{"report_id":"ef8f03d4-24a5-42cd-80f7-82acadda1321","version":0,"status":"done","tags":[],"date":"2026-09-20T19:00:25Z","url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":0,"asn":153568,"as":"NEW DHAKA HARDWARE","country":"Bangladesh","country_code":"BD"},"final":{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"title":"Courexpress","dom":{"size":41931,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26410)","md5":"a191bcefd50a9a48bb5479ca8ac1a009","sha1":"35c7db2811b0585b9f2d9706346d02192675da4d","sha256":"0022731ee927a419493f73ce1da7326be8434088a4fa3f0a33426facfa15cda3","sha512":"865fdefedc400cf87bfc476b606e4413dfe0ce9498a5fd2b327989d65548a1221ed3280f1f41fd27806e156c7a163537f099604335af4ea7997ab2b73fa84ce2","ssdeep":"768:0yJi2qbCmmWqo8FTbfsTO+hDGqRt8UtN2v3k/SR+D/5km58:FJzqbCmmWqo8FTbfsTO+hDZRt8UtAk/C","tlshash":"5113a7276784452c9c53d278f399b54ea32af688ef6259eef7c23410c2d93ff088a455","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"2026-09-15T08:48:22.617048Z","last_seen":"2026-09-20T19:00:51.766107Z","times_seen":34,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":0,"asn":153568,"as":"NEW DHAKA HARDWARE","country":"Bangladesh","country_code":"BD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T19:00:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-09-14T09:21:30.343635Z","alert_count":0,"request_count":2,"received_data":130181,"sent_data":1069,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-09-18T08:24:50.025608Z","alert_count":0,"request_count":2,"received_data":19574,"sent_data":1018,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-09-14T12:02:59.814577Z","alert_count":0,"request_count":2,"received_data":1197,"sent_data":1220,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.186.29.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-09-19T00:44:36.498741Z","alert_count":0,"request_count":1,"received_data":1574,"sent_data":531,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.youtube.com","ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-09-14T09:02:15.710376Z","alert_count":0,"request_count":9,"received_data":3762455,"sent_data":11105,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":23859,"sent_data":633,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.178.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-09-14T10:38:28.18322Z","alert_count":0,"request_count":1,"received_data":73243,"sent_data":660,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-09-19T00:44:37.773955Z","alert_count":0,"request_count":1,"received_data":18557,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"api.coingecko.com","ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-09-17T08:27:19.005924Z","alert_count":0,"request_count":1,"received_data":5035,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-09-19T00:44:38.330945Z","alert_count":0,"request_count":1,"received_data":7745,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":8,"received_data":300556,"sent_data":4551,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widgets.cryptocompare.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":1460618,"first_seen":"2017-01-31T09:13:32Z","last_seen":"2026-09-20T18:57:06.172456Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":524,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cp.vexotra.com","ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-09-17","domain_rank":0,"first_seen":"2026-09-20T18:57:05.372318Z","last_seen":"2026-09-20T18:57:05.372318Z","alert_count":88,"request_count":44,"received_data":2999114,"sent_data":53919,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"widgets.coingecko.com","ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":3132971,"first_seen":"2018-07-05T11:10:42Z","last_seen":"2026-09-16T08:43:53.934289Z","alert_count":0,"request_count":1,"received_data":231859,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-09-19T00:44:36.838476Z","alert_count":0,"request_count":4,"received_data":378710,"sent_data":1865,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.120.204.223","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-09-19T05:07:09.834381Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":629,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-13T23:34:00.595824Z","alert_count":0,"request_count":1,"received_data":1223,"sent_data":510,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coin-images.coingecko.com","ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":550283,"first_seen":"2024-05-30T15:11:00Z","last_seen":"2026-09-16T08:42:06.078186Z","alert_count":0,"request_count":5,"received_data":74713,"sent_data":2929,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-13T23:01:27.934223Z","alert_count":0,"request_count":1,"received_data":64975,"sent_data":497,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e059be9ebde7152bb618bb5325213d3","sha1":"aea3403583e47dc172ee57da23ee6223a43f676c","sha256":"d6c96bc77f788021134ba4a4a1576e8dec71310bcf7d07fc498f09007dab59b1","sha512":"b717bcc88ce959a014b37af5a2bd7824c3623e9330df03043b11c09add026bad29e399bb1a25765d081cc1c7829e3e7c33a0b3b068fa9052edd0bdbb41d0e191","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T10:20:22Z","last_seen":"2026-09-20T21:20:37.475188Z","times_seen":8011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"205ef13aeaebd5c21fcc961844d76a97","sha1":"3fbbcbfeb7cc7b50cd97a84bf197cd1207263ee7","sha256":"2e57cded62a5a32cb4601ff68cf39773f0e5e4313dc3513401a787ff11384678","sha512":"5a4d2df5604808f222ca1eaa9cf596ffd1d270dd4c5d01c1783998a598ee0dc1f861861e2e0cb2a8b58f027588ee5a853e2b7385b892425325c4e35f0834d614","ssdeep":"","tlshash":"c7100000000000000000c000000000000000c000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T12:20:42Z","last_seen":"2026-09-20T21:20:37.519655Z","times_seen":2336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c692562238d8c12c32434c50b96d56ae","sha1":"6f11328affdaa6105a09a80d49b296b42bede60f","sha256":"20377cec9f51f6bf5ba1fa64649f3b1614e4eee833fd0fc5893f24f6e0accbaf","sha512":"7178ebf746b660089f7a8c8195949d3a607a69965d1da069762145bd39e4a2f5c4f1ae12b966430e5db1520055127ef65d316c98d816e910be940c2014c95802","ssdeep":"","tlshash":"c71000000c0000000030000000000000000000000000000000000000000c0000000000","size":2,"data":"","first_seen":"2023-03-08T15:11:25Z","last_seen":"2026-09-20T21:06:28.568478Z","times_seen":3546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-09-20T20:20:28.041669Z","times_seen":276810,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"74f3c9d5ffe9f7ef54158de6df15f748","sha1":"f2772f84acb6341b287ac9386ce04efa59381e39","sha256":"7b050e81f97f31220ffefecdb2cfce9d6c88958194810c034bd28fd68d4d1808","sha512":"2325ff0e43e0b1e6453253ac9b972720dd76583b464d16ef8eac41a3c80f19e3b8212bc4dfc43040d9197f12e324ce7ce5e294a390e4ea48d6e8251f924c6241","ssdeep":"","tlshash":"d4f0414a3280d563fba1f90215ffc00888e3861c5404a00d0074f1d58ef84efb09ef05","size":570,"data":"","first_seen":"2026-09-16T18:31:33.298858Z","last_seen":"2026-09-20T21:20:37.486316Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d36a44f37f875a535eb8ffaaeaf3ba34","sha1":"2ee474a004a3703481b6aed6bd022205884a72ac","sha256":"f6782a2413739942ae703472e0fa4bfc5d19b1d3bd9b1335f3a480c97814a8b8","sha512":"d354adf5174fae987a962e8bc33a6d63f96a9baa747d4c665dd4f5340e92b2ab675d05d75507b050731871dd0f3c3e8a3da6b747f2b09fe7d20bee1d9062a597","ssdeep":"","tlshash":"55b0120c5034b4bc121e101c9f833981903d40e841202d18f2c405160f41406030c141","size":94,"data":"","first_seen":"2024-06-29T23:19:03Z","last_seen":"2026-09-20T19:00:51.873476Z","times_seen":909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56b7c7a36288d96be15eae5dcb551d46","sha1":"2d502358bb8be7db1a912f3b6f1cd86e2067ad50","sha256":"ad28423f178ccbcd02040b3b405d367c4b9a3f2763cee41f6dd8cc89e1a5f7fe","sha512":"54c67e6554396fe8b88ad93aba618616d7623e87835586e8f64c4f73e24eacc6b9490346d6e6f0bdcaa49f6f88fbfeeba9c52d41fe106055dcf10cf0616b06b9","ssdeep":"","tlshash":"90f01c4ffdea62d522777a1d0fab5810a929684fb84e9d4c3c9e9be01f2b4488052758","size":577,"data":"","first_seen":"2026-06-07T12:51:34.819929Z","last_seen":"2026-09-20T19:00:51.874124Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b61d5116e5adfce350ed55310b1f837","sha1":"b3bcd30e2b4350e9e418560daea8ca778a93de07","sha256":"b598c6f496b28133f747a107516d86aad709662b2872d7417aa8ee23b29e6bd7","sha512":"dec1552dd2e3d1bb301845fff6f6b7db8469e7cfbb5248553fb626176517aa8d95de9d427c1de87389392f1b267b0fe5ae9d53a3f0c73a31559fb109c6fac484","ssdeep":"","tlshash":"14f0221335a21182b4af30149fa7238005930217c0d6ca033c2f29902f132b37883aaa","size":490,"data":"","first_seen":"2026-06-07T12:51:34.822228Z","last_seen":"2026-09-20T19:00:51.874729Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1512ae7f258f11235cdbc2677c1d57d5","sha1":"1dbb6a98059f2f96d11a4fc0ffed5deb6a20ad4d","sha256":"0fb6c45077f7088035f955ef633d91a76dbbfafb596db79ae8d8ccf700ad03a2","sha512":"42a985a23cdd178ec153315ba4c13292b296272bc633a0b23e7927cbd5049cd872505721a5abc1f9e24c71958d791b0314c69e2bfdb6b9128f8c361f06f04d8f","ssdeep":"","tlshash":"5ee04f0bd5ae5cc351333c0d420f9421246235a7d4c6d908be0fe3f44fb40548a03a48","size":402,"data":"","first_seen":"2026-06-07T12:51:34.82406Z","last_seen":"2026-09-20T19:00:51.875312Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfe37808580051874914a41ade1a1ae1","sha1":"a9969c6d2bd2e252d9fb690a4c0fbf90c36336a0","sha256":"814075d9be43efaa2d438ef946b587f5a9400f1aa8258d60c7e54c63f583c18e","sha512":"d334cf7f636be3e078f6bb37a7baae8081a61389b280c23e38553cc269ba9bf8ba57b8fef8d3fb6a54bd8c11c6b357297ca03e48e05f569ef9f45215c44e67ee","ssdeep":"","tlshash":"1af08b599f9eb730d6a9404c893be5a872ed11ae1a1acc42cca9cd1c44b0ece4a4f959","size":572,"data":"","first_seen":"2026-06-07T12:51:34.825733Z","last_seen":"2026-09-20T19:00:51.875906Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdb9212ce10a6aad7a2e54e8bb98a51d","sha1":"85c1e953534788513de70d6a4117e11a5a756ed6","sha256":"b2e123c9723c044c310e03448e953b7449b4472e348d22d5547f151c01259ae8","sha512":"51bb0346c5a0d8d026bd6512f62e4d4b0b176d70f31cf3438af050a576f7ff64bfccfeb176403e00576747e77f9307d07e94a943701bf85e692b7a239fbcda44","ssdeep":"","tlshash":"f001f9475413d17fedbf5124cd9de7029b963d211a1e1765f4dd14488ba013b61d88f0","size":657,"data":"","first_seen":"2026-06-07T12:51:34.827712Z","last_seen":"2026-09-20T19:00:51.876492Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ef4d69fd6f8997d3d40706f8585d79e","sha1":"dc28d61562ef42abd77b52e0a46eaf338a93cfed","sha256":"97b40ffa1cc3ff9c3dcdfb5fa5299d08dd63c3f0aae23b53e379386d264d843a","sha512":"bf489b1cce1715a75459d639c5ef98ba99cc62c57a4c4f59df6d0cdd0357bdfdc6eda6542e4c52b7e7ba2b5b062d0e21ce5837092356933b50f930932bed9643","ssdeep":"","tlshash":"d4112b0b9852607389ab513