74f7ef7e8c6bf3de2970eb2ae9fa917d76a8d5d5f857267c0109b807c714ddf9673365755a51664aa5c4a518534e87680843a002afd7eb1142ac","ssdeep":"768:T4WXXJMYj4w2z4DCbnpUx78VUdsG5a1WJ+FPW:T4ILj4w2z4DCzpUxAm6G5a1WJ+Fe","tlshash":"8e1380255ef220370182a1d279715b1fbfa5e607d61a8a1172fc0bdcafdad86dc13688","first_seen":"2026-04-15T02:59:49.47797Z","last_seen":"2026-04-15T03:01:03.422401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":203,"dns":1,"connect":98,"send":0,"wait":195,"receive":98,"ssl":108},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/static.cryptopanic.com/static/js/widgets.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /static.cryptopanic.com/static/js/widgets.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-16T13:06:29.977321Z","times_seen":145926,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":573,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/8c51f0e50111a2bce371b7f99aa52910fc80a381.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.77.181.243","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:19.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/8c51f0e50111a2bce371b7f99aa52910fc80a381.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://qfsglobalsecureledger.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 03:00:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-nmzJSErW89I05K67ZB0lFdSz13g\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2164f12eab1c91eda8dd630ee3bfffcb","sha1":"9e6cc9484ad6f3d234e4aebb641d2515d4b3d778","sha256":"138ce9db988a439b9c2ba8fa5a4d69577789e98275c033a418e6c4fe9b67f46f","sha512":"0741bf673c2050e6da96f086ad3a3bb45c6d035a346f0f812e853e36e0e206b0d99d890b562fff47dc3b6fa7f17c73988b48dcf70ac8aa5885d5c188a26b220f","ssdeep":"","tlshash":"b921686d4a6822ed5245c7d6c5047e076bbcdcb371043e7eea1d0a4e70db2e5113646b","first_seen":"2025-07-24T15:21:00.111183Z","last_seen":"2026-05-22T07:00:43.868602Z","times_seen":107,"resource_available":false,"data":null}},"time_used":2295,"timings":{"blocked":1127,"dns":0,"connect":21,"send":0,"wait":27,"receive":0,"ssl":1115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi_webp/yLeji6EidI8/sddefault.webp","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"216.58.201.182","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:20.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:27 GMT","end":"Mon, 15 Jun 2026 08:36:26 GMT"},"fingerprint":{"sha1":"4C:30:16:24:AD:B7:06:03:50:15:3A:B5:DC:98:15:82:5A:91:22:16","sha256":"D2:FC:38:8B:E8:22:C5:9A:34:F2:7A:B8:D6:F5:52:45:A3:43:B1:AF:84:10:5F:60:F1:B6:6D:38:67:8D:26:4E"}}},"request":{"raw":"GET /vi_webp/yLeji6EidI8/sddefault.webp HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 13678\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Apr 2026 02:59:04 GMT\r\nexpires: Wed, 15 Apr 2026 04:59:04 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1566590372\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 76\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13678,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d48c83174fbf1d6e9f0ceed3ec8b1310","sha1":"f423c7e63dfc0e2bea4774daeeb8b71873325cd2","sha256":"c797fdc2677611af0f00fe170d923dd231c9d7c690a22d078dc54833e1f73120","sha512":"0e34557079d8a460912e166bcc92519e78f990558bdea47671eb9048ffaf62328914ceab25db90ba391a82e4550f85abf1885d91097e9571631c67135a158da0","ssdeep":"192:pKHNdh/2F9Aay+J004vT+2hsh7r6jxvh4BSuMZ/zlzEuyBQ6BfF/mXh:pKHNdhuAayAkx6mBhZJ/zlwuGQ+fFex","tlshash":"de52c0434ef7074efcd24e777895a4c4c20de1d99f88230eecf8aabd85a92e0a964015","first_seen":"2025-03-16T21:26:57.694063Z","last_seen":"2026-05-10T06:23:27.188534Z","times_seen":14,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T03:00:21.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Wed, 15 Apr 2026 03:00:21 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/unpkg.com/aos%402.3.1/dist/aos.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /unpkg.com/aos%402.3.1/dist/aos.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-16T13:06:29.977321Z","times_seen":145926,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":399,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/fonts/boxicons.woff2","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/fonts/boxicons.woff2 HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/boxicons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:18 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 89924\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 89924, version 1.0","md5":"aeaf4ee6e2c712532f982c8a4dd68b16","sha1":"34678774d31a23d9fc6a96db5d1984810b50e560","sha256":"1ac6dc813de3dfdf87051562c40a4332c5c80e1854137b0eb8eb4297d8eda2d1","sha512":"467be6b80cb96627b7ff5c9e69cd5da58cdb44e32a1422cbb15e58c78c4d09eab85102a141c33bee2b6b842b8d1b3e98804d84518dfe6f47c48e3f3b0b2ac941","ssdeep":"1536:0BXCWSSxXzYq5qp0NoyUR+8tugJfrF643K5YHjsUXmRm:0BXCNSxXW//RrtJDF643qYDhWRm","tlshash":"c39312f8afa0e0a8e430d237973f58a843d0b755b67d9ea645abfd0352993d58352303","first_seen":"2023-04-14T08:39:51Z","last_seen":"2026-06-15T17:58:46.606273Z","times_seen":550,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":120,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:18.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/player/ee507a59/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 444430\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Apr 2026 07:44:11 GMT\r\nexpires: Tue, 13 Apr 2027 07:44:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Apr 2026 04:24:51 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 155767\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1486235,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (848)","md5":"a3f45afee6e0dc137cbfe33a74403f17","sha1":"06e9a62a5ca6154d4bf626f69580681b8f219d59","sha256":"cfa795e622f49f92d0a65a88d1851ee5db708b70f2a757154cc4c852e999d295","sha512":"337f572ff593bf42ef43e2a20ec657cdd82b57cf0273a92ca0574e24d54c70850d9f4bcce84ddd38cb6089f71b7e840ab94c60439635a78b2cbdfa9d69aae66c","ssdeep":"12288:NWJ+YoIPR+umUIWbouNnsuydXdJAXFMhxfBbqdH+PcFK59iMm:No+pIPUKIWbouNnyWMhxfJqdePN5m","tlshash":"14254cd932d2b8a243a3f0a7043f0105f17e89197548c99cfae9dae92c7194751bbf78","first_seen":"2026-04-13T11:27:09.96925Z","last_seen":"2026-04-16T01:05:21.413432Z","times_seen":1082,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T03:00:18.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290763\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-16T17:50:35.49609Z","times_seen":884618,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":100,"dns":1,"connect":23,"send":0,"wait":10,"receive":4,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/?size=96\u0026id=63760\u0026format=png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 10:28:54 GMT","end":"Mon, 15 Jun 2026 10:28:53 GMT"},"fingerprint":{"sha1":"FB:64:A2:47:3E:78:7C:2B:08:A4:67:CE:63:64:D8:05:DB:13:E1:97","sha256":"C1:67:9B:EC:6A:3F:76:AE:75:5D:0E:0F:46:34:13:71:3C:89:7C:17:5F:88:7D:0A:92:61:16:3F:C9:67:77:54"}}},"request":{"raw":"GET /?size=96\u0026id=63760\u0026format=png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 03:00:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1773\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 63760\r\nicon-size: 96\r\nicon-format: png\r\nlast-modified: Sat, 11 Apr 2026 18:13:03\r\nversion: 0.0.29\r\nfrom-mongo-cache: true\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: k3QujZqQoJMvi2WCIvqo/v+0f7TBw8oRJhskpR/YxngJVmslEjbbgPKEOloNqe8yng\r\nx-77-nzt-ray: e2f75420f017560440ffde696561ea2a\r\nx-77-cache: HIT\r\nx-77-age: 288346\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"fc5a550f42b305228c83696ff776cd05","sha1":"039968cb10244db3f1a653011e85488fa86651fa","sha256":"1200cd3e0698f5da29cb7d9c4a805dc57a25cbac9ac907c34dfb58555fcdc7d3","sha512":"4b34623af3bce01c05fb93a33afb11188e1f5b999d4935f471537f06d33a1429408e10ecc1925b2c84c610f0b16bf30a0110e9b3f595133de72368aef436fa0e","ssdeep":"","tlshash":"a3312b875088573d9439552c8ed8416832ea9ffc673cf32c43099abba42dbe546537b2","first_seen":"2025-08-01T07:42:48.592728Z","last_seen":"2026-04-15T03:01:03.427443Z","times_seen":15,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/testimonials-bg.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/testimonials-bg.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:18 GMT\r\nContent-Type: image/png\r\nContent-Length: 83734\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2100 x 875, 8-bit colormap, non-interlaced","md5":"c1703d75a74a414a7247b8c9d483ce98","sha1":"e21d79556237d9d44cf5210495035b22bbc7cb45","sha256":"582d042dcf10a966b781170e45fc6a04a98e507afc21b96cd693a5c471b4a2d1","sha512":"6b1afe41156d41e357f905f22b97b2d2c055d0de615ba1d566a60c8a76d60d44230b9405b76822f8b8368b60166a5088e0b0ace0f50d1317869714da1781aa2f","ssdeep":"1536:agBso+Npg2wTMkoAHpgNpQ9YiiFV56CRjmcx+MCpWRD1vnA9MPjHyI/:a9hbzwTIZGSj0IaMCW7jH/","tlshash":"e38302c623250eb1bcf0c29d73c34ca689bf171de644a06d67f9a021c9c55792a27eed","first_seen":"2025-03-19T10:36:51.052112Z","last_seen":"2026-05-01T06:29:36.085093Z","times_seen":23,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":274,"dns":0,"connect":0,"send":0,"wait":145,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/kit.fontawesome.com/d1472f1751.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /kit.fontawesome.com/d1472f1751.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:16 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-16T13:06:29.977321Z","times_seen":145926,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/magnific-popup.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/magnific-popup.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/css\r\nContent-Length: 5259\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5259), with no line terminators","md5":"64912a79884a20761ab19de42f85218c","sha1":"8d29cea8f84afdcaa69c0594e37263f7374dc8a6","sha256":"3d92e113ac3031b838001ddddf965d045f470ff748ff2e116b30378910eeaecb","sha512":"f84a0fc3e162c21e9e49e44aef3c08286d8c03c8b7ad5fc319aded76db501a05b26ad1bf4a49dc4f9dca1d0692e4987d30d393ddd9852f41634d8d3c02777f0b","ssdeep":"96:VuKSCO7EWP9UrJjIjZQX8ZO9d5Zkxudls5/Dm5Mk9nCWh3:VSCO7EWP9UrpIjZQMZO9d5pd+qMk9CWB","tlshash":"43b175f3a941313ac633da16d5c39f9c3227a227f663569fcf82a419c6ce89c0525384","first_seen":"2023-04-05T08:30:27Z","last_seen":"2026-06-16T09:24:57.483442Z","times_seen":4688,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":316,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.nice-select.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery.nice-select.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2942\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-06-16T16:39:15.620846Z","times_seen":9390,"resource_available":true,"data":null}},"time_used":902,"timings":{"blocked":795,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/sFX1d7Si3mA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /embed/sFX1d7Si3mA HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, base-uri 'self';object-src 'none';script-src 'nonce-KizjQvS6OB5gSwr8tmR4Bw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 15 Apr 2026 03:00:17 GMT\r\nstrict-transport-security: max-age=31536000\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-BUCKET=CFc; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 03:00:17 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nYSC=tczIYUx7NOE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Thu, 20-Jul-2023 03:00:17 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=Fo2mctoU4l0; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 03:00:17 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgVw%3D%3D; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 03:00:17 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CKCk79z70qqoFBCI86_T7u6TAxiI86_T7u6TAw%3D%3D; Domain=youtube.com; Expires=Mon, 12-Oct-2026 03:00:17 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":136879,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52117)","md5":"43ec2c6804ce1acdd203d5e1bd814c13","sha1":"2acb27fd20d4311142d2bca58f2087d6943d5a41","sha256":"38193e5b437c2b296186d5d3d27bc675d5cd75abab396b42bf950301d4405140","sha512":"6540b6e5c3915f77281e4fb721b72e3ea8deb764caeeb226a099317c13b0a12c92cd0348e2447cbb408eff59cce605c480f86c7cf338cb442eb6d9b7ccc054d2","ssdeep":"1536:qUdSO7tyxSt20ahl/d4jU2wgndgdzhpBUq+ryIB0n846/:F5yPl/v2wgnd4t+r30n846/","tlshash":"aad31a250858a876c9939407eeb9ff3e6ce8023907c8956ebcbbd75c01dd6610eaf416","first_seen":"2026-04-15T03:01:03.430025Z","last_seen":"2026-04-15T03:01:03.430025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":56,"dns":1,"connect":7,"send":0,"wait":71,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T03:00:20.