d8ebed2018b97b9130e1d7ae479cc11489f6c32e73f59f0","size":1030,"data":"","first_seen":"2026-06-07T12:51:34.831188Z","last_seen":"2026-09-20T19:00:51.87708Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"acfd14e99c2e28247a04e14dc70e369d","sha1":"f2fe4a1fd552b352af79c48e5b3ea0cc689979d8","sha256":"0f376382909b690493259c8afcb2dac9cbbeefd1a05326dfba5cdc085bcc8bf3","sha512":"87d0c026b644dc9ae6116e1868cfd3a8666812e1c79e354cd7acc5dd59271bc51c20783520e1bef44f4e75058fe41a545fa2a369238e6143e3abd9fdc518b19a","ssdeep":"","tlshash":"91610c3cb293413386be95293bc32704b43862037900cc1a7ddd8b494faec5ce45aaed","size":3360,"data":"","first_seen":"2026-06-07T12:51:34.833075Z","last_seen":"2026-09-20T19:00:51.877669Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d160f9db3b3b2d861ce8b816d97af0f0","sha1":"5cba2de9c6c5d89281e3a0ce4c342659c08683b1","sha256":"79b9a5beef528d879c4bde965a06b499d08c9df753349a52207cd41e7c334bff","sha512":"c4705c3c9512d725cd1300a2a6d9fc7561d48f502a6e0ef0a48d5f9af7643b0cd45fdac2e032bd88d974ade6a57423167c70b3c8b313ea4622ac59cb1089db31","ssdeep":"","tlshash":"d2e0f13d3c348090079240b9c1f7e5383d0630700044c95794d6cc392cf0fcebd01994","size":416,"data":"","first_seen":"2026-09-20T18:57:13.708364Z","last_seen":"2026-09-20T19:00:51.878245Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6408b80498678d803954224a00fde532","sha1":"6743919b6ab3295194cd21be7e220a6efa813c58","sha256":"c651a4728de19a9c234ef7abe12233f303775f2777de8ef4d53ad7e43c680632","sha512":"14a6ba762208386ac386d8ad15d96003e76e06770b450f302f9e55f9ae86e99359c5743aee74b468a5da7fd265db80c8b81369e163fb404f517537ddc2b49dfb","ssdeep":"","tlshash":"d9e020e50c1560be679b537034e67cd51541744f511d97871477f4e006ab83fe184303","size":347,"data":"","first_seen":"2026-09-16T18:31:33.432959Z","last_seen":"2026-09-20T21:20:37.530973Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cece9252c645849e10f904584448b4f9","sha1":"1987593a12f0b39aa86bd0ca54a782fe38dc805f","sha256":"112cd023d55f4e4d5d977814990e5c34d468a22242efdb23d6f17699d4f88c48","sha512":"017c45809ce992c637a4c93468852bc2e4b5a07f2f6d889f3d64300cd033d158f17125be67b2e785638617357d8a22376eaf9a2f88d766f0a4e71dd4eea0e4e0","ssdeep":"","tlshash":"c6c080d57c5dd478835444a640327374c3f75981e04551564354d5de797024b5735551","size":169,"data":"","first_seen":"2026-09-16T18:31:33.374573Z","last_seen":"2026-09-20T21:20:37.458226Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bae3f90cb000352645e35fad60da411c","sha1":"00023f94c170125b979cb1914925d06ab1abfbce","sha256":"1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12","sha512":"d83d07979674822b4c966ddcb3bd4feb84830834e1f9fb255774ae237056cc357599e3aab9c6f47242aada2148a65c9ea11c859b1e8f550004535cc363fa02db","ssdeep":"","tlshash":"03800000203008388088000f3032cb8afaa0a22ae2322800c8a88c2cb0e8f80ba28838","size":35,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-20T20:20:28.145181Z","times_seen":192921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BPT5w8s3.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3548e3eff8e1868b716127efa99cb827","sha1":"b7851100835c8503db0855767eed7fd9b6ea0256","sha256":"5d183c1962f6085d86e7f85b799c50f3000f0444856d623063f0b68ca6608a7d","sha512":"00ec239fba1b3c30dbaa2e2f26d72357fc55fba2ad6e6f55a168374519d8a1fe4de774813df55cc14b8174666851c97d68074068913006eb5bc505e0fc324b98","ssdeep":"384:0NpFT88tMPdBgaw5O+mvRan7/qKsDoKEwA3Q+crsbUzgfTtQfQIeIU:0NpFX+dBgaw5O+aanrmoKRA3Q+cwbUwL","tlshash":"f972e8741210783f712f6c492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","size":16028,"data":"","first_seen":"2026-09-15T08:49:00.602794Z","last_seen":"2026-09-20T20:57:36.067068Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c943d4422dad6300bbaf689c2211180f","sha1":"4cf78792b3a9dddc6f2ee8219bbfdd213194f144","sha256":"d8d3d9a390c75f612142118d3281d85b95cb50e84c2f6d9438daa83efa8e2437","sha512":"c5516ee60fdc9e900036dec072c7c2de8d01dcfce22fc901048697428c43604ea8dd8d907abda960ce8aae5201ec7f649300af511c8bcccac469a9541f0d9d4f","ssdeep":"3072:/uPfvYNJshGWDSBttCWINmVZrnPodE5rUzpI4Oz:XYBctCo2c4Oz","tlshash":"bc34198eb6c0f19947b693e9605f394ba77d28fc68884380e972f4e5587e05c6132f6c","size":230974,"data":"","first_seen":"2026-07-05T23:38:03.171209Z","last_seen":"2026-09-20T19:00:51.771785Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-09-20T20:20:28.025196Z","times_seen":304893,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-20T20:20:28.025701Z","times_seen":268377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"12347d552552b7eb8f1aaf47a5774b81","sha1":"4701684cb61e83493e14555659e2cd07ae9aba3b","sha256":"63b85d3cc0ccb498e52cf8dc76db5119713a85031ef4a8e99edd01e403cb08f4","sha512":"a0b95f6914bf92922a13db3f81f5612e2a360e0b3bb0f6ffabbe41623a044d662e27a216d788399cad99c8ec18c5f98f481e602d672de5b3b97d5da8ec930e4c","ssdeep":"","tlshash":"6b41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2083,"data":"","first_seen":"2026-05-25T17:49:28.102585Z","last_seen":"2026-09-20T20:20:28.026211Z","times_seen":26492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d399f4f41f2b4e44a4b0baecf49f7b88","sha1":"c3add459007d30946794d4ee994514f4992889ce","sha256":"c28fc32aca15748dd3b254ae9ebf23ec176737cf4fe8f57c925be8154877a34b","sha512":"f86266968c677b493de19b27d2c7b10470badf6e27d6f6de5b3c8f2beddffc2830b0f8bcd0bc41a842bf61ecc4da45a038e275e3ef9d4af6ebe919c9bb5a8da3","ssdeep":"768:AVbI0hGD4fb6IgHwUPDi7QGKbvqGSJrSzi4YMkVPmqcA/ZYcv0MZLnLGgIuDhR+J:xJqUfChdMkMCYXMZbLGRuharblD","tlshash":"778351240868a872c4939547deb9ff3e9cf416790bc9966ebcbb835c01ec6610e9f413","size":86878,"data":"","first_seen":"2026-09-20T19:00:51.884048Z","last_seen":"2026-09-20T19:00:51.884048Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-09-20T20:20:28.028153Z","times_seen":120090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8501e99db1c76b62dea75ad32747a129","sha1":"791537ba64bbd81ed1644b015c4830d897182fb8","sha256":"25289f89e8785a11e468135cfa545b64462e90a61e62ee0bf9fe2dce0898016a","sha512":"d34b3b6f94043e080daf7804d7305efc1bade1433a80d4c6c547ab1325aceda8235ceea8bd99062a7737401ff5d767d46e4d24a972bfa88e9c6b197947041f77","ssdeep":"","tlshash":"7b1135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1032,"data":"","first_seen":"2026-05-25T17:49:28.106733Z","last_seen":"2026-09-20T20:20:28.028597Z","times_seen":26441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-20T20:20:28.029177Z","times_seen":266546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0236000be529a9584a7ac61acf7e04e","sha1":"dcb2ed583d660ab076983e7e5b61b68f51746a43","sha256":"1c4d95173afc59d10a0729a2ae6ea5a1c17bdf1995fca0882b794190827ef7d0","sha512":"88b5b7f22f04f3c75f04b1cd5f9fecf98ce07c96e5f3582fea1195fe03eb80d67c7879fce3e81af62470b7c63582398e764a1d6a15a014c0a32d6ef9c7354a76","ssdeep":"","tlshash":"d901245c06047dace805499cc792bb615fac9237be013125f82f460dbae3aeb8931957","size":741,"data":"","first_seen":"2026-09-17T20:12:57.204931Z","last_seen":"2026-09-20T21:20:37.442573Z","times_seen":453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3acdba4dd02b9872bcdf37d947e577c0","sha1":"21ab3b0832fb94f03d4f4bdd8a6b4d8adc66510f","sha256":"0fb6d9a81ee50efdc4c3cbb52aea0cb06e677236b7de7402717a25690b48cfe4","sha512":"6c2aee3cd08f11d6c919b38b49c2d9fff5cb7171cd3b9e721d116fe8744eae848f60a32de4c857456a8b52034209b766f47b7822028f131eecab0237a4253af8","ssdeep":"192:yzEjQfb/44TmOavb+Nvyv8kYl90sxVjoObVWpO7sTM73gcAKc3Udq6bRXnLNy9nf:+OQfbwKavBv5Y4sxVMOUE7sTMDgcA3XL","tlshash":"f022c80fa38679ecd7d15598b7a36b037cf4821b63082a1d88cba0542cddf19429f9ed","size":10434,"data":"","first_seen":"2026-07-30T00:50:25.229944Z","last_seen":"2026-09-20T20:20:28.030376Z","times_seen":8367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0f293f8f12966ccbecbeaad594fb905","sha1":"828cf72176850b934db021074bf4d3333ba084ed","sha256":"0a51be7d003921f1bc472d3344cab360920b27327106ea7f95d52c0bf7b60f4c","sha512":"5098580ec026ae4cbe083195925a8fcbb5452cd47e659158c6bb21b126fcd8d1dcd71fc2f1d23d007b172881a7200f77bd303c9cb1d805064595e2018c8cf2b1","ssdeep":"","tlshash":"06b02b8bc233141a7c52a854bc0a04603e00d260091806b960a09114718b131640f3e2","size":119,"data":"","first_seen":"2026-09-18T15:45:00.861526Z","last_seen":"2026-09-20T21:20:37.443771Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-20T20:20:28.031552Z","times_seen":263213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"186cf0a4b1d52a74803b87e1060ec73c","sha1":"2e4bdb557398f4ba5a3827c3282eceb7b5fc204f","sha256":"abf1e3b303168ca5f9239a7df1c88163a79f8d08f1e0f4b053f7c0c20bb1c52d","sha512":"73b947c6ee1c71c97da80453c73adc6e1119b0f1594e6405162ae36e0d13f866ff0c53741a88c089e09d9ef2be5e9552d50859866afd8c5968e4663563bcfc3a","ssdeep":"768:46S3/Gqexqdth6ba9mYXiakHt3xgz64KWkwK6Azfukwy8LShP4o1h1pgjt5c:tqex8r9mYZdWHHw4Tu3y8m4ghl","tlshash":"fb03f19af99ec8db09005f22881e9aaf3eec8f779464ade73fd0658a257dd01650c184","size":40019,"data":"","first_seen":"2026-09-20T19:00:51.901415Z","last_seen":"2026-09-20T19:00:51.901415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"916dc9d8e7f1f6b4d3119e593f96c52c","sha1":"c3a6698cf02711d62f1cd1248a9a106893f13d8d","sha256":"412415991e07c19a3703524b58e7fc3a5b4cd170598ca572b56a998f947dee6d","sha512":"7dd85039f6c564585c8393de03b8eaf5d622baf7d359d6d5d0a92848cc3eb73bf3292cdbb36b1c091d94a6d992ebe3c01c3cd297bc937349d7f1b977bb12c101","ssdeep":"","tlshash":"9ba02223c028c003003800a200833002e02803208802e00c030b820830e800bfecc08a","size":63,"data":"","first_seen":"2024-01-07T19:01:53Z","last_seen":"2026-09-20T19:00:51.903553Z","times_seen":372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"74d136c908334031064110ae6a2db0f9","sha1":"fa0a754faff5581f4ae1428264c1d1ebd3548854","sha256":"a44a2f8495594859a3e771ff4e8710a9716c7f5bf33ef6e0dbe80029a640763b","sha512":"e1d8274134b4eb5db7ad79fc80b5072b04721d5fc80c5c35cedf8d0df82110fead29434281014f603e6b7545377ef32537e38890e7387fb00b553ea457ca8bcf","ssdeep":"","tlshash":"d280000cac0c30200022b8a808eb800e00a2e00a03820e080082e2c80c32c2b002aaaa","size":26,"data":"","first_seen":"2026-09-16T18:31:33.439128Z","last_seen":"2026-09-20T21:20:37.472312Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.qm0uBrmE8W4.2021.O/ck=ytembeds.base.d7UHKqYQujY.L.F4.O/am=AAAAQA/d=1/exm=base,r78Drb,root/excm=base,root/ed=1/br=1/rs=AGKMywH5QkKR-Id92dYATk3-S7HIBoFgng/m=cwx9N","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"33b45c91cb626862e91196d11d547e35","sha1":"48a0e222d9f0c44f9f65637106dbe2a0faaba6d1","sha256":"d51ccd0fca2bc712576ac014eb7b63f0fac9f3c976e7f0d560bfde8af9a3a530","sha512":"7d229d9decc5c867002765396bd1c8f08956236a8b6bbcbfc2dfe5620539cea81587e4c39b24bf8543816e21a29521d743b798e800238bae2655bfb0c9dcd2b9","ssdeep":"1536:kkhQHZQiU/wkjPAb3j9vJe+VVqEKNmrHahxvlV3kAR:kkhQ5QiUYkcbzZJxRahxcAR","tlshash":"a65319b470e37570d397b738d3ab9480b66aa413c78868b5e0078b5e0efd9d07562f29","size":66091,"data":"","first_seen":"2026-09-18T15:45:00.744517Z","last_seen":"2026-09-20T21:20:37.430538Z","times_seen":317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c9afbd87df24ed59189d19040508c7de","sha1":"cd50efeab80c0ca16a5015e584132b7b81bb28a7","sha256":"8664706224730e9e64f07626a0a82134ae7a029bc8c833ec8436f123b4d09845","sha512":"e378d8bcd9c502bb1b392264c4ecf45f132337eba7d6070fb82f9925054868b192749fa5dad104848ebcd850434b3525e87ccbd78a50c9dc2f49a9e373f0fa5d","ssdeep":"","tlshash":"c710000030000c00000000000000000000000000000000000c00000000000000000003","size":2,"data":"","first_seen":"2023-03-07T13:19:40Z","last_seen":"2026-09-20T21:20:37.501047Z","times_seen":1230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0a634c6884f6d999380413a69e538053","sha1":"0a3a9cba4b59d30accfcfa8b5cb0fe71df406206","sha256":"006dee1b0fe532bd2890d538f9a18f10e3929cc76caa88f6224a625fcdf8573d","sha512":"c0b37c642c962d3f2ec0fed89d89593290ff0f3560126a4edfb367a2cd41231f75c5930ee394feaa5c8f25a6dc0f57baf4cd51190c2abf99d7a5269d6a6f4fbb","ssdeep":"","tlshash":"639002c93551965921c16554150b8025d8194c3204897404c95206612d60127801b61d","size":54,"data":"","first_seen":"2026-09-16T18:31:33.450052Z","last_seen":"2026-09-20T21:20:37.538998Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b1ca294e88b533cb465e2accdf0df37d","sha1":"329cda39860398664781415eef9be8ff6bbcbbb3","sha256":"8ffbded52f27f2da147d4b31cb3a279e8fc4a721ac14025a2008175b82365dce","sha512":"9fe8d28fac682bc0d9cc9ddbd0377f56e8d795b49d04d8e741b94f22569fb03f1b8fc5f5a27a57b60f94396005c8807428a3afce73a36b7897fb2412cb062e3e","ssdeep":"","tlshash":"60f023dda3126ecc8310f145aac0348d7577d9581440784da08fc562c710e9bb09c649","size":637,"data":"","first_seen":"2026-09-16T18:31:33.32117Z","last_seen":"2026-09-20T21:20:37.515945Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/jquery.min.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-20T20:40:27.873014Z","times_seen":145446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"13b09baa7466fa60ca8d61f981801b60","sha1":"8e6221e66129bb25a6d4f9e46d10035f1949f20e","sha256":"c361717ecdaadc8c3c113583dc2158a73294753430a170d83db550d08d1f48bc","sha512":"e8aa0b322e081c4395393ac9c0d7e67a71a7e298a16b861d0de5db85dc02518ef3839626a3f187e5fdc6f0207a98e4f9a5028c51ca13eb1d264f3f426fbac594","ssdeep":"","tlshash":"17b012dc3d0ca3405523009f0402618a49a5c82210c8401254c8c44607f50443403cab","size":91,"data":"","first_seen":"2026-09-16T18:31:33.404848Z","last_seen":"2026-09-20T21:20:37.457532Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0120a4f9196a5f9eb9f523f31f914da7","sha1":"a46e558d11cb2400bab09c1ca969e615142ef3d6","sha256":"711430f6164e93803d93428bc1fab80f41e213bb197689307de8606d437c3038","sha512":"b4b26682121d6b55fdd8ca269102d1cc4d7c8900aae87f7282bcc3b896517580b3fd301508e6827f878712928e9870d289c6f6bf1f5e1f5ffcc85dcf83f38fa9","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000c000000000000000000c00000000f","size":2,"data":"","first_seen":"2023-03-08T22:41:14Z","last_seen":"2026-09-20T21:20:37.477401Z","times_seen":1626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-20T20:20:28.099287Z","times_seen":192931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec7e53845feb375870343182efd0b929","sha1":"63e71d0c5bcadc37a725d971054eb55e017f6989","sha256":"a2253e1fad60aa1ccf31416ca8cde6ffaa5af2510733c7186adc04a503346c5b","sha512":"339f50fe30462dd6204552b2d3d3fe5cbaeea2cadcfbde096f16b40f1d985a5a68ebb227dbbb9f37c9451a36376ed392b7fb50c6e661963124146bac7e03284a","ssdeep":"","tlshash":"cf50003cc00000c0000f03000300000cc0000c00c0c00300c3cc000c3c0cc00c000000","size":11,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-09-20T20:20:28.136326Z","times_seen":180770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.qm0uBrmE8W4.2021.O/am=AAAAQA/d=1/excm=base,root/br=1/rs=AGKMywEuLijXyX4VESP7Qbg9cnR-M7XRng/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c428f499e5eca6a2431c42762ad298f9","sha1":"5cee4d8489fb387b6fd8076240255690d1bd1f7b","sha256":"aa99491112a3d6f40c74405d0d8086ef7f9878469d398a018d96da51ca45ad11","sha512":"01435c7abd9538e7c107ac1bdf5b8f39b5e4f3d483a9bf493b93271227a480a2d65cac7e558c369dc8ae06ec9f6d3f9d7df014df5964152908a936ea2d7b5e04","ssdeep":"6144:PNL7ytLkHpJ7aYtacsI9ILPafg/kK8LMz233xrQpbXSa1AwXyUpHJBXGvWMSD:U3csccPaf0C1a1rymvXGvWnD","tlshash":"e3a45dd973a2706392a2f1e0902f0107b27a7896f44c9c7cf698ddd52eb494945bbf38","size":466585,"data":"","first_seen":"2026-09-18T15:45:00.72343Z","last_seen":"2026-09-20T21:20:37.428388Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0424fb366cd06ba604d4a50d9f97f9b9","sha1":"406e0d00d7b1b2ffc7a0c86a323a16fe3a1075e6","sha256":"a4e80def445be3259cff09dcebf5baa7b791624850298fc5e912b30aeac502d7","sha512":"ecd600e5cedc023e64cfceabb7882a01d69004e6858fe254f6ae3f5563f986c216eb17a6f8b0b449c452aa2507a989fd3b0c69354d53678b644b146d07d9a505","ssdeep":"","tlshash":"2df062e5704a283d0a60ff728023238c8412a5212e07dcf6b529dfd1c633063f2e21e7","size":638,"data":"","first_seen":"2026-09-16T18:31:33.31439Z","last_seen":"2026-09-20T21:20:37.487836Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"87fe42b88a67022d23e79323c923b254","sha1":"026b5118791d2be016b34e103a94f8814a4b678b","sha256":"32e9a9804bffe909ff226129e9bed998115326d58d3eca039114f3865ff5269c","sha512":"5cc6a36fdb77af6f50caed5779aae6ecd4a2af94d8a5336eefcace1e3f1c63f17b4e943730c320f9c652214f98284aa2d8094a4743f9c32d5119bc27f2a422f6","ssdeep":"","tlshash":"c710000000000000000000000300000000000000000000000000000300000000000000","size":2,"data":"","first_seen":"2023-03-08T00:55:34Z","last_seen":"2026-09-20T21:20:37.434752Z","times_seen":2082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5c0cfb414fc65dac41cc1e56e627c4c5","sha1":"7e55459a900a4ef30910788d713b2f091fffd1cf","sha256":"46501bcb4d0b96519ff586b9594c2cd6935cefd61d840dde70ada9a9498da795","sha512":"89a264b659ee9bb8b8fecd8c6b212b4fb9bcd77c43d27bf7a14cccb24a28094cabba58d04b21481c00d9ef6d98e665a02858de065214430e595267665de94473","ssdeep":"","tlshash":"4070008c3c08300000b3b220000b000c0222c80003800800000028800c3ac0a0022aa8","size":22,"data":"","first_seen":"2026-09-16T18:31:33.406074Z","last_seen":"2026-09-20T21:20:37.536552Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d486d297faa123d71a325242e788b7c6","sha1":"0a5334030b573c1118e6e69f0f64dbb001dee553","sha256":"d57bc8df1967ed52541b886b6c5ba9a727910ca812b4119b4a5822292a956616","sha512":"526a5c4a545e100a7bd617017c25dd4e7e5fbad1c2348572368caee2904a9226d84c30f3b2ef6f1e6c69667251f768fc344eb1adc01279e013f0bc6fa68e4170","ssdeep":"","tlshash":"a5c02b470b0003ce53c60394c106817bc04340877c90dd1c83949182a79c6415471f18","size":135,"data":"","first_seen":"2026-09-16T18:31:33.316403Z","last_seen":"2026-09-20T21:20:37.508283Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"925cc8d2953eba624b2bfedf91a91613","sha1":"f9fc27b9374ad1e3bf34fdbcec3a4fd632427fed","sha256":"8693873cd8f8a2d9c7c596477180f851e525f4eaf55a4f637b445cb442a5e340","sha512":"b1ca9c90bef9eb16e8ebeff67280d819cda081ccebcaaeef3f5162d593c8427658f127ccd88caa5c74e3c0b60de0a821587d08ff602fcb5a0f81081437d4e20b","ssdeep":"","tlshash":"c710000300000c00000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-09-20T21:20:37.537972Z","times_seen":2983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cc99e6dde5e87662e446ed7416459bba","sha1":"c072de77e1705b59885f11c6124d964180168f2f","sha256":"187722081e8e03f1919d9d2e6bf6d73c660800a66036492c68af747f6754b5e6","sha512":"0ef6cc2fa9c0fb489444931a85c77dd456601dbaa75c38234636ab9781f9177617e14888a5dcb7464c3d263ef0852eab1779ac8017c1e919bfe3e38c49ad0d02","ssdeep":"","tlshash":"83c02bc47559e48cc340543700314714c7ea1d00e00881a18198e4cd2db020a1b38bb2","size":132,"data":"","first_seen":"2026-09-16T18:31:33.442225Z","last_seen":"2026-09-20T21:20:37.44963Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cc14aa05ca4131ca19d55a9a3dc96647","sha1":"a100f153e00ea3dbc70e45ce534f5f319bc75a33","sha256":"95846f9b22f55b84ed42cd929563e9c240c5882f2df721bd2f32a3d1ea359827","sha512":"b90e70d970f2574007f734056def0b3febfdfd6c11d5da59b409eacd6f6911ff5f510f6c4d52b84c2f92d0f3959c4fce879c3b21731ae2ce592a638e42691d4a","ssdeep":"","tlshash":"2fd02bc16209c0612a196e642801f16f006858d36cc8c952b11324e808b2e955589e77","size":259,"data":"","first_seen":"2026-09-16T18:31:33.377289Z","last_seen":"2026-09-20T21:20:37.527552Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b3473fab32ffc4f793ac5c4bfc0912e0","sha1":"491871db71e961db8c0406e59f499d92b60ac776","sha256":"e9024fb11e92d393c080ae28e15acce5224c0100af9adbb196ef684f11f0c55c","sha512":"5ee67f891305c19d303fffa26532f18ff119054dfb9a5e0aa6aee9f27ea5cee7fe1599d752669ddaaa0b30854f80868363e29ac7839851b0c42d0a53270d206e","ssdeep":"","tlshash":"a470000c2e0c22280022b8a028ab200e0032a002028a8c000080c3c00c3280b0002a88","size":25,"data":"","first_seen":"2026-09-16T18:31:33.312226Z","last_seen":"2026-09-20T21:20:37.532999Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9e5ed61178a9b48d5f73060a7738db05","sha1":"7ea33dee43200257aad8af782c9aa789841bc996","sha256":"245c2c85225fe2075dcf52a6eb48665260850fa4bd6ac972ae79faf35b642378","sha512":"8c70ece374620d53730cc48fc72d903fb77ec8c324c251fea7800721ccdad7115724e62cffc19e6827a143899d5522c04c5466b12d0a345c1fabb9b2c2c8f5e9","ssdeep":"","tlshash":"8df0c0a3b50886ac1be2ebd5bd1b279a55c32606ac00084fb344f1608edcdb27d678f4","size":530,"data":"","first_seen":"2026-09-16T18:31:33.324065Z","last_seen":"2026-09-20T21:20:37.455677Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"76ae6cc4068c9d38ce6f7551c8b2bd26","sha1":"76c93868dd7cd15b49b4de542e4b56fb2178f37e","sha256":"efad16ebba9b658b0a3bdbd375c588db0a3bde008149d8b7fc04c6484e3fadb2","sha512":"3a31209ef56c57ad2d4cc5d630d3fa82c10a278a5497187cb8fa5fbdd543171c297069034a75cfccaf6e7e36112c2dca56ed92cebda46758f40f526df765053d","ssdeep":"","tlshash":"3d11545e3b5537367cd585d0043f26af8429b11fde8a0997cc08f7b2a8a1cc35093d41","size":979,"data":"","first_seen":"2026-09-16T18:31:33.326738Z","last_seen":"2026-09-20T21:20:37.478517Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/jquery.form.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","size":43811,"data":"","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-09-20T19:00:51.784938Z","times_seen":804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/moment.