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:39:53 GMT","end":"Mon, 15 Jun 2026 08:39:52 GMT"},"fingerprint":{"sha1":"84:73:AD:21:D7:99:85:74:5C:48:5A:0D:AC:D6:69:F6:B8:C0:F7:92","sha256":"E0:8F:67:97:65:DF:94:C4:50:AD:BB:CB:88:9B:3D:53:89:9B:60:FF:F3:D8:C7:40:94:0F:14:65:BC:FB:C3:B8"}}},"request":{"raw":"GET /js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23855\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Apr 2026 05:15:38 GMT\r\nexpires: Thu, 08 Apr 2027 05:15:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Apr 2026 17:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 596682\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61131)","md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":153,"dns":1,"connect":38,"send":0,"wait":15,"receive":2,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T03:00:21.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1708\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1708,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$sS45LkpRAAaFLtUppS7e14tfTrBA6aqnAEABEArZ1EnbIfMy2yRUkNWYXFkyU3aRC_XjjTLpD8SJiZJrf6UHydqkGi3Y5EdEhzVUqYB6ak9dlVv52wUiT-tmngAAAxHOAAAAFfQBB-IAUhqUkbbDCPwJP0ioGlNf5Mq1NGRZi2fvQnlWXIOGlg2ovv2BkxVwp8xh53ZN1nXfrGLd-QE48FSlGJyoruA1BcKQnyr9jC_tUPvxzz4a3BEu42oFBC28lJSCk7oYWpYBkq3F6y3HJFs41q9GUIMFVhvQIi7JoQKnQk-X-pFhsSBj2V56KdIW_7WKegDmwXKEf1x3QlH0yDJXBlKs5f-Li0Y8StQwdWBcZ4Eh_fOPR_NriBLcOzdNMAUZKRSG2sFFIedv-aoLIagk_jFwQKAuADnGiFyWoiVuDZajdRfzkf0wMUu2lbgtVpeJapQ6PTj9EF305d7X0vsSECOVpBuEKR2IeZvYdawt8h9si9KDhRpAe1PYm0IXfdPBxV8jRk3LGVi-UjCVFxWpZMmd6pd1fxHdzU668fjIa-pbCJTV5IdlnVATfcKjMjGtbve63vW9LqrtduUP6Xf0pQnAd6uLAMjZE2G1bvWjPIMYxfsIpIsTSeJQqOC8SANcfLrxgR4bjErirsBm5RrODn_yWY0N4LLJyZz1tNA88a_TK3B4VwfXw_ywuuISNugVoxhYSDzXIyGfI_96WXpRvEXojHG0_RfY0q3fFSc9MXu_UxZT0W_cuh9OpmVr9REYxu2VnYHBY2skx-mjFe0-dewcrtR8syJNZpILyUuAo07XA1Ju8bifqteWcGkUSKDgIzqI_ZiAawAQE8zvWnoOtNg4HaEisSHLuRghuE48URBhhg-D_Xx5u0NtBsH3BL2RiUXAwd6JgvMxWBVXn0BXk1ZWy1wUpZtwTkoFY25aEFqFHmPR3GP1d7A-148Mo3fQ8Fz83cgflEftaSD33CaT5rQTW4Sqtg2xdoV0sRVxk7TTg8GbkEMHpvW4ZXon_xOvtnSSNQs_8EsS06_UhSNlxAedURcx7mpfXx_kZYXJ1886UrFGi0yKZsmrZ8mZtM4KHqmWPYLvCzGTUIZqNkktCLSdFWksYMTczUOSUsHeb2wqcC9ofyPcKiXQbry2GISo2dhWsiofpm_KDlRxZjKfcNrgTfOx226783Lueeo20TORd8kqp4kDJtr_0LlyslkkBsL6bXJ6EtJ0sFKUbuUluIY3KwnN9Na1KVYbE8_3ouYod12xcZIwJkA6OAs3yu71Vqp-CJAdPQ62W1WzJm-XEpf2wQ8pRHPBnSDbCDrsFJJpBAmlAxcb-D0FtQ33dvuH-SHbJPATF8qOx6KBPiCpKHLg9JAaa9ewtUdFN3aFpPJmLKrpC7rLUDIyThteu-nq9xYNke6e1MGow1ecgM9HqL5LLFVF_aPu44SQOaFyc6SMb1mus5HcuJsZgwlmGvuQjf3HtYq6cQ1Z6-yFV7TsHo82nXyDD3Elz5YUioea7LCCCJjbR3ei__ca5iqaM9VCpquVuSEnbA5-zE_xtrDA8N1RPaSDnyRwVm0PW7udKRVdl2M4Guf9HdmqI0DP5WL_DDcSueHXGBwrL7HeDwjkLh_tUTSzoO5uMpTp6x9CBie6xhv6-5pg4WAmQe4K5CDRhWdAfktYJgBH\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Wed, 15 Apr 2026 03:00:21 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"1cd95b14a344388cb455f748867f4d0e","sha1":"94adea620bcef2f5d550f80705339cba71684a2d","sha256":"1b9e7637eee24dc3b417b376ae1ef454a75780ab7c95bafabd12a5b79ecfe32a","sha512":"6953ca4a1002648752f2e2a816b2669b100c831e7a776b039025025dedbc1353b168b644331ff65ec0b219b6faac2a21e3797e473601116ad2615a08426af8c0","ssdeep":"","tlshash":"5ab0121582ab4484310040050faa0c75138301e692418c08a1fac8d70086260ce224cc","first_seen":"2026-04-15T03:01:03.43096Z","last_seen":"2026-04-15T03:01:03.43096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:18.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290763\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-16T17:50:35.49609Z","times_seen":884618,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":98,"dns":0,"connect":8,"send":0,"wait":11,"receive":11,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/static.cryptopanic.com/static/js/widgets.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /static.cryptopanic.com/static/js/widgets.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-16T13:06:29.977321Z","times_seen":145926,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"63.183.43.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:20.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://qfsglobalsecureledger.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: lWWsmwFbdkdoyfyFVEuKoQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 15 Apr 2026 03:00:20 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: SQwzklVXRWUimfMJ7vXL/LbPXTk=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":101,"connect":121,"send":0,"wait":25,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:34:08 GMT","end":"Wed, 24 Jun 2026 10:34:07 GMT"},"fingerprint":{"sha1":"C2:80:24:A2:B9:B5:FE:08:D5:9C:54:4B:3A:9A:8B:58:11:03:59:30","sha256":"4F:89:7D:DE:1D:14:7D:79:28:01:77:E4:A2:61:C6:AD:B2:D5:1B:97:99:F3:76:01:2B:E0:9D:C7:39:4A:42:7C"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 03:00:17 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69cac7a9-4668\"\r\nexpires: Mon, 30 Mar 2026 19:03:15 GMT\r\nlast-modified: Mon, 30 Mar 2026 18:57:45 GMT\r\nx-77-nzt: k/Jr5hoa+nxny73aujIQib6jqiJCSM0sfLAT1IszczeD8fI2SXPsy/g6rldSBZQQr9hwz5A\r\nx-77-nzt-ray: e2f754206909a90e41ffde6953d8ad22\r\nx-77-cache: HIT\r\nx-77-age: 55\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-06-16T16:15:03.036052Z","times_seen":3371,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":49,"dns":22,"connect":8,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:18.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/player/ee507a59/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 57938\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Apr 2026 07:44:11 GMT\r\nexpires: Tue, 13 Apr 2027 07:44:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Apr 2026 04:24:51 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 155767\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":526884,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"75bc21c4a4c6440debd73fe708492634","sha1":"6f56b35d6a8640cc6e6b20ef3f4ba3c2f675c29c","sha256":"aa68e0e1ccb88e0e7e5b0e712acaefd700bc1fddffe47833b9f357c139ef7839","sha512":"35493527cdfb09137e106572e216ce51a279ca2723c940bb1e85dee60d5b7c78988f36de98f1a040a3e5c865aeea0c415d3c795fa80a1ab77f388ca0cfc93277","ssdeep":"6144:q8d5Fe/qoMOg7U9Bfbo4M5Ulv5P+oYo97:pYxMOg7U9FoR5Ulv5P+oYo9","tlshash":"ecb4ea72f0d1233cf2178d9997d9964d7239d983e2e22aeff11166dacbc77811326206","first_seen":"2026-04-09T15:07:35.831353Z","last_seen":"2026-04-17T00:31:51.710171Z","times_seen":2255,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?83H6Dw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T03:00:21.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /generate_204?83H6Dw HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 15 Apr 2026 03:00:21 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:21.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Wed, 15 Apr 2026 03:00:21 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/owl.carousel.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/owl.carousel.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:16 GMT\r\nContent-Type: text/css\r\nContent-Length: 3352\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3352,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3185)","md5":"d964cdd4d9e85b8c1185a92bae34b049","sha1":"a0e2d64bcbb108f0415f364df5b6fabb8a290365","sha256":"aa7e59e6ec8871088cfeb47bac59a6475c815357deef042c61a5c3c965390546","sha512":"acc8bae151fb7542dd53d2a3ecacc9cf09e18109958970dd56d8b1cd2643811f9d5dfdf8499b5cf74e8cfdc6ad85e6be6d9cddea68670a368280576e9c093a13","ssdeep":"","tlshash":"c061bbe5314a265f480f83221dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-06T17:45:15Z","last_seen":"2026-06-16T16:23:07.008667Z","times_seen":2040,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":194,"dns":1,"connect":102,"send":0,"wait":105,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/style.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/style.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/css\r\nContent-Length: 108569\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108569,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"a4f2255e240e8e265a759558d746ae0d","sha1":"9dcee8d2cec60de69819ac3bcecebb71bd39b9c6","sha256":"81267ccdb80c05f5dfe103987a806937c513614f378e42eea364df9e5624bef9","sha512":"aeb716e4fc11d0255b0e5c950cf2df557d76b4b8e7764f375576d0614f927da4d22810725d6d9ec6b22363a6cc7416b5d033002e3028cf3a819bafdd9b0b8c5c","ssdeep":"3072:po2SS3nNMk/wJSCiGwDvDwkGqH1aiVGW6ekCxEECotQ7JT4:poo3nNMk/wtiGwrDwRqH1aiVt6ekCxEy","tlshash":"12b37496abb7064c380fa5683d89db6133bc5082d54eceb87be96458df89b9c1033f45","first_seen":"2025-07-12T07:10:36.128584Z","last_seen":"2026-04-15T03:01:03.433426Z","times_seen":9,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":396,"dns":0,"connect":0,"send":0,"wait":207,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/responsive.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/responsive.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/css\r\nContent-Length: 34093\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34093,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ced1aa5733fbeceb3922c7bb9981ca79","sha1":"53c993131ab3513678e867c902743ba44383561c","sha256":"2046db4fa2ddee577b06198c074e325de2f3829caa0c3ecbd4ee8f064583c8a6","sha512":"7df4eb6c8023e3a6283836b9643b623eb147f77436ba7cba1e358be85bf76ed4d13d4a398df09b40c69f09d366d5d2e03c4b36ab655aac71cc063a5f76c5308b","ssdeep":"768:RF6qCKYFe8FEXFobMFG6hFQqFyFTFM/37Y:RQqCKY5CX6bMc6hyq4VOM","tlshash":"26e29c4e3ee3018d7c51b6746eec6a126284e507d6cfdce37dc09178cf896a845aa688","first_seen":"2025-07-12T07:10:36.160026Z","last_seen":"2026-05-10T06:23:27.148502Z","times_seen":15,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":394,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/?size=96\u0026id=23279\u0026format=png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 10:28:54 GMT","end":"Mon, 15 Jun 2026 10:28:53 GMT"},"fingerprint":{"sha1":"FB:64:A2:47:3E:78:7C:2B:08:A4:67:CE:63:64:D8:05:DB:13:E1:97","sha256":"C1:67:9B:EC:6A:3F:76:AE:75:5D:0E:0F:46:34:13:71:3C:89:7C:17:5F:88:7D:0A:92:61:16:3F:C9:67:77:54"}}},"request":{"raw":"GET /?size=96\u0026id=23279\u0026format=png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 03:00:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2215\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 23279\r\nicon-size: 96\r\nicon-format: png\r\nlast-modified: Sun, 12 Apr 2026 05:53:08\r\nversion: 0.0.29\r\nfrom-mongo-cache: true\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: k1S7MOVABAEmws1CZl9IbLcR6GdzBZXgNKvKJSt7SQhrSMt1E7x+9SqdNvb2UFWw1g\r\nx-77-nzt-ray: e2f75420f017560440ffde69ab56e82a\r\nx-77-cache: HIT\r\nx-77-age: 241419\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"4371ebf64b1ba1a356e7011a90be638f","sha1":"94240e6bfe1325b17f0daec489efef6b41a8ba2a","sha256":"ed001648ce2fe5899557f69e66813f97c0a2149552c163d607094a270da84a05","sha512":"abfe9feaa81017ebbb896b1e5601c0982c9d2a2b08e69528385a6607a863e2e55ec8be7f268d9cc01c12c6d7f59f31a1d7c2b8b85b7673a5f8938f38af8ac218","ssdeep":"","tlshash":"3d413c9567e04e6a8ae7f337486d1075d3b3b628b5454414b9284861ed532aad438742","first_seen":"2025-08-01T07:42:48.570702Z","last_seen":"2026-04-15T03:01:03.434499Z","times_seen":15,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":13,"dns":21,"connect":8,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/juUgJwBwgWk","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /embed/juUgJwBwgWk HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script', base-uri 'self';object-src 'none';script-src 'nonce-PZZiJA9m8O31pzOGg97nQg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 15 Apr 2026 03:00:18 GMT\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-BUCKET=CLMH; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 03:00:18 GMT; Path=/; Secure; HttpOnly; SameSite=lax\n__Secure-YNID=17.YT=CLVO6QSxlZJ8NMOtbYxz3mnhC4g3izMcbdsT4XldM7AXRU1CsITTaim35L4ZBoyp4ZDyhnl6bA4laLNW7eEImIAS2UMJRhY5hm1fb69DyQfdNTueaBEthURBPY7RKl3b802HtSrVjSR6HOhIHkzOixqk7SRWJCr3BZl4ZiYiICrHX4j7heOj4UuuwV7GBmnaD2CHhmLCT_9IdqWsq7L6Sp9l7vGhTeVbx8nUrjlrUAxxM3YHK-dnGALI1_VjRK0K6Oc-EMGnLELE8cNa99LHwG6WxucFJHBjC6t0VPNgIFl0KWdner6-zkdyWdpx6vqZX_iikvZKpBxMZRPi96xKbA; expires=Mon, 12-Oct-2026 03:00:17 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=idkuCgxDunQ; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CPbKzqzM7dOujQEQoPax0-7ukwMYoPax0-7ukwM%3D; Domain=youtube.com; Expires=Mon, 12-Oct-2026 03:00:18 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\n__Secure-YEC=; Domain=.youtube.com; Expires=Thu, 20-Jul-2023 03:00:18 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=fuouv6eNOMY; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 03:00:18 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D; Domain=.youtube.com; Expires=Mon, 12-Oct-2026 03:00:18 GMT; Path=/; Secure; HttpOnly; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138500,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52117)","md5":"70ba4e67d42e45d89588aed407aad648","sha1":"8528a76172dfbc408a8ee1bfe2dff3926636dcaa","sha256":"5043f8e95ed87ecbe8c1a8790bc7c0ad2d397488c948821f0130690e5e01a8ff","sha512":"2566ecbd6b916b4a484bd2b4068d585ed7a31459d8c3093fe74025ebd259e7a5982c413edecc36ecbe85970b2dbe538e1eb6335c8b7859fd5d56604c16d88aad","ssdeep":"1536:IQ2fO7+yx7t2lahq2md4jU2wg7l0RG7ptJZhGiOV8CX:Xqy3q2mv2wg50R4pTIVRX","tlshash":"4cd31b250858a876c9939847edbaff3eace8013547c4956ebcbbd75c01ec6610eaf413","first_seen":"2026-04-15T03:01:03.435039Z","last_seen":"2026-04-15T03:01:03.435039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":72,"dns":1,"connect":21,"send":0,"wait":61,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:18.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:18 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-16T13:06:29.977321Z","times_seen":145926,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/banner/banner-bg2.jpg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/banner/banner-bg2.jpg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10558446\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10558446,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, description=Group of a young business people discussing business plan at modern startup office building, manufacturer=Canon, model=Canon EOS 5D Mark III, xresolution=254, yresolution=262, resolutionunit=2, software=Adobe Photoshop Lightroom 6.9 (Windows), datetime=2017:08:07 14:20:36], baseline, precision 8, 5568x3712, components 3","md5":"2d13a97eb75806971b30121c1446ddb3","sha1":"b59c55f5ac927723148d475f01ef67ad0a9b6a3a","sha256":"270f73559a477556304700a09aff8d4917b3c311a42fdc27920bf64486d81ace","sha512":"d1786dbfc57cc46dd511957680c855fe25f799f26b91c12a3f78ec5144b8bf96aebf40ce77be1e3997b606aebb69609d98f282e4a0fad52db91a1866ab523d36","ssdeep":"24576:1bQa2FgJY7lkSzGmMBujlGXqtw7ggIu64uX:11cgJYBD6BujlQqtwbPuX","tlshash":"67252325acd614ac8a764d76e8ecb5dd85b39b8599c6d99734cdcd0c2f2680a0fcb0c3","first_seen":"2025-08-11T22:38:38.363666Z","last_seen":"2026-04-15T03:01:03.435909Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":2051,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/footer-bg.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:18.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/footer-bg.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:18 GMT\r\nContent-Type: image/png\r\nContent-Length: 55027\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55027,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 699, 4-bit colormap, non-interlaced","md5":"aaf76c5bf1b40967cdfe043e1c5bb95c","sha1":"d4cb322ff34c2fbbf00136b5605e45f4e99e0c7b","sha256":"3f355dd1156f3290f87b5e4a2271f8225058a6c6eb6c89268af4cd5df2b8d4d2","sha512":"a7396f6d5580ad65f981a4f7608e3b75e0389b022f70acac1e2918e835072c30ed83f6821335288cb28643fff72411e2796382ef770a13e52e831338893ff0c6","ssdeep":"1536:Fhtz+0qTZu834XApnLl0gSeZrN/xTvnSVgDyMGxCJz:d6IXApLl0g93/Ft2xCJz","tlshash":"4d33f2e0453ef432adddd27123036296f9c964ac49b354763bab170d112acb42e27e29","first_seen":"2025-03-19T10:36:51.047204Z","last_seen":"2026-06-12T05:19:19.853102Z","times_seen":51,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?BEmTZA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:21.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /generate_204?BEmTZA HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 15 Apr 2026 03:00:21 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/odometer.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/odometer.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/css\r\nContent-Length: 3116\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3116,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3116), with no line terminators","md5":"c5c5fd142cb067412692ca3202cf8884","sha1":"839930805cd5086af7bc88b4248d50f533bab7c0","sha256":"c023b507dce43045404d4f737df6672956dc2cb3dfca9dc61b74480219315ef0","sha512":"71b1a3dea5ed53d1a5356cbf3d09181b20f68191ac7a2b9edc31a48543bb0b47be25fcf4ec515b0cbc060c74d3687b9af4490ea4b07c3b1a4b59ede74dff6a8b","ssdeep":"","tlshash":"8351e2154f91136863367506bac81b60befce9015123e98e735da54bcf43db9e398b0b","first_seen":"2023-04-08T14:13:01Z","last_seen":"2026-06-16T10:41:08.587829Z","times_seen":1795,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":300,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/bootstrap.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/bootstrap.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 61768\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61768,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61483)","md5":"86c66103329d2d376c5ec84117058497","sha1":"d65c1eda71a436de34a324b73708421225785f59","sha256":"83ce8dec787fb3ceacaf7a5b61f36475a8a8ec525717aabd73dd6e25522d28b8","sha512":"ecf10c6a81c9350a04aa9c6090ab24a17a448258a81272a57c231c6159a697cc898e6046eedc1a0669c8f8f2d4d1c353c36556862cc96141b59264b3443a35b7","ssdeep":"768:w/gB79Mr3uDTVayu8Of8rm7MT5ZFcHUbw8gpQCYewiTlAx17j0FhlG8KktWyh6c:wWYY28meG+zgA8Oc","tlshash":"2953924ab254787206cf7475817f060fb33a6899a446813cb96ad8de1b7cc897173fb8","first_seen":"2023-03-07T12:05:17Z","last_seen":"2026-06-16T10:46:15.98013Z","times_seen":1023,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":595,"dns":0,"connect":0,"send":0,"wait":102,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald:200,300,400,500,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css?family=Oswald:200,300,400,500,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Apr 2026 03:00:17 GMT\r\ndate: Wed, 15 Apr 2026 03:00:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10266,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a1cc133a90e2f42bb150b6ea0c9f97df","sha1":"912fafb9971d50766d230f50b12bfc0cbdced24b","sha256":"fafd26cfa100cec90090a795113bad5efa34c33aa87360e129683e9c307cf395","sha512":"dfa1107b195ec23d0f48a041f4df71263a5146946b7add9368fc9158b3e4ed3a4e9ea9599ab44c82c49f7c4da65f98227598558bd2e1be11cfc971498672648e","ssdeep":"192:3KHLcfh9mKcLH0habK9La1hHwKaL9yhcVKDL47hBSK4LDQhOt:6rWuc1So0HG6X","tlshash":"4322aea2042fa4806f471cc533cf3d329e8ea24574518975affd1ca8dca6e216369b4d","first_seen":"2025-09-14T23:19:29.11902Z","last_seen":"2026-06-16T16:55:07.61877Z","times_seen":1377,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":62,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/aboutbackground.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/aboutbackground.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 1229\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1229,"size_decoded":0,"mime_type":"image/png","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"836004c8a38e0896f13e0e3684e7b042","sha1":"a8b35765b1909aa611fee787e551eca2874310bc","sha256":"1e7fda8475d2ba9e1f174715db67d3f7d0514b9172b6c405f2868a97b4afe8d7","sha512":"4f3cb4116bffedd39e7b556c7cd53d9eaf1a113c94bed86c9c28532b71043f6e2b85d17c933ab6d0eadc5089a08167963a999e7be1b47e12ff2306a7ff2e7864","ssdeep":"","tlshash":"3d21843ac1c4150ae0235258fb81f78836168251d2870fa17b9e7567facd0f756a37dc","first_seen":"2023-04-05T10:23:25Z","last_seen":"2026-06-16T10:37:07.940958Z","times_seen":668,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:18.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 196759\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:09 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51129\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":591066,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"fb598e722e3ca661b8d52298a2b80050","sha1":"63af5c9411b329a6ad1b874d7ccbec0cccb7d53d","sha256":"c86f07d1a6e35e37aed78daa25e6c0011cc94f45f68f2474d498602f9921d51a","sha512":"7916c6378acc030835e3e374ac5dc0ece8b5933743082aa5598c2f58153dc4ce516f6fe92acfd65a29bed63df6e908cb711bdbbb39a5e3808257a67f272e6aef","ssdeep":"12288:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGtpYdJpO8vVhmRvezgHzDzOt5iMaPShv9Sk:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGte","tlshash":"30c44ad873a2706792a2f5e4903f0102b17a6856f40c8cbcf29cddd26db594a51bbf78","first_seen":"2026-04-14T14:26:58.186965Z","last_seen":"2026-04-15T17:30:11.960589Z","times_seen":832,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T03:00:18.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290763\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-16T17:50:35.49609Z","times_seen":884618,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":186,"dns":1,"connect":21,"send":0,"wait":8,"receive":3,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/logo2.jpg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:19.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/logo2.jpg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18329\r\nConnection: keep-alive\r\nLast-Modified: Sat, 14 Mar 2026 00:26:05 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18329,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 341 x 322, 8-bit/color RGBA, non-interlaced","md5":"4393bd8fc313faebba4e2389aa088733","sha1":"65780f0cdec848cf5b13093b0fc1147c9774c539","sha256":"e772f6af97eae1e19113fb3d037a0d9f2ecdfb04edea213d434eca2c9e3924d0","sha512":"3b2bd23a40fb483144d624f8d59fada75b8df523cde2e4823b76f25b877f46d71d60aebfa174b39b7cb4b7f238742ab88900e5810ab42104b067c08d1ad23f47","ssdeep":"384:z0w6ri50I3j7LGELTLXb8knlUisC5aT26ec3gD/DJ0KPg:zZFT7iE3LL8klk3NwDL+F","tlshash":"7082d0c1585cc965810a1a665ad9cf039b13a5cde58e0f089c5f9437cb26aa23fbab81","first_seen":"2026-04-15T02:59:49.453867Z","last_seen":"2026-04-15T03:01:03.439128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":859,"timings":{"blocked":720,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/channel.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/channel.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 724782\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":724782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 985 x 616, 8-bit/color RGBA, non-interlaced","md5":"b220298c52ebd75bfeac4380a9d40d9a","sha1":"11a4349a8708a2a49a54ef04e29bf42a522df092","sha256":"561957f068ae0393d1df2c4ad3df47256e48aab40ce08472552283d317fe1cf5","sha512":"d3d7b7b19f3561abda31f8179f3e72f3042b38b87185aaffbd5eae417c0d2521d7d6ef9f287f63b694a806379c1e50c8fb7c251e9ff988922e2d00e795fed962","ssdeep":"12288:sjdGYQ9kICdMSd9DW9RVuvqA4jm71uiaLxQ14SkoNm8ajskIG3Xnz6O2gLhBR5+:qe3CdMu9y9RQNR7xYvFotaCGNPBy","tlshash":"c3f423455230f07592ba0cfa9cea073adda71422473f4267482fc52ae67be35e51b42f","first_seen":"2025-07-12T07:10:36.11146Z","last_seen":"2026-04-15T03:01:03.439674Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1565,"timings":{"blocked":1128,"dns":0,"connect":0,"send":0,"wait":125,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 01:40:44 GMT","end":"Thu, 28 May 2026 02:40:40 GMT"},"fingerprint":{"sha1":"F0:7F:B1:BC:BE:73:55:AD:38:9F:92:6F:D6:4E:DB:1C:05:30:A3:80","sha256":"32:CE:74:34:FD:C2:62:30:95:38:1B:13:E0:4F:A0:DC:0F:1D:D8:44:4D:60:AF:C5:1C:94:AD:15:57:F1:6F:2F"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 03:00:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2024 23:02:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 08 Apr 2027 02:09:51 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aN6yKdXGWK%2BBf%2FguAFYbiYvYnGw%2Fb4vWPzGm2344kFeAvUMn7ESzEBKsze3IaVkIzMz38Fz%2FbOezengWvrGbwAQeL0JDrGN6iIoYOuLnaXIWfEe6YlRa4HdTOJL846PAzZg57w%3D%3D\"}]}\r\nage: 607825\r\ncf-cache-status: HIT\r\netag: W/\"6763547c-59f9\"\r\ncontent-encoding: br\r\ncf-ray: 9ec7b2f45828b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23033,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-06-11T14:28:12.222097Z","times_seen":2960,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":4,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:19.