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","size":150941,"data":"","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-09-20T19:00:51.767659Z","times_seen":1599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9045e6e8118e39aa1f14fb1249e01c32","sha1":"023b6fb283ea104eec1b02ff8acdd881732f5d38","sha256":"f4f39b4f4eb035a7166e4639b1d6b6daeec80ac048245f713efaa91c2e1761b6","sha512":"2f42b12adc927de3a7a4e61d1bf4f75f5b8d0c98fab3eab05c68114f6bd74448ae210adbfe525bcd38d0e45238f4da191b7a1a53fd94fb8ae1562b5168e0a696","ssdeep":"","tlshash":"07a024017d043d4034f70435c0433f0c0d3d0370350504d40005c4d10f7015403d55f7","size":77,"data":"","first_seen":"2026-09-16T18:31:33.430917Z","last_seen":"2026-09-20T21:20:37.535557Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"528d772a1816ea6fb021084b4487e765","sha1":"54114f48b259ff310666302ed34cb2e33c9046f5","sha256":"fae4492d5e7c9069863ecfdc3672681d6029c7966a9d5300952197384837060b","sha512":"23244fd8000ff9ae87eb417b01187af5ba6db95fbfa5064f5b51f8c5cdf8f324d1edaeb021829bd4ec27dd18658adfe355cf0c2551c212dbfd79fb36b9302807","ssdeep":"","tlshash":"7fe0cdd82b41ad7366d8e3d5d0bb1204c53595015cc9ec48c395fd4046e89f35b77c6d","size":332,"data":"","first_seen":"2026-09-16T18:31:33.376102Z","last_seen":"2026-09-20T21:20:37.46402Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bc81246803f020bda172115c61e26651","sha1":"a3b5d29f1f0874b94a0dbb352e786a1628131294","sha256":"a007af4d4675f3abed6b29943bb8c349a5b1b078f014e0cdefaec607d24cf64d","sha512":"d035d3b6d2c6f43652adbd4aebedc307e9934cb0f4abefad476bea388d1d9eeee64b4c3ba1413f84a0ad69377a018244ae43118ce8e60ef45ad936f2e1d1dbc4","ssdeep":"","tlshash":"4d11505e3b5a37367cd585d0043f26af8829b11fde8a0997cc08f7b2a8a1cc39093d41","size":977,"data":"","first_seen":"2026-09-16T18:31:33.437397Z","last_seen":"2026-09-20T21:20:37.514136Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"79a9b1dce5baddd9020661a3aaa8bb1e","sha1":"21e10da1ee89f1440de4e980324faf0a08caa22d","sha256":"d5521fde144f65fcfa14155534b2e926991da53ec72d02b3626bcbf0af02a188","sha512":"9b4a72f39892a5e82483d75591bf71f550c46bd59c6394a1549edd2a87b3e8236cea2a6556e7722c8fe60d8b512392cb5466877af5f43dfd91323dae274de7f8","ssdeep":"","tlshash":"8cd022c91c6310b42b8da3268cf7d64acbebf1034747c60a809c3a386c834626125e83","size":200,"data":"","first_seen":"2026-09-16T18:31:33.410438Z","last_seen":"2026-09-20T21:20:37.547789Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"19f710c984f7b864a42257afccf1e5f4","sha1":"61b637f45d420e5627f32131fed7d20698a4fc41","sha256":"c57f445887d26d24c002f706ef9eb51400be6eb8a27c28c3b84a16f2ed2ceb56","sha512":"5774a8eebfe065988b78a7dd0acd9a0bd3567c2f65411f23dc6fb6a4c4909dc8d8820539891278afbdf543693f8dc7a4c8a2090e06c835c5c28fc114d86bb3e5","ssdeep":"","tlshash":"d4e07d84271d896631f5d751c6170900c1e1e227a48e7cfcde49d9838d904f24963cda","size":327,"data":"","first_seen":"2026-09-16T18:31:33.320221Z","last_seen":"2026-09-20T21:20:37.48178Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"63517abec9f7a31133fc62136e1f5d1f","sha1":"7f5b37679e08dd3d24cfd542038a11873841920c","sha256":"0fb99af81ff64cf9defe24ac5271240d112aff5f22975c012f0601d83cc0da25","sha512":"5643d28b431d56d0bf543cf42382f13c30676ad24d1f43934d6be07f83e6dcc534a07412f3ab103895db44e7ee0595a1d329f2f671648c27810ccce8f0a08e4a","ssdeep":"","tlshash":"7c70000c2c08380800bbb020000b000c0223c80002800800008028a00c3a80a0022a8c","size":22,"data":"","first_seen":"2026-09-16T18:31:33.383611Z","last_seen":"2026-09-20T21:20:37.465155Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"397381d0d8d64316f13cc4c081122c7c","sha1":"7ea28344a1e7a4fc91b860167152845df64656c9","sha256":"a4ec14832641ede992e64cbbdca678d9c98d9aa9971a057ac9a663fc299ae9ab","sha512":"dda7201357b588572b9b43763be1b165b1f51dcb6ff98e5108001d04b295cacc7b738b5854a1d33d9893e62646f994ed5d90cc06c638fa31a38ac667c56171a7","ssdeep":"","tlshash":"43a002861c3eac228132156c781f88154b7d51056541a812165dc65447b8c952501aa5","size":58,"data":"","first_seen":"2026-09-16T18:31:33.440238Z","last_seen":"2026-09-20T21:20:37.506958Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/bootstrap-select.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","size":111455,"data":"","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-09-20T19:00:51.768332Z","times_seen":701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/slick/slick.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","size":87157,"data":"","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-09-20T19:00:51.797285Z","times_seen":792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"559298bebef13d1f72b8ee06ef96d3e9","sha1":"1ab84aea4b11684f03f080690ad8bb0c0ce9c17d","sha256":"6fa9427ccb778af8ba634284c518f141a9d0df3cfde82ccb1f4084ccca26c0fb","sha512":"35530668eef7ac6dbce84f08fd04849733ee4b4b2e230ab4fe2a8c1b96f659f66df4844f3f8d8d9c4fc38cf33a63694cbec2a2e9ef1c9206f1f0c11805fc96eb","ssdeep":"","tlshash":"c7100000c000000000000000000c00000000000000000000030c000000300000000000","size":2,"data":"","first_seen":"2023-03-08T22:41:13Z","last_seen":"2026-09-20T21:20:37.469059Z","times_seen":610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e1e1d3d40573127e9ee0480caf1283d6","sha1":"06576556d1ad802f247cad11ae748be47b70cd9c","sha256":"8c2574892063f995fdf756bce07f46c1a5193e54cd52837ed91e32008ccf41ac","sha512":"e32af21345e7a932da186a47adb173dd1c6998767b25f8397f3740e87e591c2370be6f2b11c836ea6b4978034fff239309f721e7bf2491b6ba099c347fddc26f","ssdeep":"","tlshash":"c700000000000000c0000030000000000000000000000000030000000000000c000000","size":1,"data":"","first_seen":"2023-03-07T01:15:06Z","last_seen":"2026-09-20T20:20:28.129114Z","times_seen":75977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bcf912568abc7ac69194292fbd89f0b6","sha1":"e0e0d08fb6e6a70856ab0ce5b9b37c60d3190e9b","sha256":"7b5af152aa81f19ad88723249f5207343794e4cb3c9a4b7e3b2912f31b22fe64","sha512":"118a30581c584bf77234621498f1b7463abe47e926ce8b5daf1bdc3ea7a7eb97d3ad35f608ed17377896d2300f7ac311e58ab188492efaf396e94670c75ddaba","ssdeep":"","tlshash":"1bc02b470b0003ce53c60394c106817bc04340c77c90dd1c83a4a182a79c6415471f18","size":137,"data":"","first_seen":"2026-09-16T18:31:33.341353Z","last_seen":"2026-09-20T21:20:37.539939Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-20T20:20:28.143002Z","times_seen":255960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-09-20T20:20:28.114514Z","times_seen":179655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"69691c7bdcc3ce6d5d8a1361f22d04ac","sha1":"c63ae6dd4fc9f9dda66970e827d13f7c73fe841c","sha256":"08f271887ce94707da822d5263bae19d5519cb3614e0daedc4c7ce5dab7473f1","sha512":"253405e03b91441a6dd354a9b72e040068b1bfe10e83eb1a64a086c05525d8ccae2bf09130c624af50d55c3522a4fbb7c18cfc8dd843e5f4801d9ad2b5164b12","ssdeep":"","tlshash":"c700000000000000c00000300000c000000000000000000000c0000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:12Z","last_seen":"2026-09-20T20:20:28.146808Z","times_seen":60884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64fa0b7138d2992f2e7daa5080eb5ed0","sha1":"9e952137d2f466c359dc77881279e5342d5a7a53","sha256":"b6d8a632f29cbb2f339f9da15e0de49bfbfc493abcf426bcab6f92c4e3564d7d","sha512":"774abfb308e6e1f4e94d84c4314a4987b773683bb1517aa6bd55f1af2a665aebdaedaed44d07dffe5ec13ff7e77f842a9484151d1922699bed8b2721c4c464fd","ssdeep":"","tlshash":"c7100000000000000000000003000000000000000000000000000000c0000300000000","size":2,"data":"","first_seen":"2023-03-08T00:55:34Z","last_seen":"2026-09-20T21:20:37.48856Z","times_seen":358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"02129bb861061d1a052c592e2dc6b383","sha1":"c032adc1ff629c9b66f22749ad667e6beadf144b","sha256":"4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015","sha512":"3173f0564ab9462b0978a765c1283f96f05ac9e9f8361ee1006dc905c153d85bf0e4c45622e5e990abcf48fb5192ad34722e8d6a723278b39fef9e4f9fc62378","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000030000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-20T20:20:28.05257Z","times_seen":51446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cc43ad532377e05783b919d86a896d9","sha1":"69e00bdb15ac21186c8d27764e6311759ba5b99b","sha256":"007cd5f5a967155b6963ac5de46c369ee23237414c3f576b4197fe46229808ce","sha512":"404182f4b51a22a4a35e58480d372a65db2465803ca23913e379199413edf84fa74dcf0f92026d8561dcc35bdff981cb98a38c8f50ae05f7224e5c7b42b30c92","ssdeep":"","tlshash":"2cd022c93c4978d20279238888ba01f7e2fbb8dc78068b40c32442002a3ca3a5464402","size":199,"data":"","first_seen":"2024-10-31T11:08:50.83142Z","last_seen":"2026-09-20T20:20:28.068673Z","times_seen":165312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-09-20T20:20:28.142449Z","times_seen":215765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eb6af5b4e510c3c874d7d1f51d72393a","sha1":"23f35593d544c5e86a06a86fcadd394a2b426ee2","sha256":"b4e473f83a6f495234060784e48743f0308721f48f2c4a63995e51dfc66f3654","sha512":"3eadc202de9bce260ac30d3bbf66d5660db333228ab06ea74665572be99be865140e6c13743ba75257e07944ac22853d2493986cd8a3af42a07525944b86a01d","ssdeep":"","tlshash":"c71000000000030000000c0000000000000000000000000000000000000000000c0000","size":2,"data":"","first_seen":"2023-07-22T16:49:06Z","last_seen":"2026-09-20T21:20:37.513528Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-20T20:46:10.62333Z","times_seen":9538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1b6145bc53c0760dedb67c6bec33b338","sha1":"9e8db8f8bdbccd69fe5ff32b807dad12b8f83d4c","sha256":"2e5094a5168d12e690a677edfc1ea2bf41b9e10956bf6a9634e95cfa2325a53f","sha512":"ca16638449a28f4d01c0f58bf5e18459f86447c2e5e766dc17f44462f59d3569117ec7adbf5382a02aca0078585ae8d2be31c546731c9c9cf46328e362c2a5db","ssdeep":"","tlshash":"13a012c84c074d3100902015258f945908246052307048d81c19c00c17b84ce0d439f3","size":83,"data":"","first_seen":"2026-09-16T18:31:33.391501Z","last_seen":"2026-09-20T21:20:37.524232Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1d9dd343bb0526e2eac84ff98dab71eb","sha1":"63fe9dfeb705a0f75047d3f7cd049a985e50d128","sha256":"c2d7a333cdde90681a9e65f0bcfcf4011adfcb6ae380901ef778466fb7fd4923","sha512":"553066e73f65f055c53e63d4cfab5d7c6172e47917759b44ac7c65853086556bfd7b1b260fc6a04eeb31f6e34a4ce4dfbe5f46f6cd3ac9d60f37c78267cf03fa","ssdeep":"","tlshash":"3dd0c7c4abe2655483d0942705233321dada6555ec095351d320f75be6e094b651b4e5","size":233,"data":"","first_seen":"2026-09-16T18:31:33.41787Z","last_seen":"2026-09-20T21:20:37.447569Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8b1a92e9f078d33b97b336ca0e6df692","sha1":"6e574cb6861fb94223909f6acae9089f50b74c9c","sha256":"78a2aac473ded11c8542d5cf6aa155e501ce334ea843b109358efcafc02bff49","sha512":"1f1601244043428e0df1845d99f32d6f6f7c6e774e66e70afc357999d27d7f9fbe7d12a044fbfbf10c1f9972c8232214012eeef65582679ea1ed3f14da7625a2","ssdeep":"","tlshash":"add02bc69948e453ac2f75415dd7955e08dad3121396f421202e90e29452c026208c2a","size":262,"data":"","first_seen":"2026-09-16T18:31:33.337094Z","last_seen":"2026-09-20T21:20:37.451057Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9209fcf78a148fbedbc3ab48cb5d741e","sha1":"e522b8e06c5a5c641b24eeb0afe8bc7dc2cbb336","sha256":"3b170c3362d13d34bc9eeeb9a0b004ae3746a6f076f1d81b3e3b8fd5b0df91e1","sha512":"4a5ed9460b20963c0d2a02c26ab59628c68aeb46c558779cc334f75531c4db33845d2a9ac31250bc1305340eef57ba968f1c2dfe94536769d8d7fbed0b1dd6da","ssdeep":"","tlshash":"ded097490487b922b3f0f9348a24a082d80340281c7628125edcaa2c0a4ae8062dad49","size":233,"data":"","first_seen":"2026-09-16T18:31:33.409534Z","last_seen":"2026-09-20T21:20:37.530478Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1a022486c5dfe45db2f581ae7ac2acae","sha1":"cd528759ddaac70c108741db48802cb6abbe638a","sha256":"50db45c2649e5da3871587a09c5bcf063bb6bb965fbbe382a497627da90d78df","sha512":"83f0f455488e53c31d48682466e74392fcede0a858354573068182fabbcf5e3b0c3391dd25d22ff452e752b42a3b48900b0af80e89a8b47740e460137587a129","ssdeep":"","tlshash":"2da0228a3c002cb80bc2f320288b8a08c88308280803080cc238c2e00eb000a0203ebc","size":74,"data":"","first_seen":"2026-09-16T18:31:33.441163Z","last_seen":"2026-09-20T21:20:37.475773Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DKOWJlLK.