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 146487\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:11 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51129\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":510435,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2293)","md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"resource_available":true,"data":null}},"time_used":968,"timings":{"blocked":858,"dns":0,"connect":0,"send":0,"wait":37,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T03:00:21.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1704\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1704,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$FIs5i-9RAAaFLtUppS7ePOKsaY4x0TGnAEABEArZ1EM6GZ5Wpotccdjx7XPWOs22gP7nDb_1Ng2g3dFiVAY3FmmIydeus_3hQh4gVo1AWLduUgDKtXqQGNuBngAAAuPOAAAAFfQBB-IAUnP-FtYdQdzHT_3uCfY8KeiuqQyx6QgjvtTJFWmpzylJ8EkmdMbAy3tMLWVcBQVIetiRMlsgBtfW1IniKCa22TZSjxZ_qmGedelEj81495GeXaMFBCo3_NX3W-nLRzdWndIrC2-Vjvx2Z3bVCYmiOMkmgrWeTjvTQ5WZHhnaV5e5xrXn00ca7f2SOvw3aYOd6pH56fdP1MyhXzIQcG0AT3DNhu2OmJBhK8E9SvDoKZ2xLMttZt6fmS-TieC8LeCL-yy6dZDga9915subpTiZsWt6nSHLnuX6qEiRLJKgZNu8YgKTuv4VUbSIVNU5oEPDoRrmDplK2ie6fxZwHTV87MSjFl4-DaBbToOp19QvVWZg3TNq8JP06Xta5IyD3tTBqMi3NNyb7BUa_DCFLFeOg7OSinUTP_FFGjooNi2yCHiR9ivlkRaJ1AorP0DiyOeg5VHzhLZid8MBhXkkT4LDcG5vwGT98H-zipVeGmdQbew6S8eYU9lIzSnc41kFN0bo_Dp4Q36SbC7ezx0yZPsvmOFFw82jWS5VUX7ReeQjv7QHW1ui9FlBv0FwDnRu8xfryx4AqLBpnMiYHTMg9pyy-X4mLYNAsdC0VFqjJMKzODTpt4CMI71uRGiIatx35pZ3vpi0VR3_AqHnz5KEMKbmtkaBJivyDgLlF9oeywOdrpfSD_1XXEVPCq6E4RR5VjfyLfsqcaZSrMGSKhC4HokqNKwYCkWXVuJ5Go0AaG6RLJaOEKOf4IsoMDMPUDibL-gPGYBMMPdPC4t4PXe-E1cnKY9r7vv6J9z7dWP2doh8JtIIvc6YZfuFEEGvj1iCxe_rxVsLOrKWG5B-3BfZEs0_EfW6m0c7i9z5YKZphMODdWbRhKrC9IUKBzrVcNH67uKixVUsR8GFko5cwQqVsP3iPXGlIXCfAb4nhgXASl3gl7VJOFkJS9GrOEvJSYyXHatpVMuUm0YVC0Ls3mDDXbjqZTEkmfucKHzCUtOP_40x4wIWUkZZqbj9zi4sCdETUTJRojbbEYj84J56R5vPAt07KA1p3olONaqInpbTxVb-vBkVyQGK_iOYZrZaTRZ84omqzeRgLYrNp0U8-ruVX-xsn7sF4rG9koDKbb0hC1lb7__bPcmuVLm5SPSfP_-iVNyGbve6MCWgqJDudT1N1nJC1OcUz-RFcHqaWWFzQFva9RrjvxiQnkaTTXtJHcc8p4rmv7K7DDl2NT5_LjnD9wUdUgDEXFBCvFIVnQbgdp3Nime0soUsjVLR6Cn2JKMeNST2pZaAVP_f-oKgSWc9pGNMij97nlFBNcyh9ZWRjjsCNoPmHTCG1HcIeR3xcDgTjPyoLN4531rdT1ITFWxmlTYuKbB0Yh5cyhFib3oXA78xNUCUgY5qCMXHe4Mh_ohzAvrpdlsQmOe94LJ7k11TOoNGLC077HsL6JRkOAf7iLaaI7e30-JM74ESxo2zFxe5NRR9s9MVshSH8LYRJKBw1YtlPf7U04hgOCjzQKo5UR7aABHwSIltuhPlMw_3NAQmaPE0\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Wed, 15 Apr 2026 03:00:21 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"c83cece3c6712d9928da138438738ba3","sha1":"6aec7a3554ed0439958847a41b956d9d43e156a8","sha256":"b046f1f087e7b75b8084f9c6201254c262cd191abce354665cf9279af6b5f3f0","sha512":"98ea93fc423646e8edcc7caf1fc1e73fe8c63e545192538e67b307500a8155b53763090e679fb99a997635ae68cb712ce27732693db961d5716651d020bc6e80","ssdeep":"","tlshash":"02b01231314c29b1822ad20073309419ac404020d7ee6f01613911f03247c21d4eb4c7","first_seen":"2026-04-15T03:01:03.441238Z","last_seen":"2026-04-15T03:01:03.441238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/qfs.mp4","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /qfs.mp4 HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:18 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 78021351\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:14:29 GMT\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-78021350/78021351\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458483,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"ddd248e248a0dd2aac37ba06f93ee4db","sha1":"6f09b60abc4ff5ef0ed02bb4ef33376af71b7b14","sha256":"fe0ad50f18083118d24711767f01c691c8a5d9e1f5dea1f5efcbecb1fba94880","sha512":"d4d41b1175a976baeab12064abdd45f5326eaa770102ffd4227f040fc1a6be6e77544aecea49e555426d5dbddabbb646e18e3a0920ab317de6199c98412146d3","ssdeep":"12288:dG9m4TiBNgvcDN/43Mmj5xO1vN9Htz5LoX:dGM4TbvcDdiMmtxO1R5sX","tlshash":"01a4e0f5eb6c0516ead36a31e2d92728ad04f4f051d0c9ca60f5e36fca350f5ea860d9","first_seen":"2026-04-15T03:01:03.442078Z","last_seen":"2026-04-15T03:01:03.442078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":113,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:20.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 10:30:49 GMT","end":"Tue, 23 Jun 2026 10:30:48 GMT"},"fingerprint":{"sha1":"FE:60:F0:6C:13:88:B2:39:2E:11:67:71:2A:8F:58:11:3A:45:30:5D","sha256":"BB:F8:AA:87:AE:AA:9D:E7:CC:47:F2:E8:98:89:5B:12:D2:33:6C:16:8E:C6:CA:61:CB:25:84:42:51:47:56:17"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qfsglobalsecureledger.com/\r\nOrigin: https://qfsglobalsecureledger.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 03:00:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: c494243850baf102b3f9f705545512bad86646b6\r\nx-77-nzt: k3RcJFetiSSt5f9ZL+FOrenBifowqfRJop7nGDNlQH0Z7LKfYW9x2TR0w2NhbhtyPPYqGYg\r\nx-77-nzt-ray: fdb541230a3dd0fb44ffde69bedb0f24\r\nx-77-cache: HIT\r\nx-77-age: 393\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7216,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"05d7604a60456ab25eb809557b353edc","sha1":"e32135b721636e7994e42748da35341e03dfd123","sha256":"5892aca834fe3f9f8fb66f68c8a3eb2295708a3b428cf355d7f3e3c1a0b7b62e","sha512":"db4124c008e22597192e1f07b44575ff191a03322f763bffb1efd129152e0f6f1546d98f5016967b32cc71a8252fefc0546aef0be258e8343fbba4ae2afe00da","ssdeep":"192:Ccdft/hc4l6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcbWbYKZcF+jhqoWQmw","tlshash":"48e1b54f9a144ea987c6438276cfb84675bc80734250993afd8cc8b842697cda3e3b94","first_seen":"2026-04-01T12:23:41.393805Z","last_seen":"2026-06-16T16:15:03.009589Z","times_seen":2177,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":27,"dns":1,"connect":7,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/meanmenu.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/meanmenu.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:16 GMT\r\nContent-Type: text/css\r\nContent-Length: 7278\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7278,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0e9d719c0fc93c8f128b233de0dcd6bf","sha1":"0305e608c34f4858ee6f63065e8cdeeacf235908","sha256":"7cd9b0eb937a055990515570a19065202d520fad145d252b73a1350247f32e1b","sha512":"1542124f039d7161eecd1382c61a55b21717974581bebc4d0eaef81615cbe26757a88fa4a9387560b92f63e106318e9000992920422cc27be6414d3180fb32d5","ssdeep":"192:kXyhB2Qaqxv4m+dVMF7FAix8thN7UMLDh4LvhNRPYSyeVS1tgesVRvL:kXCZaqxv4m5F7FA88zN7UMLDh4LvhNR1","tlshash":"27e1f356dab72444788a806caf9993342fdc5047a72dde6a35afa254cfc338450a3fdc","first_seen":"2025-07-12T07:10:36.115319Z","last_seen":"2026-04-15T03:01:03.443422Z","times_seen":11,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":197,"dns":1,"connect":105,"send":0,"wait":110,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/custom.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/custom.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 7085\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7085,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"9c26a785c8d563dae861e970c6444189","sha1":"e65ba95e755885ef80d20a27055d24e882d2d777","sha256":"29ec1b8f57a1fe87ef14d3097960338658f8d62839f0b850c0a07288ff237fc3","sha512":"9e5df2561dc71589171275727cd9bb925a482d3d794597021b66079e423ec6a00ba887cabfad3e13d24cb1c8fe19cb2a4a6e25a4c988011533dda8739504d588","ssdeep":"192:GSVffzK6zBOIdsObuitTzB5PCP1YE0Y95M5U5cPP/l:GofzK6zBNdsObuitTzBZ+119auWfl","tlshash":"8ae14546f77c10a059bb71a98abe91c2573e2103f80765a7f0fd05285fc967e30b6947","first_seen":"2025-03-20T21:52:11.231494Z","last_seen":"2026-06-05T03:59:04.149047Z","times_seen":38,"resource_available":true,"data":null}},"time_used":900,"timings":{"blocked":798,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/sop.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /sop.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 1251\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:04:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-16T17:41:07.761815Z","times_seen":133998,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?9RL4Ew","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T03:00:21.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /generate_204?9RL4Ew HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 15 Apr 2026 03:00:21 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/unpkg.com/aos%402.3.1/dist/aos-2.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /unpkg.com/aos%402.3.1/dist/aos-2.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-16T13:06:29.977321Z","times_seen":145926,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":412,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/logo.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/logo.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 16708\r\nConnection: keep-alive\r\nLast-Modified: Sat, 14 Mar 2026 00:24:39 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1099 x 126, 8-bit/color RGBA, non-interlaced","md5":"6eab2b69bbb9e7b77f18141883abc23f","sha1":"5389b939cf9554751257df8751284541ab6e0cae","sha256":"609f3db5fc173fe270fab76a98e29f651d3eb79f515162aabccd5cc7efb06edd","sha512":"f1ff5d421e68f53bfe828139cc03287fa883d40a57af46c8deba6f2756ea4bb343a225e62066e61c42f7b709364998a453c7376fffdf8cfed0cff3ca3ac4f6c7","ssdeep":"384:F0wNeTm/RDh9SMwORs4ifPXwILaQ7/Dsz+Wr2imS3m:FOq9TK40fw0aQ/o3S3S3m","tlshash":"fd72ce847c87d8327e4f05da9e2d2da98a6380728379f83122bb8b8dd3d4705b582486","first_seen":"2026-04-15T02:59:49.47511Z","last_seen":"2026-04-15T03:01:03.444546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1238,"timings":{"blocked":1135,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery-3.5.1.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery-3.5.1.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 89476\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-16T17:32:59.795245Z","times_seen":252155,"resource_available":true,"data":null}},"time_used":801,"timings":{"blocked":590,"dns":0,"connect":0,"send":0,"wait":107,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-KNmfGZZQ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:20.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:33:12 GMT","end":"Wed, 24 Jun 2026 10:33:11 GMT"},"fingerprint":{"sha1":"D0:0A:A6:39:E7:85:DF:64:B0:13:66:E3:06:E8:BF:2D:3C:AE:EA:7A","sha256":"70:D5:91:24:1D:F0:F9:7F:57:55:99:71:1F:A5:15:C2:B9:C7:21:65:6B:42:A2:34:4A:6D:A7:53:70:BE:C0:7B"}}},"request":{"raw":"GET /assets/style-KNmfGZZQ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://qfsglobalsecureledger.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 03:00:20 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69afcbd9-9217\"\r\nexpires: Wed, 10 Mar 2027 07:48:53 GMT\r\nlast-modified: Tue, 10 Mar 2026 07:44:25 GMT\r\nx-77-nzt: k+BsiAgjgbUEiBYyeqC/6M6r+gu1bkTTc5JYGu4oU+Lr6M1ZL6vrqqVhxvj5EyMJLqrdIEE\r\nx-77-nzt-ray: fdb54123223ecef944ffde693ee50d1b\r\nx-77-cache: HIT\r\nx-77-age: 3093068\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37399,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37398)","md5":"e0e19bc0ef5c8a7be30d687ff72b1d44","sha1":"103123375bbaaca149d026b729eaf3ef58d2d602","sha256":"f471612283039dacc9bbab82dafd8e35ed37c4fd9d099a7af946c41231daac21","sha512":"1be4a4bce5fd32ddc8843fb781a28a642c4815fbbb891ec33e5d5ee29d1555c7338eb07e4965a7dbb4ddbc26d45381178b973a26a8f8de0ce7ea10029ab11a6d","ssdeep":"768:E8CQgTcCWYtomXFbxrnSJPHs245q+ggFgZ:E8dgTcCWYtdX3uPF4X2Z","tlshash":"35f2a75daad5093cec33c166e3f8e58c9229f591df321adaf6433a048ac27bf1987514","first_seen":"2026-03-10T08:00:57.31215Z","last_seen":"2026-06-02T08:09:59.912194Z","times_seen":3597,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi_webp/sFX1d7Si3mA/sddefault.webp","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"216.58.201.182","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T03:00:20.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:27 GMT","end":"Mon, 15 Jun 2026 08:36:26 GMT"},"fingerprint":{"sha1":"4C:30:16:24:AD:B7:06:03:50:15:3A:B5:DC:98:15:82:5A:91:22:16","sha256":"D2:FC:38:8B:E8:22:C5:9A:34:F2:7A:B8:D6:F5:52:45:A3:43:B1:AF:84:10:5F:60:F1:B6:6D:38:67:8D:26:4E"}}},"request":{"raw":"GET /vi_webp/sFX1d7Si3mA/sddefault.webp HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 28052\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Apr 2026 02:59:04 GMT\r\nexpires: Wed, 15 Apr 2026 04:59:04 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1560783250\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 76\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e07de6b2da9f80bc120b7858dc48e48d","sha1":"52c44d18ec4e5ed4e870d86ac49d89bdeea2262d","sha256":"b94f8b2d50880658891060356e0f61772d7db937103ece2c2992c8de5e1711f4","sha512":"f54e0a6696dfde1245cfc87b5e0036f726e0f38b9c1128585d7f1e6d0d449c744ed7a86ca8d8748e6a29a5e7443cec023c0d3238953fdfb1256d7cc51b3a9850","ssdeep":"768:Irrrrr/e20Jl/fB1V7fXaWLRsbWprMdVrtD148y3l:6UJfvpebBVZZ48Ql","tlshash":"15c2f14b9b75348dd7c3303433039262e5da9906d3f99c19951d0fcf32b64926b5aa9c","first_seen":"2025-07-12T07:10:36.152136Z","last_seen":"2026-05-10T06:23:27.083278Z","times_seen":13,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":54,"dns":1,"connect":8,"send":0,"wait":9,"receive":6,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/juUgJwBwgWk/sddefault.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"216.58.201.182","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T03:00:20.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:27 GMT","end":"Mon, 15 Jun 2026 08:36:26 GMT"},"fingerprint":{"sha1":"4C:30:16:24:AD:B7:06:03:50:15:3A:B5:DC:98:15:82:5A:91:22:16","sha256":"D2:FC:38:8B:E8:22:C5:9A:34:F2:7A:B8:D6:F5:52:45:A3:43:B1:AF:84:10:5F:60:F1:B6:6D:38:67:8D:26:4E"}}},"request":{"raw":"GET /vi/juUgJwBwgWk/sddefault.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40971\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Apr 2026 02:59:04 GMT\r\nexpires: Wed, 15 Apr 2026 04:59:04 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1596434630\"\r\ncontent-type: image/jpeg\r\nage: 76\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40971,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3","md5":"dd5c7552958b67d7262c85d78997cd5c","sha1":"f06e7ee5945d89c902918b4e3e4246bc33c49b31","sha256":"6f750648dc202bdfafb4d40280a9dbeb78feae8c333a2d7b973e7273e2a30118","sha512":"5001e1257a3e20182b867bc18ecc9c3738d7dec5ba84d6f6f0354dcbf7405a450a5cc9f85286ed8256135a1100deca9160856e3841ae5a8e25c504afaec0d2ab","ssdeep":"768:L1nmBVVVVVKI89heHwHMSQehfQxYmSP2c5gUElQvG5kyxVq0TzlUC3uML05TC:JhI89heQHMSQEMQHMQu5kuVjT+guML0Y","tlshash":"3903be572c48e573621e8132ce55b09cb4672524930b523b8c7e6dffe33d55e0cae889","first_seen":"2025-07-12T07:10:36.155815Z","last_seen":"2026-05-10T06:23:27.127889Z","times_seen":13,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":40,"dns":2,"connect":7,"send":0,"wait":9,"receive":4,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/animate.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/animate.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:16 GMT\r\nContent-Type: text/css\r\nContent-Length: 58113\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:00 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58113,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57903)","md5":"e3e3700d61c45e1e5ccf7ca4834d2a83","sha1":"c962baa0c04422114ad141bdadca84fbd0fc7fdf","sha256":"582f0595cbd3ef5c107b179ca19432bfd668dc80f77ac4bafe187164075894f4","sha512":"4fd09947050e7037990f098674b286b193a1fe2ed0ce49a4a5f09aa5dca820bfd4db66baa10291ac4bcb5d63086e878921eefe2d43a3270be1c40010f2cde74b","ssdeep":"1536:UkZHPGwQ1OAPkWDL32ye5trKem0OTo6j3rwzlr2c:UkZuwQ1OAPkWDL32ye5trKem0OT0","tlshash":"3643f8af5891229991230f66c7cc5ea8873dc66314721cde33866c4b8b46fde33ca617","first_seen":"2023-06-18T15:17:44Z","last_seen":"2026-06-14T05:29:29.330043Z","times_seen":150,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":101,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/sop.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /sop.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 1251\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:04:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-16T17:41:07.761815Z","times_seen":133998,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":501,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.meanmenu.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery.meanmenu.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 5931\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5931,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (397)","md5":"8e766f83bd6115e8c5ef3d95c07a9126","sha1":"22ef6499abd142d66363299a0b138f0ba1582e76","sha256":"114817c3d63b010fca17c5d431c6e38ce4220ea9e316532bbddba933ffeba2a7","sha512":"d06659002ceb6a9f3bad307632270866bde2978f507e98b05d1028515951058d4e739722a9e03834d87e8dbd9639ccdbf1f38295e035ebb6ca354df80d07ca2f","ssdeep":"96:n771uMXsA2XNnaToz99t56txMsLcCMoGIh7b6eFSEvU:77QMXsTP6VQCMlIhKAvU","tlshash":"0dc1ee6bb5b044f8a0bb7855b93eb23030f3640bf949e90032ad65262f1997515b2ffd","first_seen":"2023-03-07T22:42:44Z","last_seen":"2026-06-10T09:22:24.156981Z","times_seen":181,"resource_available":true,"data":null}},"time_used":800,"timings":{"blocked":673,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:18.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290763\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-16T17:50:35.49609Z","times_seen":884618,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":127,"dns":3,"connect":9,"send":0,"wait":12,"receive":2,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/owl.theme.default.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/owl.theme.default.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:16 GMT\r\nContent-Type: text/css\r\nContent-Length: 1013\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-06-16T17:27:08.42441Z","times_seen":24156,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":202,"dns":0,"connect":123,"send":0,"wait":100,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/popper.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/popper.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 18453\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18453,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18365)","md5":"abf6eaa0dafabdfc480d7691f9777995","sha1":"5f7e392213cdf5e71614118fb26f9520ef80df97","sha256":"4efa894b85e3c9b1d30d13ed6c3ee0f5320af9f1a3d20ec2838467e464c4f5a7","sha512":"066334fc1425aa1d36c2e2b91b3f72adb7bb572215c0ecc3d68e34ca2d48b138eb897fcd185dfb3725c77e6173225326a122015e0a83886d55354ea40797416c","ssdeep":"384:PMFHekJviNIGYAjvOg/+f3+l/m5HfxoILuw/VoNnuGb/f/MgHknmjNzWN6j3Q1:EBsjvZ/+AsR6w9oNnuSf/MgEnmjNzWNb","tlshash":"d882b6cc7694f4a5166753b6807b551fb333a920218ef500b254d6da2c74eaba32bc3e","first_seen":"2023-03-07T13:17:05Z","last_seen":"2026-06-16T08:57:57.368612Z","times_seen":649,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":591,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T03:00:19.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 146487\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:11 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51129\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":510435,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2293)","md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":612,"dns":0,"connect":0,"send":0,"wait":39,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/Credit-Card-Mockup.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/Credit-Card-Mockup.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 1771506\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1771506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1362 x 1458, 8-bit/color RGB, non-interlaced","md5":"b214002ded3b0acda1be65f2641f0b92","sha1":"744bda884204b85ce922c30b9f4a710e74ea4549","sha256":"2bdf909c645dac46c63c8c6cfcef17dc2e36d7b7b09cc9b7d6ec3cb9a75a7702","sha512":"32b79552efd81f9bd72e829a2b072057a9d552a59dede3ecb9af3ad25e0806ca500d2eae39adcc0a21f89d361ade470a4647d98a4dc2cc36ad877753d065a55a","ssdeep":"24576:VywwP44cxbCbsp6exjIoaOygR1qli7bpRJd6+K+mInZFck+:1vCbgutOZDbpRJW+meA","tlshash":"1c2533b033a015e563bc27f97b353e84b2b1da14d8ad58267e06424af1f2c78d4a3dd9","first_seen":"2025-08-11T22:54:48.993524Z","last_seen":"2026-04-15T03:01:03.449694Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1671,"timings":{"blocked":1125,"dns":0,"connect":0,"send":0,"wait":104,"receive":442,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.appear.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery.appear.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 4227\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4227,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ad1f16b6a13daf29169bf73cf29206d0","sha1":"990aaf5e09871660d3cda1f13367e2ae3425782f","sha256":"6eff971a28cb7a683daa4437b7b29832d3c78b8a35e3a4f42dbf5181e0942f05","sha512":"775f3aaef476b3be2930be2ccd81d7fbde95207fcf902f9bbfe4a0ead6aca314da1a7102015328f34416fb251106f72ab3e5c60f6e2f787745ff5f2ac1f98c68","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyM:X3/skfRwbDOrdfFjg/2cmVflyM","tlshash":"bb910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","first_seen":"2023-03-07T12:10:28Z","last_seen":"2026-06-16T10:26:51.687122Z","times_seen":690,"resource_available":true,"data":null}},"time_used":899,"timings":{"blocked":794,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T03:00:18.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/player/ee507a59/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 444430\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Apr 2026 07:44:11 GMT\r\nexpires: Tue, 13 Apr 2027 07:44:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Apr 2026 04:24:51 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 155767\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1486235,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (848)","md5":"a3f45afee6e0dc137cbfe33a74403f17","sha1":"06e9a62a5ca6154d4bf626f69580681b8f219d59","sha256":"cfa795e622f49f92d0a65a88d1851ee5db708b70f2a757154cc4c852e999d295","sha512":"337f572ff593bf42ef43e2a20ec657cdd82b57cf0273a92ca0574e24d54c70850d9f4bcce84ddd38cb6089f71b7e840ab94c60439635a78b2cbdfa9d69aae66c","ssdeep":"12288:NWJ+YoIPR+umUIWbouNnsuydXdJAXFMhxfBbqdH+PcFK59iMm:No+pIPUKIWbouNnyWMhxfJqdePN5m","tlshash":"14254cd932d2b8a243a3f0a7043f0105f17e89197548c99cfae9dae92c7194751bbf78","first_seen":"2026-04-13T11:27:09.96925Z","last_seen":"2026-04-16T01:05:21.413432Z","times_seen":1082,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/counter-shape3.png","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/counter-shape3.png HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 5768\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5768,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 389 x 267, 8-bit colormap, non-interlaced","md5":"bcc7feae92b7e330893dbb6496120a24","sha1":"516b967b4cddbddd39031ce7db1ba1fbc3cc560a","sha256":"63694c7af6f73708c874b412a81882ada0db4c9282c4c208ba1c1d3cd6892472","sha512":"e1a6cbbd9daa1ca129d4f441b460dc640c103a010a1d2d293cb2f98e0d95b9b3cdbfcee754fc623c750af548bdffcb4a959faf35e659f877cce5345665e4321c","ssdeep":"96:niYlQeEMpcHe4gW1rTuwh9kMclZuR1ynRR+DlKCbIIqdBe:iYyen4X1WMgZnnXyJbIIZ","tlshash":"13c17ddacfee20251a4b5d48da591252dc90a296aa1b787013ec067b2105649fb9f38b","first_seen":"2025-05-02T13:08:05.724945Z","last_seen":"2026-04-15T03:01:03.450863Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":1008,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.ajaxchimp.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery.ajaxchimp.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2381\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2381,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2381), with no line terminators","md5":"36d1b0e5a3a7397b267e704beb2f7272","sha1":"86df23e41520d19dd0c6928e4a5de89c1ae172a2","sha256":"2dcc9f6916671ee0ee4c5f7c7b6f13c519189b65d371a39309c0d95b79050c28","sha512":"e728f97a563dbba72519ef7ff7b6e3de3265c3cf8ef574affed6e67bc9bf2d1f1c2a79d3e7ead1f2a1d6fd4610fcca332e0ddcbd31de608a4ce64464b404926e","ssdeep":"","tlshash":"4741444025101bc2418b21f2e4c7bbe370e7d5958824f558e668e0e30ee4dcdae27a9e","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-06-16T10:41:08.610824Z","times_seen":4928,"resource_available":true,"data":null}},"time_used":797,"timings":{"blocked":673,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T03:00:18.