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cfc843bd1f4a59fbdbd5873155bd1e5","sha1":"5f0736ed6a5a3a12496948110fa9265d39c6b175","sha256":"e7984d27930758951e5ce6f0c07dc2290082b8aef5b188faf9b5b1030a0c37aa","sha512":"7b5c5d8a3fefa7145e9d462811f8f103caa9a15d21273e0b03445ffac0599d25254e2e5849547138c02727ca242daa7f82b59da63c325661027c53e3bb5c51d3","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY3y2KQgcu5Ukxtvm3M:cOEIqXrP3nJwUr/K6vm3M","tlshash":"4d642ac57290b03543d791a6906f1109b33e5c18580d812cf269edf679baec8b2b7fb9","size":322001,"data":"","first_seen":"2026-09-15T08:49:00.59426Z","last_seen":"2026-09-20T20:55:55.045253Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3f86c3f5a1b5ad82bcca3d7864f6d928","sha1":"e011a73e36f3fe8e554c81b82cbb6e1a92189e26","sha256":"ce73e5f84afa7a0f8e32de477f58b680730b18176f0cb850e599e3af7fe210c1","sha512":"ab26314d6bd05798e06a745c7f0834b1ec90f6282204e448f22875deb60fd8afda376ac74d0e16a1b621ae009e64e805c975b84520fe011a1252e86bd0c73bd2","ssdeep":"1536:Tj7xr4tnhaMZIKW8QbNc1NdquijHrksERf3ZZ+W:X8h6bO1NdTi+Lh","tlshash":"fa63f6cff6d277351ae2a2f14057454b92bfa51acc88585fb909f6f40e7088b5026fb8","size":67824,"data":"","first_seen":"2026-09-20T19:00:51.956451Z","last_seen":"2026-09-20T19:00:51.956451Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2930f5b8cb74cb05bb26ea9bd0400a4c","sha1":"5c84f86a0d7d1b1201aff871bb5ba237370c94b5","sha256":"e18dd410a6cd9f53c08d5326649d3677d00e023c345a6228d7582b8be5018c8b","sha512":"0056c268ca5476a4771576d24a968e5479c51483c8a47ceee094514bef79bd0c209ce45e6d7e84f4129f4de644ded686d625fd88aafba9a6d354b5505b671a47","ssdeep":"","tlshash":"17c080d57c5dd478834444a640327374c3f75981e04551524354d5de797024b5735551","size":167,"data":"","first_seen":"2026-09-16T18:31:33.413926Z","last_seen":"2026-09-20T21:20:37.506392Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64a65c18a52a015515de227623e18f3d","sha1":"f2c40b5a93fa8b2fcf9b7bd7b43429a7b89f627f","sha256":"97c692ceaa4ebc690caa1ec3177faae6e44b1a98d23898ac103a2fa0aea972c5","sha512":"311cb1ed2737118d89a0dd16480c6cd8c5bfd7aa414d3c8444042e82e9b85a588fc7dba5e276b8abe5c1fb80cf7b0379e1d3cc88d61c691c14b330562e9568b9","ssdeep":"","tlshash":"daa022020c802b000cf2303838cb0c0000cebc32b303a0c000a0c2bc0fb88ca0023bfb","size":73,"data":"","first_seen":"2026-09-16T18:31:33.317364Z","last_seen":"2026-09-20T21:20:37.462907Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3b464dd524d3614aecf521c04e142946","sha1":"cd70d23456f423f61c23a23d6ced8b74d06537c0","sha256":"d27aed3469541644d9864635b1381dbb9ecaca3d78f7c6bc62a6b5ce5671a17c","sha512":"57000843393f573502e4d31d579d859001ae629b72b03b6ddb1bee895bd23212aa2fcbc067621bf7c476a710153ed3caca3fe1fde591f57b3e3f10fe6d9a7044","ssdeep":"","tlshash":"c3d095c4548c182f3693d52455c7d548345df0283c093b0531cd2cf443b44f8c5517d7","size":261,"data":"","first_seen":"2026-09-16T18:31:33.451763Z","last_seen":"2026-09-20T21:20:37.491891Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a1af8001f0ae74a09a405814d110e45b","sha1":"b8c83a02365980176097477e044ea970307f49df","sha256":"b0ed6893c5e26a3faed6a7411940af76c30b83b938e36f0ad1edbea2ad9bdd70","sha512":"1d085a746ca347711817a57b1905360cf9f425ae855f7d3ffbb99c1e7361f18bdee2c805823ca5c71d81e560fcf6c2dc83f0fbe877152159b39cab3910814361","ssdeep":"","tlshash":"4d017599204d11bcf007f2acd07b12960f62f376d0258e96dc07e2e68ea1435f595bcb","size":779,"data":"","first_seen":"2026-09-16T18:31:33.379373Z","last_seen":"2026-09-20T21:20:37.538492Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b4d2212751cabd5244c773ae797f6f41","sha1":"5f98ca1644b6e5657f7e6c1e155d978ef054e1be","sha256":"6e39e6371800f398758feb3f30477a360cf6ecf8c1a754c99debbf7a02423663","sha512":"28c3d16878799b19ed6f0f060b48c0f123a5d1b458a62ce460f9a49f08864a53859382c5160c4dec950bc2b184412a6d0923751d9e82de84fcc07834f268efe8","ssdeep":"","tlshash":"b7d0a7d175c1d82449ee22ca2187c5385238822b21559d8781ae909447bccc5945a670","size":233,"data":"","first_seen":"2026-09-16T18:31:33.286413Z","last_seen":"2026-09-20T21:20:37.477984Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"da3dcb375709307025a8f2b381d4affa","sha1":"1039417373d1cd45a9a957e7bd11e5892e8d61fa","sha256":"148fc70b6993d5f32c2821dff90d4ce47b0b0fb287536bdd0581e9e04acc7f04","sha512":"ccef3d80f8bd04da7228f4bc70226401e5670e4e537bef7ae3d3c84e1ddef777c3c9a11927acf1e74b4858f96121dbb9a1669343c1ee1f7f5ba6c77a024e4e98","ssdeep":"","tlshash":"f5b092c02f18002a5ba3d43aa9276009046f7066b9068ca866acc28d1a704cb00a2aff","size":120,"data":"","first_seen":"2026-09-16T18:31:33.424349Z","last_seen":"2026-09-20T21:20:37.531463Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"242d8a8fc906b1d257c05f75c05ee4fb","sha1":"ffe4d06e24d387bb1e8ef968e509dab6afdfd95b","sha256":"3de5a1c216890f0643d7c7debec77e6024c3e379c20c796e33df0e32d9eb1b5c","sha512":"15f13691261efa45934a2aa07750f968d4f1252850fd70a79b767d97c098315af641bede023849f235e01fde0d22165eeb4ef8fee712e6d9237892725a6ebd5c","ssdeep":"","tlshash":"148004441d045000011715f00007c45d043310753754041450d504c30d31745114dc3c","size":34,"data":"","first_seen":"2026-09-16T18:31:33.301855Z","last_seen":"2026-09-20T21:20:37.521424Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/livestamp.min.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","size":1414,"data":"","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-09-20T19:00:51.774873Z","times_seen":630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"954499705a746afd210d54f0ebeee561","sha1":"66ed2f47f0fb7b963a36b7bbfd6b695bda998740","sha256":"d33fb418269f8347d4539a2ab2de9bd8e016d57fbfc45db1683ea8bcda4444bb","sha512":"66f02808d50500063bce99d9ad89e169df34044668677875a781a130806a359e418b6d2ee4c302cdeba88b05f7ca7631b7f611b0ce9c666041605798d2a95ed5","ssdeep":"","tlshash":"3580000cac0c22220232b8e8082b000b0022e00202830c800080e2800c32a0b0032a8a","size":26,"data":"","first_seen":"2026-09-16T18:31:33.388333Z","last_seen":"2026-09-20T21:20:37.461637Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cdf01fd54bc8fb3e5c343c974b1d1699","sha1":"15e23da81ced1a1bd660d2a5edb6e47c78d74208","sha256":"7d8cc4f585998375e869a178f4f96bf0e42c1a564e02f4c5db873e77136b664f","sha512":"1d22e789ad84f3caa0ffd32dde225799aa36c766f0376b6c1fde1612036d39ca67bffa0e7334602886d943adc5edb13ab4d071a944461357393ccfc596379977","ssdeep":"","tlshash":"cdb012891d093806552e062ea0171235f27b8518640400390444d140236048d2ad39df","size":95,"data":"","first_seen":"2026-09-16T18:31:33.309308Z","last_seen":"2026-09-20T21:20:37.484534Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1ae301b9eb8863789fc717ca8e0c1cb2","sha1":"c3359a6cfc8b36932793c3e027a950a079e434d3","sha256":"9c5257d810ccc817313a30760ea46090b0a5c47385c4c21c1e5cf7e25e457556","sha512":"62db5f7cbb19deed7339e039417a67e38f42729cf79213fac2889384339b03d5637df0e3c06a07915013ea963d1f94bd033a594785bbc59bef97634a63b21d5c","ssdeep":"","tlshash":"3de02bd82a429e7372d8f7c9d0ab0300c636450264cddd48c38afd404aec9e35b3bc69","size":300,"data":"","first_seen":"2026-09-16T18:31:33.444772Z","last_seen":"2026-09-20T21:20:37.473343Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"348da9e029fa4ef950cce9d992db9895","sha1":"4b802aa4481433e26267cfef6a3bd1552ecb491a","sha256":"9fcb4c76899e891c4927d4b0acd29f0095d8766e27548c7ee2cfe810d2038363","sha512":"ef1e54df687428f812b82e832eb8e7575497248697fbf0de9d88db43d644bc30e8eec82f68c9e5f1684dd2913f0a6750a3486d7967a158d622abb0e5b40d60f3","ssdeep":"","tlshash":"50e0cdd82b41ad7366d8e3d5d0bb1204c53599015cc9ec48c395fd4046e89f35b77c6d","size":334,"data":"","first_seen":"2026-09-16T18:31:33.421834Z","last_seen":"2026-09-20T21:20:37.503017Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8a71c8c247cd97545d7822db03881ed1","sha1":"111bf13379c8bcb07930ace2b3016e6e9b5a90bf","sha256":"cddbb89080a5f5a90cfa6182ed5ea6f61593d0f8fa215ba3f06ecaf28ca32ecb","sha512":"ac6d25b8010addab7c10dc5d14d25e2c4af293de65c68938703b3fb6f45d3d0506d8b9f6a0a76c49f2ff86580423d82316f5f3c50ce7baf1de5551e9c624705c","ssdeep":"","tlshash":"49c02ba034023c886300694c33cb690ec7f300831dd546cca12cc2985f1309870321aa","size":142,"data":"","first_seen":"2026-09-16T18:31:33.322119Z","last_seen":"2026-09-20T21:20:37.5445Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"091fecdb12323ff7cfcbf10225acebd9","sha1":"2e792f8dd9df05c062b1d194b39959185218ece9","sha256":"0cd7b8ca15350fdb504a4d673c963097ad37858d55407b7d05b4ca01e8877a77","sha512":"c3f93f4371cfa5e08866ea640a63db885913d1d49870b51eee53216488d89b92ccfd75176da305b1eeec3662f5e3d4874cbd50da88a9783391727c2c5d3523e0","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000000000000000c00","size":2,"data":"","first_seen":"2023-03-10T14:46:11Z","last_seen":"2026-09-20T21:20:37.51472Z","times_seen":343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dc073d176d24a42c1f15fe8b5ebb121f","sha1":"16a49d07e61ddaaa1373fb7edbfa4829757e4416","sha256":"6bbd06f099cf4d20abfa0672a635b11f8a59d9563bac94e79836f228daab37f1","sha512":"54be345ea71d4177a1c54c2d35a134e85e2a328186b920d24e55fb539b8d99d4e2ec7cb2e07325a1fa6649cefc270a6dcfbd405333f3d7d34d4e7bd06f523f08","ssdeep":"","tlshash":"351188e4784e1020bd5bb85b7c97f63810d154aba8135e004c4371f4fab28d5873f90c","size":975,"data":"","first_seen":"2026-09-16T18:31:33.443204Z","last_seen":"2026-09-20T21:20:37.487113Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"750a1b5d2bc1aafe73c88cbe3f77aa4e","sha1":"cbbfd9f5e390ea40ab5e6294ca812fd927391c10","sha256":"9a79c4f5b24c03588b5b06630e40f78b20992ad093eaf7786c80d5464d99683f","sha512":"bc3814047a60b4e2baf250a03c1e1384ec1153ba3e1ed87b0edd770b895cf6dd0aa946bd60e183bd86d1b428109ce64892f1bc11499b8fc0b3dfed508b78f5c2","ssdeep":"","tlshash":"c0f00c0fe2c1a232e7c1e48650eb641a84c2904a1c89e85f2150da4109a68fb208eb80","size":587,"data":"","first_seen":"2026-09-16T18:31:33.372702Z","last_seen":"2026-09-20T21:20:37.470171Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7d4b460514780246b78ee9c0f8662eab","sha1":"0d90d038457b4d462139894c37144b29b4ffa05b","sha256":"e09443a2827ad69b0dd5fe6d4a0be4aa6bd85c5cb032263db86fda96be9b5fca","sha512":"fc155d24f1bc08e349f76c661d326cb4842117549b6b03f50dda5513f8230f00e64afa462cfa9213f05b0f087a6a43998aaf92f8bd36caf70ae844fc5deff9c2","ssdeep":"","tlshash":"51c08048f8e413ad575631d51907d31d49525433290735433011d3d58d65e0f5025c42","size":162,"data":"","first_seen":"2026-09-16T18:31:33.336105Z","last_seen":"2026-09-20T21:20:37.545437Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8ce946b2a626fab095ca7185453dc36c","sha1":"270f22a46dd798a156b97bacafe8fe8aaa7469ba","sha256":"3ab247828ca2f778fdb728bf1c95cff79fb7e87cf7b118c675e7c0a1b3395bb5","sha512":"48a4f9aaad5ed862b8ba0ff051de885b5aff27759a8ffa63cd0710b0f349a0860b4b83f13fdcef059c43ed28238e12816de0e66cce1f1d38f5b1711847f6e3df","ssdeep":"","tlshash":"5670000c2c2c280a083ab022000b00080022000000800880200002e00c3880b0303aa8","size":22,"data":"","first_seen":"2026-09-16T18:31:33.385561Z","last_seen":"2026-09-20T21:20:37.46099Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2682f86b3dc44d066d1dbcff9367d42d","sha1":"f035efb24f8d5ec0b2ee15effc75e10e356596ec","sha256":"84af3b7aee9440171a5ae40e40f41b26df88709fe74353804bf490ac6021549f","sha512":"00a92177a9d5ffec6f8a3ea5a3c7cbcfda1ce99c400c49e5135887b9ec315c461aee3b2fdd9ac4a97139c07d98394e052ba3f3707dee5b5d2108f48e586e49c7","ssdeep":"","tlshash":"44c02bc47559e488c340543700314714c7ea1d00e00881a18194e4cd1db020a1b38ba2","size":130,"data":"","first_seen":"2026-09-16T18:31:33.448154Z","last_seen":"2026-09-20T21:20:37.433049Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"56cfcb7af07a8de316fad4d1c03a3f1d","sha1":"1f776e454d1ed58c855a7b5cb00188e00b718fee","sha256":"9169b4496f78582a662e0e18cb9dc3c43ab1bac20e7740f8ff4ccf33cbaf275d","sha512":"632a8797175b958c3c17f938091ac18acd37cc46abdebca02fcaff9e0bd66ad25d441704004e346f27ba8e3ac459f1710961d899b0633327cee4029de21f13c3","ssdeep":"","tlshash":"1e70000c2c2c2a02003ab020000b00080022080002800880200002c00c38c2b0002e88","size":22,"data":"","first_seen":"2026-09-16T18:31:33.338696Z","last_seen":"2026-09-20T21:20:37.525639Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"42189cc122931db6a648f5e23476e208","sha1":"b42749303a2885e854885020db7e82fd7959bef6","sha256":"4e1332301cfdef585387722e5115f0aad08566fbffda890f7fbb456ba9a5fd60","sha512":"6b6e42aa57ac3f823d708cbe218189805b265c872cb1b3ec382e549fded3037bc530f5d5b83e56fb411b57379e25f235fd30fa16025f815803722879bcc8c957","ssdeep":"","tlshash":"90c0c0c1bc0ec7030236336d2007cdce42eca0d3e600e7001185400004ffcc10008b76","size":182,"data":"","first_seen":"2026-09-16T18:31:33.449159Z","last_seen":"2026-09-20T21:20:37.491237Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-09-20T20:20:28.064732Z","times_seen":212028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/popper.min.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","size":20973,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-09-20T19:00:51.80209Z","times_seen":7774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e2ab7c65b21ed8cc1c3b642b5e36429e","sha1":"37a81d7cd2e4b8f7f2a8a35b26aa90c58c80afd8","sha256":"44d6a8a73eddb284d49799fdbfa2919a004ece6d2df3546eaa4e246048bcdf81","sha512":"0fb1a833250cddd1a273b8c99e6ce2d6880018cf742a67336f2e46f7408a92b4db770a4dae603198176d5b5df2f0bffed694f74b0a8847f2fe4f2ac085e7b86a","ssdeep":"","tlshash":"c71000000000000000000000c00000000000000000000c000000000000000000000000","size":2,"data":"","first_seen":"2023-07-22T10:19:38Z","last_seen":"2026-09-20T21:20:37.509022Z","times_seen":875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2f3f489a00553e7a01d369c103c7251","sha1":"a0509b7780628bd9d9abc7eb8a2163477341053a","sha256":"23794d91c53ae875c8e247d72561e35d9d06ee07c70c9e0dbcc977a6d161504a","sha512":"0f446282a46dfefa3995e9e78443c907aca544aff495badfcb632b9df2457f8491babf852d8ebbe7ecc9392461b559e9e242960f13e624e79dbcfca44a6e5de1","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000003300000000000000000300000000","size":2,"data":"","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-09-20T20:49:38.940694Z","times_seen":8886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d076df47b2c79b41251fe7ffd3a6aa91","sha1":"c0342db818a84a7743ec1d0b242f87cd1c57203d","sha256":"5d25745ee6a884a6066e183782faf6c8d0f8cd7f9819f628f06d324775770595","sha512":"96a5a0bb40aaa452d41ee08fd52dca62306dcbd446ec6213696f5eaf146b58023fd1a11c2abd925777f06d37d66f6e3ea2aaa37ca33dbcd425352eff8a73a13b","ssdeep":"","tlshash":"2770000c2c08320000b3b020000b000c0222c8000a82880000002ac00c3a82e0032a88","size":22,"data":"","first_seen":"2026-09-16T18:31:33.390007Z","last_seen":"2026-09-20T21:20:37.453844Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d43ef05e57cdeab7895fe8a3b6ee014","sha1":"19671e4e00cc9b5f8f6a6167c1ea8800ee539aeb","sha256":"b7893a0611b91f5fe47ce3889faf375eddbda47517f4e44c8c338eef6d2c41e5","sha512":"535346ebfe272e052e64dfa1845da29662c36e84fa5a946e52dcbb2cf4d894851a102180fb1c04603f86ec920d89fdfb62c1ddc14ea81ba4cec7d4723ad5598e","ssdeep":"","tlshash":"8db092a4a20c0b5812813919ad2b06e950e42704f82994884ac0ae2548e0a41568ead8","size":116,"data":"","first_seen":"2024-07-19T01:23:55Z","last_seen":"2026-09-20T20:20:28.141903Z","times_seen":199388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","size":1,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-09-20T20:20:28.040948Z","times_seen":146488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"07c162092ff1f1dbeaa2a7f89673d52c","sha1":"578ad5c0052554ec4fd1acde908ee57aaabe9f39","sha256":"276d7bc5e940f5c8c3e20c3a85586948c7ee2cdfc9b722092129c705cc504cc8","sha512":"76ca68efc563e0318211e38c12d355696cea41c7057d5de360a3f222a25640edbc89948d686dd01e3d6db77eab657868b34267b1f43f4c2d47e4fbe3fb47bc57","ssdeep":"","tlshash":"9cb012ec2d0c63405523009f0402618949a5c82210c9001214c8c48607f14443403cab","size":91,"data":"","first_seen":"2026-09-16T18:31:33.297305Z","last_seen":"2026-09-20T21:20:37.533993Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0cc175b9c0f1b6a831c399e269772661","sha1":"86f7e437faa5a7fce15d1ddcb9eaeaea377667b8","sha256":"ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb","sha512":"1f40fc92da241694750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252aa5e74210546f369fbbbce8c12cfc7957b2652fe9a75","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-20T20:49:38.906696Z","times_seen":80541,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f259ed018f51b861a875b9b599ea7889","sha1":"a49a63fd267d082346c74ea735098b142cede700","sha256":"9afe010c4d9e7627cd9b32b672c2a6ece73a6679deef35313921163904516f18","sha512":"84ba75b992240a11e2e130b16e5c0d748d34645ecd054a6a5ce61ffbac8a8d475cb0a7d3ad82318fd9f0ecbf6f2ae630bfec0f62d6d34ad01153ed8b6bc3c19c","ssdeep":"","tlshash":"f3c08c896ec9f460920928766543e20e5a7d9480a84a2a668122b0a62e70c86f063db8","size":166,"data":"","first_seen":"2026-09-16T18:31:33.364863Z","last_seen":"2026-09-20T21:20:37.469577Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"981dcb675c63817fc673f5ab55901122","sha1":"4de09f9d5336b24dcc0af376eb825cf4d4efde19","sha256":"3b1b26520b24a8bdfebda6671401e25b7aa2be97f50737ea39623dd4fb9a03c1","sha512":"bd1e4d7e4a2e44d4a92d9fbc5a7b20187ae2bbb8477c65d61008661f6c5368bb5208e79d682845927a35d41f18413ed2cf055b1c68d3dbf9a88c04ae1de8fb61","ssdeep":"","tlshash":"ded02b8968073150e0e3a6f173a751fc225de02c3c849924302ec5a58932d4e87757ee","size":273,"data":"","first_seen":"2026-09-16T18:31:33.456621Z","last_seen":"2026-09-20T21:20:37.500294Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e03f518c8ab53175f559734acdb3f71f","sha1":"d83620fd7ad5ae24433482cb5a51d7cad10f36b7","sha256":"52a616a1bc4756567dea095189fc068f00df704b780d9a68553a844da6a4adbc","sha512":"cf9ea9a51330f640ba98bf8ea346f0253a4edde57e7ededa716c49114baa7e4700c9dee7633438f1976829463bcc23188e79e2284932dbbc43d8e54a42bc5939","ssdeep":"","tlshash":"9be0681f9cca2795faf310d3004b511ce15aa6201c8328ef2c417eac9a11c8322c6d98","size":376,"data":"","first_seen":"2026-09-16T18:31:33.429349Z","last_seen":"2026-09-20T21:20:37.512304Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"221335ae20cd9d88bb0f074caf700325","sha1":"caa7d3bb305d5025cd4c09615d0f3c121e2457f4","sha256":"d29fc4c10ed2cc05ab28d3876aea305350891b72a6c01e4e6ce98db9c6403533","sha512":"106dd5dc1062186336891f0b04ade49591bebc176cb02187d783b4eb6d2d2839d865e14dbc0fca69a8908af5dd96a05c8177d293a4fba278f9fa1e1a41cc32bc","ssdeep":"","tlshash":"7c9002256f09110294350d135308750322448e3b0752cad4e1d25f146e8d8111bc5602","size":55,"data":"","first_seen":"2025-10-07T15:56:26.002292Z","last_seen":"2026-09-20T20:20:28.058735Z","times_seen":5473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"368f518a6a6b2ebdaa0aa84da5b65f78","sha1":"7ff4ba13e72fb6f2e3d42a0f3bebda4c09e1720b","sha256":"234629f2230926a67e1d94f5a0c052e5821ec9e9bb66b22a0889c49a42975dc9","sha512":"c7597205ff0edc5372fb573fa02305073a6d9f49a8caa583e38c41805a17fee6f4c191d106fc67734dd6fa5828070845b413c15657103ec5baf9184329516a3a","ssdeep":"","tlshash":"c19022a03c20380000202008800f083233cb3083c8c02000a0c0e82e2c3002808c3880","size":56,"data":"","first_seen":"2026-09-20T19:00:52.002047Z","last_seen":"2026-09-20T19:00:52.002047Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9e404a1a8ede4a9affd5554d012a2956","sha1":"2a5952a5ac94934f866a869a6207c1cccf32cda4","sha256":"a2ddc7756a40b5f8dc59f227c2e52623c56fdc8e59cc03d7b3c039072e6c6aaf","sha512":"1b68f6ae476ee6db308f8b9e47a0d7513745ee7c409a03a3fe0723fc41eac36abbbd9856f15b1026c4ee45d92d09d95b5c08686ae6e233a8f5f797ff9abe4aac","ssdeep":"","tlshash":"ace07d84271d896631f5d751c6170900c1e1e227a48e7cfcde49d9838d904f24963cda","size":325,"data":"","first_seen":"2026-09-16T18:31:33.307356Z","last_seen":"2026-09-20T21:20:37.435455Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-20T20:20:28.069182Z","times_seen":65038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"98568d540134639be4655198a36614a4","sha1":"2c419ecc92764743f64744ccdd6bcb85e34e5ae8","sha256":"81acaafba961bb831ec40eb965155e3486392c60cfb8c75150beaf2caffc244a","sha512":"f812e7f94d4ddea459c32918080ccb800323076eb17e043397003451e3e18617a5708d0ebbd74600ee2181c830a4892a896d321214010b0fe13bd4e52195f3bb","ssdeep":"","tlshash":"c710000030000c00000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-09-20T21:20:37.432413Z","times_seen":2297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5bc574a47246f122016869b32a6aa6f0","sha1":"466aee172dcb133d1a14592b22c63b7de3030485","sha256":"8a934fad7bbf4b682c9ee824d3fa38633175d52dc789790cf254dbf8b69e9ff3","sha512":"3c5dfa092a003f356844fec9376e4a45db1aa284ca770398d9c4f6b6fbc324cb2e3dcb56d8ed0d3f9c4d56d52937218ea4e4ca8918c2b15943ef948eb946bf09","ssdeep":"","tlshash":"c710000000003000000000030000000000000000000000000000000000000000000300","size":2,"data":