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 196759\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:09 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51129\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":591066,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"fb598e722e3ca661b8d52298a2b80050","sha1":"63af5c9411b329a6ad1b874d7ccbec0cccb7d53d","sha256":"c86f07d1a6e35e37aed78daa25e6c0011cc94f45f68f2474d498602f9921d51a","sha512":"7916c6378acc030835e3e374ac5dc0ece8b5933743082aa5598c2f58153dc4ce516f6fe92acfd65a29bed63df6e908cb711bdbbb39a5e3808257a67f272e6aef","ssdeep":"12288:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGtpYdJpO8vVhmRvezgHzDzOt5iMaPShv9Sk:uiZ0h4dJxM10s4uTHAPh+uM1f6nTRGte","tlshash":"30c44ad873a2706792a2f5e4903f0102b17a6856f40c8cbcf29cddd26db594a51bbf78","first_seen":"2026-04-14T14:26:58.186965Z","last_seen":"2026-04-15T17:30:11.960589Z","times_seen":832,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T03:00:18.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 290763\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-16T17:50:35.49609Z","times_seen":884618,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":94,"dns":3,"connect":8,"send":0,"wait":21,"receive":2,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/banner/banner-bg1.jpg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:18.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/banner/banner-bg1.jpg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1078757\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1078757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=3712, bps=206, PhotometricInterpretation=RGB, description=Group of a young business people discussing business plan at modern startup office building, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, width=5568], progressive, precision 8, 5568x3712, components 3","md5":"56b45ecb69244bc69a8bc7ec19f611f4","sha1":"68699cd54ad7c6438f0ae5e2cb864fd2e49e9685","sha256":"3982eb8a164ca22146702d787e5f4940507d6d537bebfba6273a86cd6e797d5e","sha512":"0907370a704e29819f47ad6f6ecd48d0fa759f96e125a36625bebb2944d64366d4d10a9576c4fbfd7d3f6a5918d2ae04c12d1ae3c6a3e27cbdf5acd81df26b30","ssdeep":"24576:LKoqbIkxLiUwYGixwxpExPE4diQyabbf7Q0h:GoqbL//im5diQyiLc0h","tlshash":"922512ed5ef41ec3c1c833b8c5ed7643a6e600809adf978f787d051a4ba5a04ace5897","first_seen":"2025-08-11T22:54:48.937306Z","last_seen":"2026-04-15T03:01:03.452037Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1056,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T03:00:23.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1776222023638\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtGbzJtY3RvVTRsMCjB_vvOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgVw%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260414.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 899390650\r\nX-YouTube-Page-Label: youtube.embeds.web_20260414_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1776222019343\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C250%2C250\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 12431\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12431,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260414.01.00\",\"configInfo\":{\"appInstallData\":\"CMH--84GEMPegBMQ1YW4IhCJsM4cEMKJ0RwQlIPQHBDBj9AcEMj3zxwQntCwBRCmttAcEMzfrgUQ8ZnRHBCu1s8cEIv3zxwQgc3OHBDGxs8cEL-U0RwQtbWAExCU_rAFEJfVgBMQ_LLOHBDa984cEJS20BwQ-9uAExCTmYATEPv20BwQh6zOHBD-_9AcEL6E0RwQpojRHBC45M4cEKz10BwQzPnQHBDTn9EcELyk0BwQvZmwBRCfz4ATEJmNsQUQ3rzOHBDxtNAcEP6N0RwQvoqwBRD2q7AFEL22rgUQmZzRHBC52tAcKkhDQU1TTWhVcC1acS1ETGlVRXBRQ25BNzVGYjBHV2VRRWg3WHdDektnckFRRHpmOEZ5N2NHLXlhMjVBYWZpUTNxLVFiMEhSMEgwAA%3D%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://qfsglobalsecureledger.com/\"}},\"events\":[{\"eventTimeMs\":1776222018996,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019000,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019024,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019024,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019025,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019025,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019379,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019408,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018004,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017783,\"latencyActionBaselined\":{\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017932,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018004,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018013,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017834,\"latencyActionTicked\":{\"tickName\":\"ndnss\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017835,\"latencyActionTicked\":{\"tickName\":\"ndnse\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017835,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017932,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017845,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017932,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018397,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018689,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018353,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018732,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018353,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018665,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019414,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018978,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019426,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019432,\"latencyActionInfo\":{\"serverTimeMs\":49,\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019544,\"screenCreated\":{\"csn\":\"PB3OjNfNWKGoBuUF\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"Qf_eabS7OdKLjNgP65eZqAY\"}}}},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1776222019545,\"latencyActionInfo\":{\"clientScreenNonce\":\"PB3OjNfNWKGoBuUF\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1776222019545,\"screenCreated\":{\"csn\":\"biHiRfn7pLfUSOFm\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"PB3OjNfNWKGoBuUF\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1776222019545,\"visualElementHidden\":{\"csn\":\"PB3OjNfNWKGoBuUF\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1776222019545,\"latencyActionInfo\":{\"clientScreenNonce\":\"biHiRfn7pLfUSOFm\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1776222019546,\"visualElementAttached\":{\"csn\":\"biHiRfn7pLfUSOFm\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMItN6w0-7ukwMVspL0Bx05FjZbygEEXck9ZA==\"}]},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1776222019549,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"22\"}},{\"eventTimeMs\":1776222019549,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"23\"}},{\"eventTimeMs\":1776222019562,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"IHii-bLCqLjcM-FC\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"35\"}},{\"eventTimeMs\":1776222019565,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"37\"}},{\"eventTimeMs\":1776222019571,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"Hz43a5suqaRDJ-hK\",\"clientScreenNonce\":\"PB3OjNfNWKGoBuUF\"},\"context\":{\"lastActivityMs\":\"44\"}},{\"eventTimeMs\":1776222019571,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"Hz43a5suqaRDJ-hK\",\"clientScreenNonce\":\"biHiRfn7pLfUSOFm\"},\"context\":{\"lastActivityMs\":\"44\"}},{\"eventTimeMs\":1776222019928,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"400\"}},{\"eventTimeMs\":1776222020342,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"815\"}},{\"eventTimeMs\":1776222020343,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"816\"}},{\"eventTimeMs\":1776222020344,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"818\"}},{\"eventTimeMs\":1776222020348,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"821\"}},{\"eventTimeMs\":1776222020500,\"visualElementAttached\":{\"csn\":\"biHiRfn7pLfUSOFm\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"973\"}},{\"eventTimeMs\":1776222020500,\"visualElementShown\":{\"csn\":\"biHiRfn7pLfUSOFm\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"974\"}},{\"eventTimeMs\":1776222020531,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"1003\"}},{\"eventTimeMs\":1776222020752,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"1224\"}},{\"eventTimeMs\":1776222020752,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"1225\"}},{\"eventTimeMs\":1776222020753,\"visualElementAttached\":{\"csn\":\"biHiRfn7pLfUSOFm\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1225\"}},{\"eventTimeMs\":1776222020753,\"visualElementShown\":{\"csn\":\"biHiRfn7pLfUSOFm\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1225\"}},{\"eventTimeMs\":1776222020753,\"visualElementAttached\":{\"csn\":\"biHiRfn7pLfUSOFm\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1226\"}},{\"eventTimeMs\":1776222020753,\"visualElementShown\":{\"csn\":\"biHiRfn7pLfUSOFm\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1226\"}},{\"eventTimeMs\":1776222020804,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"1276\"}},{\"eventTimeMs\":1776222021485,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIEw==\"},\"context\":{\"lastActivityMs\":\"1958\"}},{\"eventTimeMs\":1776222021488,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAACZAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAJkAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAmQCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAACZAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAJkAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAmQCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAACJAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAA4QCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAACZAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAoQCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAABxAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAJkAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAmQCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAAChAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAQkAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAmQCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAABBAIhgKAwoBdAoGCgRhR0lmEgkRAAAAAAA0kUA=\"},\"context\":{\"lastActivityMs\":\"1961\"}},{\"eventTimeMs\":1776222021614,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"2086\"}},{\"eventTimeMs\":1776222021614,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"2087\"}},{\"eventTimeMs\":1776222021615,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"9LWvckeDjHdyraF-\"},\"context\":{\"lastActivityMs\":\"2089\"}},{\"eventTimeMs\":1776222022488,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAESaQA==\"},\"context\":{\"lastActivityMs\":\"2962\"}},{\"eventTimeMs\":1776222022489,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"2962\"}},{\"eventTimeMs\":1776222022489,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAADhAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgFvCgYKBGFHSWYSCREAAAAAAFSaQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAPA/\"},\"context\":{\"lastActivityMs\":\"2963\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"Qf_eabS7OdKLjNgP65eZqAY\",\"clientCounter\":\"16475\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 03:00:23 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-06-16T17:46:19.111557Z","times_seen":270775,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:23.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1776222023643\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: CgtxS1AzVzFEY2czRSjB_vvOBjIoCgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgPw%3D%3D\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260414.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 899390650\r\nX-YouTube-Page-Label: youtube.embeds.web_20260414_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1776222019101\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C250%2C250\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 12751\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12751,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260414.01.00\",\"configInfo\":{\"appInstallData\":\"CMH--84GEJS20BwQ2vfOHBDM-dAcEKa20BwQuOTOHBCJsM4cELCGzxwQwonRHBCfz4ATEJ7QsAUQ1YW4IhCUg9AcEL2KsAUQ3rzOHBCX1YATEPv20BwQ8JnRHBDBj9AcEParsAUQvbauBRCHrM4cEOSVsAUQ8bTQHBDGxs8cEIv3zxwQzN-uBRCmiNEcEMj3zxwQ05_RHBCTmYATEMPegBMQgc3OHBD8ss4cEL2ZsAUQ_o3RHBC8pNAcEK7WzxwQrPXQHBCU_rAFEP7_0BwQmY2xBRD824ATEL-U0RwQ896AExDGjNAcEP_l0BwqUENBTVNOeFUwLVpxLURNZVVFcFVDbkE3NUZiMEdXT1VFaDdYd0N6S2dyQVFEemY4Rnk3Y0cteWEyNUFiSmxRVE9fQUdFWmU2YkJ2UWRIUWM9MAA%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://qfsglobalsecureledger.com/\"}},\"events\":[{\"eventTimeMs\":1776222018936,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018939,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018955,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018956,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018956,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018956,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019143,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019145,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017997,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017786,\"latencyActionBaselined\":{\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017935,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017997,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018010,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017835,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017934,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017849,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222017934,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018381,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018629,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018347,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018704,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018346,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018550,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018347,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018653,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018346,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018541,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019152,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222018915,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019156,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019160,\"latencyActionInfo\":{\"serverTimeMs\":43,\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1776222019208,\"screenCreated\":{\"csn\":\"wp54F0xuyHu83fVv\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"Qf_eabHWOcWVk74Pvom8gAo\"}}}},\"context\":{\"lastActivityMs\":\"26\"}},{\"eventTimeMs\":1776222019209,\"latencyActionInfo\":{\"clientScreenNonce\":\"wp54F0xuyHu83fVv\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"26\"}},{\"eventTimeMs\":1776222019209,\"screenCreated\":{\"csn\":\"mF-QqxL5ittTb-FM\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"wp54F0xuyHu83fVv\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"27\"}},{\"eventTimeMs\":1776222019210,\"visualElementHidden\":{\"csn\":\"wp54F0xuyHu83fVv\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"27\"}},{\"eventTimeMs\":1776222019210,\"latencyActionInfo\":{\"clientScreenNonce\":\"mF-QqxL5ittTb-FM\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"28\"}},{\"eventTimeMs\":1776222019213,\"visualElementAttached\":{\"csn\":\"mF-QqxL5ittTb-FM\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMIlO-w0-7ukwMVzqf0Bx1p5AowygEEjLdR7Q==\"}]},\"context\":{\"lastActivityMs\":\"29\"}},{\"eventTimeMs\":1776222019217,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"34\"}},{\"eventTimeMs\":1776222019218,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"35\"}},{\"eventTimeMs\":1776222019246,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"M-zAl0UQRVIwZJGm\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"63\"}},{\"eventTimeMs\":1776222019248,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"65\"}},{\"eventTimeMs\":1776222019447,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"e_uhP8_XOEnh0clF\",\"clientScreenNonce\":\"wp54F0xuyHu83fVv\"},\"context\":{\"lastActivityMs\":\"264\"}},{\"eventTimeMs\":1776222019448,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"e_uhP8_XOEnh0clF\",\"clientScreenNonce\":\"mF-QqxL5ittTb-FM\"},\"context\":{\"lastActivityMs\":\"265\"}},{\"eventTimeMs\":1776222019659,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"477\"}},{\"eventTimeMs\":1776222020215,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"1032\"}},{\"eventTimeMs\":1776222020216,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"1034\"}},{\"eventTimeMs\":1776222020218,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"1036\"}},{\"eventTimeMs\":1776222020223,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"1040\"}},{\"eventTimeMs\":1776222020628,\"visualElementAttached\":{\"csn\":\"mF-QqxL5ittTb-FM\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1445\"}},{\"eventTimeMs\":1776222020628,\"visualElementShown\":{\"csn\":\"mF-QqxL5ittTb-FM\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1445\"}},{\"eventTimeMs\":1776222020662,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"1480\"}},{\"eventTimeMs\":1776222020792,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"1609\"}},{\"eventTimeMs\":1776222020792,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"1610\"}},{\"eventTimeMs\":1776222020792,\"visualElementAttached\":{\"csn\":\"mF-QqxL5ittTb-FM\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1610\"}},{\"eventTimeMs\":1776222020793,\"visualElementShown\":{\"csn\":\"mF-QqxL5ittTb-FM\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1610\"}},{\"eventTimeMs\":1776222020793,\"visualElementAttached\":{\"csn\":\"mF-QqxL5ittTb-FM\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"1611\"}},{\"eventTimeMs\":1776222020793,\"visualElementShown\":{\"csn\":\"mF-QqxL5ittTb-FM\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"1611\"}},{\"eventTimeMs\":1776222020835,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"1652\"}},{\"eventTimeMs\":1776222021491,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIEw==\"},\"context\":{\"lastActivityMs\":\"2309\"}},{\"eventTimeMs\":1776222021495,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"2312\"}},{\"eventTimeMs\":1776222021623,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"2441\"}},{\"eventTimeMs\":1776222021624,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"2441\"}},{\"eventTimeMs\":1776222021625,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"Kt7iYjxCRRABNw-X\"},\"context\":{\"lastActivityMs\":\"2443\"}},{\"eventTimeMs\":1776222022496,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAGSaQA==\"},\"context\":{\"lastActivityMs\":\"3314\"}},{\"eventTimeMs\":1776222022497,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"3314\"}},{\"eventTimeMs\":1776222022498,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAADhAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgFvCgYKBGFHSWYSCREAAAAAAKieQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAPA/\"},\"context\":{\"lastActivityMs\":\"3315\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"Qf_eabHWOcWVk74Pvom8gAo\",\"clientCounter\":\"14112\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 03:00:23 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-06-16T17:46:19.111557Z","times_seen":270775,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/fonts/Flaticon.woff2","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:17.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/fonts/Flaticon.woff2 HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/asset/fonts/flaticon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:18 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 9112\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9112,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9112, version 1.0","md5":"8efd11f011a4ca21415609cb252f3be7","sha1":"fdad89e462bc4d0527c69746de087abbcd52b0fc","sha256":"7932fd720bef35bfa1ee01bead85ea36dc978f1bc2b80b65106d6367c4bb525a","sha512":"86265d96c6a065efc0a017f10285e21dd58e015bee26cda8e8105861149c26ade0602225bc47cf3b61351250b34cdaa8729b1588dfe4558cb4dbe980d14f46ab","ssdeep":"192:vEuXc8treTr7NPIjM2MZOEqjLwtjziyLBJB6ZM37TprNJOEB0:vEgc8tyTrhPqMQEqjLqj+0JB6ZMLT3FK","tlshash":"e812bfcc5861241ab2085a7f08391e2d82528b7db5da0a0974bbf66c6c8e5b08311bbe","first_seen":"2025-03-20T21:52:11.19411Z","last_seen":"2026-06-05T03:59:04.130009Z","times_seen":53,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.ppNUcIloFls.L.F4.O/am=AAAAAQ/d=0/br=1/rs=AGKMywGMXfaCTT1v7ihDFNZ-2D0-O1_ZiA","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/yLeji6EidI8","date":"2026-04-15T03:00:18.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.ppNUcIloFls.L.F4.O/am=AAAAAQ/d=0/br=1/rs=AGKMywGMXfaCTT1v7ihDFNZ-2D0-O1_ZiA HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/yLeji6EidI8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 42293\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:59:10 GMT\r\nexpires: Wed, 14 Apr 2027 12:59:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 05:11:23 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 50468\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":349372,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (32709)","md5":"889eb0c5cec5a40491c00f804ecf3e67","sha1":"136f105c73f7ab88111c504419551bf5c14b1f88","sha256":"d2f69a9fc01824485b33a1f90be3988fa578d7d2d92b705bf9db10c3853b5792","sha512":"9582dc1080abd3b7cd60f034b0228a62c7baa7eb569a7a86cbc3bfe0d13fbf92373f5df81e8e3693db99c8d42c8c98db3afab26e78841cbb3220d8cdafa6a27e","ssdeep":"6144:QCZcNY2o5P8NhojpnGsQDoAoSCgpe4cyvocH8nOodDOoaX+xbJnc2pTteQW/EHWv:NZcNY2o5P8NhojpnGsQDoAoSCgpe4cy9","tlshash":"fd74c8735622132ce127c765e6e1fe0ab226c913c35637aff442be2c85cf6d2192664d","first_seen":"2026-04-14T14:26:58.138204Z","last_seen":"2026-04-15T17:30:11.976129Z","times_seen":797,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/juUgJwBwgWk","date":"2026-04-15T03:00:19.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.eGkPVIQx75Q.2021.O/am=AAAAAQ/d=1/exm=base,root/ed=1/br=1/rs=AGKMywEB6v9tNZjmQYA9Nk-ZK37ajHYHWg/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/juUgJwBwgWk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ncontent-length: 146487\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 12:48:11 GMT\r\nexpires: Wed, 14 Apr 2027 12:48:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Apr 2026 09:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 51129\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":510435,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2293)","md5":"611c91c3ace3e95b3a11655b04ed2565","sha1":"77c412a32efb79c5cdace95d2906610ed7300aee","sha256":"c864f95bae768c340d86d133f8fda0744087064725eb335fb83b5e5a528ebf31","sha512":"972bff110816c432a5044478cba3e7e95416909081e84a3d35fdd774f9f9058742c54efcf989e8b593ae3d15534bdef933ef3cfb7241f621c7aa946e620d1348","ssdeep":"12288:0unjMVlpC3Cl3zULA33lj03qSBNZM4RM/JCmC8BjCZLkQ5pduIDUnAbxtEtlDxBL:0unjMVlpC3Cl3QLA33lj03qSBNZM4RM3","tlshash":"12b46dd0b292f1b987825cabf87b4063b17f5d52f10444a4f0f95eac14f9e4ca276b29","first_seen":"2026-04-14T14:26:58.112074Z","last_seen":"2026-04-15T17:30:11.977154Z","times_seen":788,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":635,"dns":0,"connect":0,"send":0,"wait":38,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T03:00:20.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:39:53 GMT","end":"Mon, 15 Jun 2026 08:39:52 GMT"},"fingerprint":{"sha1":"84:73:AD:21:D7:99:85:74:5C:48:5A:0D:AC:D6:69:F6:B8:C0:F7:92","sha256":"E0:8F:67:97:65:DF:94:C4:50:AD:BB:CB:88:9B:3D:53:89:9B:60:FF:F3:D8:C7:40:94:0F:14:65:BC:FB:C3:B8"}}},"request":{"raw":"GET /js/th/A-k3vO2Sb5PGdCICdXRAyGvbVJuy_0ufWnZkNwOXIAg.