"","first_seen":"2023-03-10T00:34:24Z","last_seen":"2026-09-20T21:20:37.529817Z","times_seen":5436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"26c83fbcd75272b61fdab197f5a9c311","sha1":"88069dca7efd95bce6de0b856ddd8e2ec5b2aa54","sha256":"4365ab509b37d276745d2d0740b459ada584691eaffcb798d2bdb9572e3ff1a4","sha512":"4eb1bdef551a424dab50336778677e41797e35f9aef0f7370aa5f85daed94b589ca8777d95c64088f9fb05a193e1747339fa490de8c49c6e4af7a9de41550371","ssdeep":"","tlshash":"f7d0a7c4795c64618997487a6443e50d45bc6509a185ff1d100152c14a754810b36649","size":211,"data":"","first_seen":"2026-09-16T18:31:33.399375Z","last_seen":"2026-09-20T21:20:37.526474Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0aa8ff1cc09fda40eab3af71f670e5e1","sha1":"815dd9bd7c9e1b241d6c16b2c8eac940076c90e2","sha256":"dd06f2dae7f3fb2f0575c428f84cc71d77733aed7cdcc913838a7e2b9be3182d","sha512":"c555cc5afa348f3c3ee100458a6efe1ca5012a9b92706931e90e16eeec92f997f9a1992f7fa69262530734ba915f5f787ae06c042e0c5d94ea118753ba73ff47","ssdeep":"","tlshash":"af9022000c0f03e03033302c00c3000202288ea008888800220802220bf3c0380282b0","size":55,"data":"","first_seen":"2026-09-16T18:31:33.418871Z","last_seen":"2026-09-20T21:20:37.481213Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d9196aa7a9e7849b12517839b169fcc6","sha1":"5525ad5d0305116988d5c284b04f732a3d0e5ef0","sha256":"b97ce66a2856d3d0c519082d319b154c778d0a60dcdac3f56467fb57436960f8","sha512":"c8b4888048c605d938d4bd94251d3177d5fc02741eca000c3f37493f41df6e4950d8dc155887d261d30e1accc82b45791901d4ae95bb38947eef667d3dd34c34","ssdeep":"","tlshash":"ddc08ce4e1089d883320a46446ab810aea6b8a470984080cc00ce3a00b404f832015a9","size":142,"data":"","first_seen":"2026-09-16T18:31:33.436442Z","last_seen":"2026-09-20T21:20:37.511005Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8e937b25633890f51ba1a40f1a6d5bd4","sha1":"c46ebf0d69c47258615f1a61e96e89d2a606c67b","sha256":"da7c2e77d423ac99770fb143be99c54cd57521ac596855cc134a2e27d2ba5627","sha512":"f75ba73530ab5667df5943ce05aa9f9fcaf72e1024df250a731bad249ed68eeb75f788bb222435adb1a351848d2c87ca7f9be0568662ee2779a0c48c40e312f6","ssdeep":"","tlshash":"a7f0dc89e4e91b560cf088ca498361a9061cbc250cc21d1b7c0d7b39b1715dbd282b18","size":470,"data":"","first_seen":"2026-09-16T18:31:33.340203Z","last_seen":"2026-09-20T21:20:37.451814Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"af6052653b581f29ae65ae15fa9d68bf","sha1":"ba401e2b363ef143baf9fc6a4703294e597a6760","sha256":"917868036cd7340e387c9e734561729db5ed706291c49771d4a80c54c77f7f67","sha512":"9ce5a1a70ca6d292562d6fc9ceaef33b38a08b1233687dabb58c50e2b470c27cc72144d9b96ff540f0b8c075d0b6b6f3eb56dcdc6b8d61cf7ca892660bb13b08","ssdeep":"","tlshash":"e1b09bc4f2d155b15591d08954726515e7f69850550129794421d46e58d475a08fd412","size":118,"data":"","first_seen":"2026-09-16T18:31:33.32823Z","last_seen":"2026-09-20T21:20:37.528167Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"83ba45d21c1baf647ce69d989069a9d9","sha1":"aa0ef0a394bc19b7cdf2a61d4eea94e4649cba2e","sha256":"387f95b4abfaf12e0973b84b81105e7f5fac55d1383d8256b79068a9092d66f2","sha512":"f73ab9ecd1529f0afd561bb8fc2e64f185dd6d51a4f7c1796f2608e3455f7c4ab2b4d8a96551f3257a9429a802eed46452251add984bc349022a5282dc7ffd93","ssdeep":"","tlshash":"bfb012dc2e0c63405563009f0406618949a5c82210c8001214c8c58a07f10443403cab","size":91,"data":"","first_seen":"2026-09-16T18:31:33.392524Z","last_seen":"2026-09-20T21:20:37.464585Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"804ea1443b8c16c88991b410a13cad87","sha1":"80457ea083809e2bc7dfbf5c3d4a0ea81e0e0aa3","sha256":"853e2f2a7dc8f2f6366dbc31abf824a97825eee04505bb1bbdeaffc36f90af27","sha512":"f89428d1761a53c3045cc37ccb5712c553c9778e01bf76e511cac6f77acfc70dc4de758db2575da7c09f20ab4c4bbb58226e3ec888f79e5d2325f13fad620af4","ssdeep":"","tlshash":"0670000c2c08300000b3b020000b080c0222c80002800800820028802c3a80a3222a88","size":22,"data":"","first_seen":"2026-09-16T18:31:33.366793Z","last_seen":"2026-09-20T21:20:37.483963Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e3bab79f69ab6752f83c7ccf04d88a8d","sha1":"be10746d83abffb95ccf04ef8dcef1594da2c46c","sha256":"240a0342beeae4f800d130dbc8f665f090c6fb7eda79b8c77a4e6282cff8337d","sha512":"f8dfc7e15e5f7affb76037c624c27e9d226e37698a1cd45e912e3eedbcd128d9cddb9cfa81e859b5d5136787fee60d024b382149666d87c27d001993aa466f8a","ssdeep":"","tlshash":"c7100000000003000000000300000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-10T13:43:18Z","last_seen":"2026-09-20T21:20:37.522039Z","times_seen":342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ce52790629679d930ca16c39a4f619c3","sha1":"ee0f8cc4184386a9ea57f2ad391a9a25931db3b2","sha256":"a416210db204162c9b9edf88284cd027cbd5fdeebaf2f95377fa0c95be2b5584","sha512":"ce656e09f323e3006bd0ec4a1dca5eee8dd44fdef31d4b6937cd85a22d64bfdd2213a722a11cbf8ec7f7b4609568ab5c91f2d744839dc3ad9735646049113bb9","ssdeep":"","tlshash":"c710000000000000000000000300000000000000000000300000000000000000000000","size":2,"data":"","first_seen":"2023-05-06T10:43:22Z","last_seen":"2026-09-20T21:20:37.504495Z","times_seen":707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"17cdecb1c005bb18b70e8e069cf9cb0a","sha1":"33ca7e0c0f7dc46733ef924d1962b35e8c33ac03","sha256":"1b73464e88e3b90c98db0264ea2b4c5e095545dcedcbf9f7af33e5e8a18c9a0d","sha512":"d5d41d6729448967a95ad713bddba2d62d5e54e3d8cbe4632580a293dc5a980b99f78da2fee2514a6bb97bf2ca7ee272e3228761c60d76594f1105bdc9dc2819","ssdeep":"","tlshash":"87c08c812b04208d03fa0c668a13108c321b31616a588a131098d039923408a0042ae6","size":143,"data":"","first_seen":"2026-09-16T18:31:33.310388Z","last_seen":"2026-09-20T21:20:37.462272Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2a63d582b7fa718f167aaf0e333d2e43","sha1":"5d3f4d9ea7e1846c7ad9de715bc98171297b1db9","sha256":"2548ac8251cc6721972a891f619cdf0ad9dd58c3606f6b4a1524dac0034eb594","sha512":"98a3762c07c8e6964f275add3c782634130f56d888b96d565e79157931120d2847377642ca692779386f12b0478c6d5d5b9f4fa7857fa57e7346495ae8d304a8","ssdeep":"","tlshash":"2470000c2c2c2c02003ab020000b00088022000000800880200003c00c3880f0002a88","size":22,"data":"","first_seen":"2026-09-16T18:31:33.308355Z","last_seen":"2026-09-20T21:20:37.524903Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1879ba4477024900e92751d9ecb552f6","sha1":"e2861a7ff888ab5600009f7183898315df5520ed","sha256":"5347674cc8760e5732b4b6e4d6c2801dc099ac4493b048a298efbd4f93d83c51","sha512":"fdb36ff828d14d698908e2ece5f86529ff638fd2c7f1fe7f0a5ec20eea3450b3ac5eba00a0a1115c2b64b224dbae42e129dfef8724d530f2c7c556c528c0bd58","ssdeep":"","tlshash":"a1e068d62337f03261f044aeddc3aae6c823219169cc040dbb4ef7c00592ab5b340747","size":356,"data":"","first_seen":"2026-09-16T18:31:33.402352Z","last_seen":"2026-09-20T21:20:37.501733Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a514ae8f4be3d2857c9847f369d5ab8e","sha1":"084e3e66411f3a6dbd28ab000ba73f39e69f3036","sha256":"db78d0b0e8912455bc3b43cd1fe00ea2178823fd656a2676f10ca9dac99db194","sha512":"334b4b55c658709cc467ad485662c531bca6684698c1ab84d766f2dd3fe7c83629c979d8482b919f0551ce67ee9f4756dc919ecf60ea034ee0b9ad42beb38e1c","ssdeep":"","tlshash":"7c8000b080b8a2cc80888800000000088c882080322000aa0008a082330cc808a2c022","size":26,"data":"","first_seen":"2026-09-20T19:00:52.018045Z","last_seen":"2026-09-20T19:00:52.018045Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2ac6cc2e6434c3db7291b230f3c36b39","sha1":"83248f08cf444e72a1273d19cd599487a64182eb","sha256":"fbff3de6e2e3dc94a34f0cb32cdfda81e3f354b4b9ec4f5c70f50de28d8ccb2e","sha512":"94f09f42bb6de11d1478a714a0970ec708d2d32068ccbff69acdc1e2b3db4de187c82702825f2b74a2bc46940fa3d7351a8d9a4d254b3790570e275afefe081a","ssdeep":"","tlshash":"c710000000000000000000000000000000030000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-14T08:41:52Z","last_seen":"2026-09-20T21:20:37.523446Z","times_seen":3194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a2bf364d91c65964491d6ef7c0a36c46","sha1":"a3e56dbce4f021b4a4e4c32a88843c8633060a61","sha256":"95474ef85f37ce52c279f5c5b443859b5f339ac1cd2b0bfac23f87b6c2d8aa32","sha512":"2cef66e485a1601325e91c252e2c3702659200a80a096229929dc9d2e1e93978a162f7a07863b0e78a0c2c7da421143ae41c9d72ea7e85a4cca9c7fb65d736ed","ssdeep":"","tlshash":"c71000000000000000000c000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-13T14:26:45Z","last_seen":"2026-09-20T21:20:37.448931Z","times_seen":1209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9eb559c968c92491e07287a7cb7d1828","sha1":"d38d1e6dff59ddc3a3db838da13863c371c16405","sha256":"9f625d5d300db3215d8bb92f843b3678d40bc98207bddbce8b2eff42b899fc40","sha512":"aa01ac103633ed86076049ad2ee1d1c65b896e3c2e62183557541dc6bfa276823a1149f7a5847e4add53f529086f32fb2aef61882d8b73396581e4ad17e7ace3","ssdeep":"","tlshash":"13b02bc42f1c0000018848761813540c803cf811bf024474c029d0311b325e230a6085","size":126,"data":"","first_seen":"2026-09-16T18:31:33.303884Z","last_seen":"2026-09-20T21:20:37.531983Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8805fb639508868dc527522061306dba","sha1":"d572c9c4221c6e9e99e83d21f71866bc5a927f57","sha256":"32bc32d417ff5905f7c7b2f053b396dc4b3a6584a4cf8f9c74361caa5b3188ec","sha512":"fb9c459037d61724ed8343121185b921de8b717cf1ea94e266e1b041af8654eb74219cce3e9fef32589f731a7a567afa7fe92232d97ae6e867af18773e00f459","ssdeep":"","tlshash":"e2b012017c4d20281a517133255b0004049cb5113c050c01407bc94803a24c5104209d","size":88,"data":"","first_seen":"2026-09-16T18:31:33.414803Z","last_seen":"2026-09-20T21:20:37.479563Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"14127e8e60fa1097671e9a3c7b7c41f6","sha1":"cfae4aa3683794241f1ab4c7b384d32e33b4c9b4","sha256":"e0fb4f949b6e220715fe17c20e12135b66e63b84e04a185e77a3b3d471554136","sha512":"d2d9db1824504f492bcef20df24f526128b78f663bb133e19a445ca964bb9b4cc8c35f9671df314f7846c47b7ac93025b22fa7ae3a79d6600dfbd33b572d9b0c","ssdeep":"","tlshash":"e0b012892d093806552e562ea0371234f27aa51c580408354044d10023604892ad34df","size":96,"data":"","first_seen":"2026-09-16T18:31:33.362109Z","last_seen":"2026-09-20T21:20:37.47072Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-20T20:20:28.044371Z","times_seen":163582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2b98e493c6189318467dbaf28fc9f6d1","sha1":"9749e042806f87a144de30a95aec6be53ffc1f2d","sha256":"be8849bfba2800cf2d7c4b42a33b9e4ef1d7215f866832b1924b17952dc98618","sha512":"cfc3f7d2d53aaedc3f688b6d682eb54fce7ab46db4d9d635c904d7cf1e8c7dc196cfdc0ad3a58fbd079fde000596a95f6bb5693942a547b7d2f3a7479f6e5366","ssdeep":"","tlshash":"c710000000003000000000000000000000000000000000000000000000000000000f00","size":2,"data":"","first_seen":"2023-03-07T01:27:27Z","last_seen":"2026-09-20T21:20:37.471295Z","times_seen":1075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9cd3045155944e05d265e0bb70c966a9","sha1":"9e41052dc36