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 23855\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Apr 2026 05:15:38 GMT\r\nexpires: Thu, 08 Apr 2027 05:15:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Apr 2026 17:30:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 596682\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62371,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61131)","md5":"7da5dd76ac1f377d2043e86a05e13aa5","sha1":"02b2275909decb06d21cd2276019a417e85a678c","sha256":"03e937bced926f93c6742202757440c86bdb549bb2ff4b9f5a76643703972008","sha512":"215954bda9fc2131ff1b6f0c4951a7036a066a647ee6c19e98391f6abdcc4bc98cdebe62e5efda8fe93464a5e3fcdd1253f2d509581acdbc6b9b94321f741171","ssdeep":"1536:j+Aqc0dLz6tDTn1ZGpdkhGX5G4WpM9LMlXdDqSIbS:Q1Lz6tHn1ZMdkhGX5G42zBq9S","tlshash":"df5327ce72d6733559e271e2001b910d93be393a9ca8196fbd15e3f51e7098b4027f2a","first_seen":"2026-04-09T14:30:38.454475Z","last_seen":"2026-04-17T06:59:24.132827Z","times_seen":1371,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":118,"dns":1,"connect":38,"send":0,"wait":9,"receive":7,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/?size=96\u0026id=3EFzPFftonWA\u0026format=png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 10:28:54 GMT","end":"Mon, 15 Jun 2026 10:28:53 GMT"},"fingerprint":{"sha1":"FB:64:A2:47:3E:78:7C:2B:08:A4:67:CE:63:64:D8:05:DB:13:E1:97","sha256":"C1:67:9B:EC:6A:3F:76:AE:75:5D:0E:0F:46:34:13:71:3C:89:7C:17:5F:88:7D:0A:92:61:16:3F:C9:67:77:54"}}},"request":{"raw":"GET /?size=96\u0026id=3EFzPFftonWA\u0026format=png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 03:00:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1777\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 3EFzPFftonWA\r\nicon-size: 96\r\nicon-format: png\r\nlast-modified: Mon, 13 Apr 2026 06:16:08\r\nversion: 0.0.29\r\nfrom-mongo-cache: true\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: k7s4UTYNoojeKxrGBWHVJfObFYaSaoBcaSnQKzUrmPVL7l+G5f7r8LOui0MJPvj7hg\r\nx-77-nzt-ray: e2f75420f017560440ffde69ec7aef2a\r\nx-77-cache: HIT\r\nx-77-age: 152531\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"f52b621545ab1b3440ed658076eebb53","sha1":"9822329dc610443ea8cf5f0e9601777d15760cfe","sha256":"536ab863fd6b26b66d51f98ad35a6f72e51ad9ce1065f77e1e9fba91b2413606","sha512":"6314f4fec9603cb8b09b522c8a24cfdde45a39be921e288d15aea3046c791a168bb7fe7fb1adc90a48e94f1d271fceb38cfb2994ae3e45eca773dcec59f8fd6c","ssdeep":"","tlshash":"ec31e7a58a46c89dae880604ed6fba5e6cc642892a38b014cff1d710d812dbe8093f80","first_seen":"2025-08-11T22:54:49.008043Z","last_seen":"2026-04-15T03:01:03.453627Z","times_seen":8,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/boxicons.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/boxicons.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:16 GMT\r\nContent-Type: text/css\r\nContent-Length: 61797\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61797,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (61797), with no line terminators","md5":"3e7e5382c0fdf79fdd867a3c46863167","sha1":"8fbff3e3c8b32927a06f3f00d21893ec8b4bb036","sha256":"71ae2eced71ae5cd03dee6b5613f8402299a559780cf864cdf9ff08f6c05a7ba","sha512":"fcb1fdeb622cd7f37a71e63a9b6935341d3c2b9ffeec83adaa639117d4f7b1b9201314d2491524119d0cbea614534911c132b8b324f455477e461e16c6c5955e","ssdeep":"1536:OL9ULu1kcVaxgG8wP4NM9oUbIpBuK+gZo/Y+H4oyIKadSB/8XwL8:u58W8","tlshash":"12533ef5e59944c83732e447c784f74c20aaf931ca461d52f26f941e6ec1a690bc6fb8","first_seen":"2025-08-11T22:38:38.384952Z","last_seen":"2026-04-15T03:01:03.454194Z","times_seen":7,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":196,"dns":1,"connect":103,"send":0,"wait":205,"receive":113,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/www.japantimes.co.jp/uploads/imported_images/uploads/2021/02/np_file_65624.html","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /www.japantimes.co.jp/uploads/imported_images/uploads/2021/02/np_file_65624.html HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 315\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-16T13:06:29.977321Z","times_seen":145926,"resource_available":true,"data":null}},"time_used":1133,"timings":{"blocked":1015,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/owl.carousel.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/owl.carousel.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 44342\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44342,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-06-16T17:41:51.47715Z","times_seen":60570,"resource_available":true,"data":null}},"time_used":908,"timings":{"blocked":697,"dns":0,"connect":0,"send":0,"wait":109,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/nice-select.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/nice-select.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/css\r\nContent-Length: 3117\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3117,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3117), with no line terminators","md5":"88503b01944c14f9dbbb6bc9218840cd","sha1":"ea7a5306a4bfb6509d07884a85d5595cd1d740c2","sha256":"98b04886606f8a04c558f482b6f76ee9aefa4fedd7cadf8ae7bd61ba97852e0e","sha512":"0abb823fe4c3df25f396fbe28c44fcc15e56c71121e47f0fe1c9b3d1115b28ae85959dac625dc012c2a52cf1db9e25ca4ab0dd15ec216e604ae6c91b76c0126d","ssdeep":"","tlshash":"5f511235d551216ff07fca3bbac53b68243dd20378324a9ef244e907834e56998da70b","first_seen":"2023-04-20T04:25:49Z","last_seen":"2026-06-15T12:06:37.720196Z","times_seen":305,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":300,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/img/contact-banner.jpg","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/img/contact-banner.jpg HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1744445\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1744445,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3808x2694, components 3","md5":"1ba5fab066711dcd389e7d7a7cf7aabf","sha1":"4a3de09a90cb762f77780f938d10c936824970da","sha256":"acaf8495c4f524f4372c3357e95529c306a699080e6628816d6751fa6c908dd2","sha512":"ff14bd17cff8fd33a06793c8891090323b12f29a4933066e3ebba2b0011ec14f9864ddac6815a7a5616ea9742a1b2cd97e705dc248624bfb7ca0af4e25f939ee","ssdeep":"24576:qqHU3j7uzs5eqvQHOiffrTgbNU00pV6pvdo/Gaj/Rle:K3jus5euQHlTTg5+7my/XbTe","tlshash":"c625231ddf2dafa6e4cc53724605f37f270287ca97ef382e44a24d342554e3aa276126","first_seen":"2025-08-11T22:54:48.940502Z","last_seen":"2026-04-15T03:01:03.455757Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1733,"timings":{"blocked":1006,"dns":0,"connect":0,"send":0,"wait":111,"receive":616,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/js/jquery.magnific-popup.min.js","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 20216\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-16T17:39:48.764661Z","times_seen":67345,"resource_available":true,"data":null}},"time_used":899,"timings":{"blocked":795,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/sFX1d7Si3mA","date":"2026-04-15T03:00:18.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /s/player/ee507a59/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/sFX1d7Si3mA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 444430\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Apr 2026 07:44:11 GMT\r\nexpires: Tue, 13 Apr 2027 07:44:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 13 Apr 2026 04:24:51 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 155767\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1486235,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (848)","md5":"a3f45afee6e0dc137cbfe33a74403f17","sha1":"06e9a62a5ca6154d4bf626f69580681b8f219d59","sha256":"cfa795e622f49f92d0a65a88d1851ee5db708b70f2a757154cc4c852e999d295","sha512":"337f572ff593bf42ef43e2a20ec657cdd82b57cf0273a92ca0574e24d54c70850d9f4bcce84ddd38cb6089f71b7e840ab94c60439635a78b2cbdfa9d69aae66c","ssdeep":"12288:NWJ+YoIPR+umUIWbouNnsuydXdJAXFMhxfBbqdH+PcFK59iMm:No+pIPUKIWbouNnyWMhxfJqdePN5m","tlshash":"14254cd932d2b8a243a3f0a7043f0105f17e89197548c99cfae9dae92c7194751bbf78","first_seen":"2026-04-13T11:27:09.96925Z","last_seen":"2026-04-16T01:05:21.413432Z","times_seen":1082,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-15","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/ee507a59/player_embed_es6.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en-us.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:19.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 01:40:44 GMT","end":"Thu, 28 May 2026 02:40:40 GMT"},"fingerprint":{"sha1":"F0:7F:B1:BC:BE:73:55:AD:38:9F:92:6F:D6:4E:DB:1C:05:30:A3:80","sha256":"32:CE:74:34:FD:C2:62:30:95:38:1B:13:E0:4F:A0:DC:0F:1D:D8:44:4D:60:AF:C5:1C:94:AD:15:57:F1:6F:2F"}}},"request":{"raw":"GET /flags/svg/en-us.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 03:00:18 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Sat, 13 Mar 2027 06:06:32 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEQQKCLJcbL0Or0VRZvpZrt4L9oilyDrVR%2FdoWXEAToyRpK4EQ3YmIWUZ76gkTHEigedZSvjeCxGMUN1z2pwt88M%2BkuXAN%2F7yUKFiOcO9j7n2ksd09l7vuB%2FYaVEI538f2VrDQ%3D%3D\"}]}\r\nage: 2840026\r\ncf-cache-status: HIT\r\netag: W/\"639d0089-17c0\"\r\ncontent-encoding: br\r\ncf-ray: 9ec7b302bfd4b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6080,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd1db9b9606bef828892eae52f30a642","sha1":"2fc22e2636c912d135e456c841656e93ecbfa394","sha256":"1c64c14fa68916dba409ddf0e38ca5dc8bd262b959a5814ecb6667096b35efa5","sha512":"8f54327e0e9a3a85d935e89817d86426f59d7c15f6723ffff7047cc72a407c41d2046bd9f6c58648aa57c3aa870947008fe47de86a219126dfd0f53a5ac9d2d0","ssdeep":"24:t414AhNMMJtMMaKKKKK+51KKKK+kG/GBlIQs9rBvyIrEnxn9rVIvoLMd3+FxUxvH:C4AhSkmC0DdavymqV+","tlshash":"7ac125fab7b0a0c57a4b9a119733db1fb95b245c1575d706f002f69d82aa232c44fe38","first_seen":"2023-05-07T22:36:46Z","last_seen":"2026-06-16T15:46:06.809964Z","times_seen":4742,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DKnwhA04.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:20.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:33:12 GMT","end":"Wed, 24 Jun 2026 10:33:11 GMT"},"fingerprint":{"sha1":"D0:0A:A6:39:E7:85:DF:64:B0:13:66:E3:06:E8:BF:2D:3C:AE:EA:7A","sha256":"70:D5:91:24:1D:F0:F9:7F:57:55:99:71:1F:A5:15:C2:B9:C7:21:65:6B:42:A2:34:4A:6D:A7:53:70:BE:C0:7B"}}},"request":{"raw":"GET /assets/main-DKnwhA04.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://qfsglobalsecureledger.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 03:00:20 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69c4f8c4-453c8\"\r\nexpires: Fri, 26 Mar 2027 09:19:15 GMT\r\nlast-modified: Thu, 26 Mar 2026 09:13:40 GMT\r\nx-77-nzt: k6mYd6Y9g2ynuzVPs36U8XXGGBxJcB1HrHq8ZPvvQM2ICp1DtK3G6Nh8zRZeyldiqzArgMI\r\nx-77-nzt-ray: fdb54123223ecef944ffde691ee3e01a\r\nx-77-cache: HIT\r\nx-77-age: 1705251\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283592,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"04d0691ef560adb488e4b6f4644c5265","sha1":"703691dce49d4244b1c58dc10ab8a285e19b2942","sha256":"b1f432b4a9c8585760646aeb5a5e9686154ca139027818dd7ad9744e290ac647","sha512":"af80daf0b9be2e06be01828c6be6eda731cd8f1ab5f767eec9359f247367758117387dd844c0e725415cde1ef33f7e62cd579a1d9cb6d0fdd569bebf417073cc","ssdeep":"6144:QsJU8SN+jtxVR/ZgQu2W/rLEPhCWVcq9kNE:QwU8SNr2W/rLgjV3uE","tlshash":"b0544ad47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-03-26T09:27:08.846862Z","last_seen":"2026-04-23T05:43:00.852938Z","times_seen":1023,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qfsglobalsecureledger.com/asset/css/bootstrap.min.css","fqdn":"qfsglobalsecureledger.com","domain":"qfsglobalsecureledger.com","tld":"com"},"ip":{"addr":"198.27.109.52","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qfsglobalsecureledger.com/","date":"2026-04-15T03:00:16.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.excel-holdings.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 09:00:40 GMT","end":"Wed, 10 Jun 2026 09:00:39 GMT"},"fingerprint":{"sha1":"F7:43:1D:C8:2C:DF:F6:F1:3B:EF:7B:74:C6:0D:84:BB:30:C1:23:55","sha256":"61:43:04:FD:AD:71:C4:B1:BA:F3:43:61:80:29:DA:AD:91:9A:FC:CA:F5:37:3B:B2:07:BF:53:A3:4A:63:24:17"}}},"request":{"raw":"GET /asset/css/bootstrap.min.css HTTP/1.1\r\nHost: qfsglobalsecureledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qfsglobalsecureledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 Apr 2026 03:00:16 GMT\r\nContent-Type: text/css\r\nContent-Length: 153433\r\nConnection: keep-alive\r\nLast-Modified: Sat, 20 Sep 2025 03:31:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153433,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"2c8b1bbe4038a925eb7178de2d8d1c3d","sha1":"04c099de11391573409547365e258455fb3ed77c","sha256":"cc7cec5ea029d7698b78a64328030938e52ab4acee58a8e1a4452ff706732550","sha512":"6cc6defa50b8ed7a90ea35cdfe833d49903a9867107bfac5c5b5eedff726d7ddfe35a40ef3be835163f42126bbb3065d52db244af2a120c846fa9b64434bcfe3","ssdeep":"1536:4t6QF83RipVVsEBpy0cuJcL22TWr5SNVUpz600I4fM:4t6QYNVUpz600I4fM","tlshash":"0ee393d7f581241dd4a7c219a4d1bffd052f5686e3025eabb0277bb88b4a2c70963e4c","first_seen":"2025-05-02T05:42:41.618882Z","last_seen":"2026-06-12T05:19:19.850897Z","times_seen":37,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":194,"dns":0,"connect":100,"send":0,"wait":198,"receive":211,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"qfsglobalsecureledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}