a64867f3d256b5147a4e32b69d1e1","sha256":"f025817868ba4acb567b3539d3a2d8f007500a0947919d2786bc8d7e3d861988","sha512":"e84042d6af95f6841c8e8b77ce65b50d7edb6860b033b67f4b06019a38ae1a4fb4eef59de621a5cad84ff4462d78ecd7733884d985a1dc9b8ee72e92eecf8fcd","ssdeep":"","tlshash":"afb0122d2f5d647dc7d43314092742deedfb052a1d00280ec300a88018f8fc548adf64","size":109,"data":"","first_seen":"2026-09-16T18:31:33.40137Z","last_seen":"2026-09-20T21:20:37.472814Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e9a37f3e0fb21a99b7f6f56446bc76e7","sha1":"77a23f2250c7ebd2fdfa205379651b74c49efa80","sha256":"fc7885de030ae327a4f3272afe0613ba1061eb70468415f845ac71979cd107f1","sha512":"9e5af3a503259fda6ac6a61d7301b2efe063d590cdf2a70ea2eb382f6136b17d651c5d0c79d73d4b9d114d4117c055e151de576552b0fd3bd6b3ebec089c5bd0","ssdeep":"","tlshash":"09017599204d11bcf007f2acd07b12960f62f376d0258e92dc07e2e68ea1435f595bcb","size":777,"data":"","first_seen":"2026-09-16T18:31:33.332564Z","last_seen":"2026-09-20T21:20:37.510327Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7435880c6fcb53d52a6aab383342ded3","sha1":"b0504da4424d2ed6c185bbf971526ff977f103eb","sha256":"28af4b19414c52801c58cf23574cbe0d8a6fcab420ccda64805f652c2524e3cc","sha512":"e3a96587180ae270e2f1861c44b6e858302e6b3eb2a46897f212dde6c1ac9a1ad4faa127278922cc4be903ed5254115e541658597f608fe42f16f632f07e59d7","ssdeep":"","tlshash":"7cd0a7dcde4c5dd636bda84e56e3c118205cb9787854270620cdc0a525708fcb645a7e","size":251,"data":"","first_seen":"2026-09-16T18:31:33.431904Z","last_seen":"2026-09-20T21:20:37.480636Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4aae7fd3c815b1cfa3660cb3227a214c","sha1":"4531c0c13ac8462f9dd8f0dff0e13b1c3e150bcd","sha256":"cca00c516ba05df351915a75df4db57659d685c5af3622cedbba3c6b626af2a9","sha512":"c2f67d5e011e7ad703ab55ea89f91fff91b4245f5294cb73ded819757eb158102fd038f24b175c1f6eae717100cd63d9e9529cc90d124cd90a26ab4a1f650d4e","ssdeep":"","tlshash":"4d50003c30003000c0c0003000000000303c000cc0c000c0003c03c0c00f0c00000000","size":11,"data":"","first_seen":"2026-02-18T03:26:52.257023Z","last_seen":"2026-09-20T20:20:28.117638Z","times_seen":92687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-09-20T20:20:28.036282Z","times_seen":175133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-09-20T20:20:28.093926Z","times_seen":182895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7c92cf1eee8d99cc85f8355a3d6e4b86","sha1":"5573e39b6600496d40f493d00ec7658479a19607","sha256":"82f3e9c695dc6b8d1b11818d5701919e286de8d47f7c3eb3100c485f79e57828","sha512":"d5f6e7b935c471972a3bf9676cf01405180e24fadaaeb9aad1d0bb1068d2be0ed8b7315e7a4c41638a82f84af240a4dfcc4905a80c901eaefc7bdef19edcba9b","ssdeep":"","tlshash":"c71000000000000000000000000000000000000000000000000000000000000000000c","size":2,"data":"","first_seen":"2023-03-10T13:42:55Z","last_seen":"2026-09-20T21:20:37.539464Z","times_seen":6008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"01b6e20344b68835c5ed1ddedf20d531","sha1":"4374aaee247fb237ce6c97d5c8d64bbe474d16de","sha256":"663ea1bfffe5038f3f0cf667f14c4257eff52d77ce7f2a218f72e9286616ea39","sha512":"34b7851a703d3381162da0ac1bbdab36c91d38f99d3d04cbc5d8f49c51c5bce64d6db6235f933d5c2028cca9f1f8b137c680161261f982f97ab212a68ad23cc8","ssdeep":"","tlshash":"c710000000000000000000000000000300000030000000000c00000000000000000003","size":2,"data":"","first_seen":"2023-10-21T04:54:37Z","last_seen":"2026-09-20T21:20:37.546771Z","times_seen":1001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"174bebae6ae33a04cb2cee5b36ca6e45","sha1":"a3a36cca32988b236dbe5dbc5d85c3beb3c995ab","sha256":"bdda37d474787b88f0456203d6d7c7a54b62f925b27907633e3abab48d89a637","sha512":"687b66df219c21bbc6f0d7486820b48018f5989cbd040a537f6fc69f4a47fab151aff8aa36410172a8b67b08ad977fe7c71f73ef56c1879b272fb95c3d48cd53","ssdeep":"","tlshash":"1ad0959f7c5c941ec94f195d6443f411047cf04f32c08c670107110003cdd0d2322c16","size":251,"data":"","first_seen":"2026-09-16T18:31:33.334654Z","last_seen":"2026-09-20T21:20:37.505106Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d719e3474e3c719d3e29055b761934a9","sha1":"7b160679ee0c8a4176d704dbfad451f607670acd","sha256":"17fbac29be39e07fed4e88a79916d38d3781e74bc14d44a2d3e53d909b45d5d5","sha512":"d6967a3a8c80f06bfef8f49144c5406609ea095a9fe13d4d20c2e1837d2b37c2eae1eb02b303865b2c8bd9499ee4c27f251e48325ae4badbf48cdea98e7b8675","ssdeep":"","tlshash":"1aa012017d04794024fa043580432a0c093d0270250504940005c8910b7004502955b6","size":78,"data":"","first_seen":"2026-09-16T18:31:33.445709Z","last_seen":"2026-09-20T21:20:37.543977Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ac567660e42a3ed9f341fde1658fab5c","sha1":"cd59d4708d7b0e649e01da6649784a0b16f7bdd5","sha256":"be61681317ef41e9e7edd2ab59f1c0e99b95001e5bb31f800bd4d852b7cae12f","sha512":"439f0c4f015b0794bfd7998a5c60cdc7b01354a6ddebe50c93d29081092e6cdd2a37bdfc3bfacd8adc26c2335fa7459ee77f2874ea5b579c5bcecf9ff22c3143","ssdeep":"","tlshash":"8de0c27b995438ed730e3104c8d6608804edf27636682d2811800080ab29dee728d67e","size":297,"data":"","first_seen":"2026-09-16T18:31:33.407118Z","last_seen":"2026-09-20T21:20:37.547305Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-09-20T20:20:28.067591Z","times_seen":192273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66a4d9708fdb6dd5597f3bbc7d624","sha1":"e10a66fa8a836f6f948941262b70e1fc928a446e","sha256":"3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89","sha512":"06c25bc4dba52367cbe19252c1a013e1714a198141d139939944422266aaaed60ea3953c5d0f890a7f9ce7887c5f2a4cbb47173d06f829d50ac33f6f353c015d","ssdeep":"","tlshash":"ebd023cb729c1114574337141eef0448bc64b4d70dbc941d8649581058011ede03aecf","size":195,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-09-20T20:20:28.123794Z","times_seen":215225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/popup.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5632f4f8e280e27acbf42fd4d495242f","sha1":"41fbc9b0b33c628b2b43e36746755ff5f5a3d8a1","sha256":"01a5656ceefcabad1eb952c49536b65d7e80799bb74842eab974fa1eaf817b75","sha512":"16e8315e8fb2b9f0c3cdf6ee3ea3b8c1b15df154af9e92b5499e3f50d2ab3da3cacc3da452f6db7854f2e81894f349dea1a73a45c4cc5e8d36fae872fad672ac","ssdeep":"384:UzCKMPZATN09o0mtEMDXYddj512IHVxBCZlXbtrts:UVMhAh060sEMDXbbZzK","tlshash":"ac72d95d06b7103a5e231229feff1b0c60ba42578100fd22bf9ddd865fc1aa8d6667d8","size":17294,"data":"","first_seen":"2026-09-06T08:00:50.052311Z","last_seen":"2026-09-20T19:00:51.821444Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e42f92a6b2533abf0c032dbfaffb132a","sha1":"aa0d39900454a2c4775cdb828817eb2ca5a2ac71","sha256":"99865ef15066a0e39128db946547ff051325ca4daace032faca1038ce7a069ce","sha512":"9a4456c522435ded2f5224b2c66e5d0d25956411d887f7fc438895261a47a51b6017f27282cfbebdc64f2732ed86370bce24fba594e7567ecefa6a9135123d70","ssdeep":"","tlshash":"c710000000c00000000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-13T14:26:45Z","last_seen":"2026-09-20T21:20:37.458955Z","times_seen":587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"abb70a69bd8e9fcf7e742085f963da6e","sha1":"994c0231c8ff86801625a5be0cd5a4821e204eb1","sha256":"7bcbef5e983b02d6cb841961f19046046ffac9ba501d7cabd3fc8a6dd318cb5d","sha512":"a20b085b5d3cee2e07e966cc25ffe1f272a51952c069c8d0c645d800bde7c5eb5371556efd813af5f76df47741aac2cafc0318850c11629567fc85fe5479b37b","ssdeep":"","tlshash":"3ee026e60c1560be63ab537034e67ce61641748f612da78b247bf4e00aab83fe188303","size":345,"data":"","first_seen":"2026-09-16T18:31:33.394143Z","last_seen":"2026-09-20T21:20:37.512942Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0e6020401dde5ecfa06d83fa4a8581cd","sha1":"506a039eafcd718e4e7518c2c79167a13e837031","sha256":"2fced3997a387cdbfb8ff5172c2e9bfc7f06aec372e47aa388cf8923917c19e2","sha512":"f0f399b5fec8b3aaaba0e98e54030efd02b43d3d667f3a6091c3c141f4af9bb3c42e295253391f3e49de103bc452931030050f872a95fb2657f93990ffe6c40e","ssdeep":"","tlshash":"5ee068d62337f03261f044aeddc3aae6c823219155cc040dbb4ef7c00592ab5b340747","size":354,"data":"","first_seen":"2026-09-16T18:31:33.419954Z","last_seen":"2026-09-20T21:20:37.456891Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a2e63ee01401aaeca78be023dfbb8c59","sha1":"ef67e0868c98e5f0b0e2fcd9b0c4a3bad808f551","sha256":"87f633634cc4b02f628685651f0a29b7bfa22a0bd841f725c6772dd00a58d489","sha512":"5d68217d0c3ddfc029f1f8f2e61a80a8256342f27893ff0fe55da861e75325d6f7c805a26cae587f01aee7980700e8f06422c233a0e2a8e9bf26aad0c39e00c6","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-12T14:32:33Z","last_seen":"2026-09-20T21:20:37.44695Z","times_seen":1387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/bootstrap.min.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","size":55775,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-09-20T20:02:53.813558Z","times_seen":4710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/zE1wsox6mlI6vW7qaXUn9CXAmrkG-Mkw0oAR1wP9fow.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc95640559093295f42e61bbd9687b78","sha1":"63060e0e1182b8735f3f0944421a672419ae427b","sha256":"cc4d70b28c7a9a523abd6eea697527f425c09ab906f8c930d28011d703fd7e8c","sha512":"6cc42a70161bd848648b3724a81c822f63b20022ba09db46224e829c35d4105119428649a50b11aaed2d66efc9bdde563c4b073ae6c30040c7c869f737b22fde","ssdeep":"1536:jLt7xrQtnha4ZIKW8QbNc1Ndqui/HrksERf3ZP+W:VghSbO1NdTiaR1","tlshash":"5153f7cfb6d277351ae2a2d24057450f92bfa51a4c88585fb909f6f40e7488b503bfb8","size":64164,"data":"","first_seen":"2026-09-16T18:31:33.254379Z","last_seen":"2026-09-20T21:20:37.395284Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-20T20:20:28.005548Z","times_seen":349363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1fc34c69a8372fc5affb3782d8327af3","sha1":"0d64b36676f62125c99ecc247735be85d639455c","sha256":"e7146e029ee5840190b03b9392d4b625d5f67cb13c16c4721d0e1941d5726fc2","sha512":"120ffbc24f0d45d7a9215383c664d8e661a983730a709fa207374955dbaa6bd73f15c32cdc21df9206096085158caa5221996e86abf013fc55a81d5e9df41df1","ssdeep":"","tlshash":"5cb012dc6d0c73405523009f040261894da5c82211c8001214c8c44607f20443403cab","size":91,"data":"","first_seen":"2026-09-16T18:31:33.304907Z","last_seen":"2026-09-20T21:20:37.537505Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c0fab22982defa6571c3b003c1c9e0ce","sha1":"e94931ef5f871f11fa0a52057365adf178f61fcd","sha256":"930c0aacf7d30873c979c7e26b359e9feac75fa9b0b31a1f58f99064506bad8d","sha512":"8bbe6c5d50658de5e66c6da9165c30ddba40e9cf37830667b8b394e75af35d9c7d8becb674e3374025dd735dd9f731adb0c5943e2602b92e9bd9fff8741de380","ssdeep":"","tlshash":"b7c02bc45e81dc3c3cfba870f09b200c09f337b9a1890a01c12cc0502364048b226ed7","size":148,"data":"","first_seen":"2026-09-16T18:31:33.38155Z","last_seen":"2026-09-20T21:20:37.518478Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"95882ddf734ce9aa3dc1583a95089d86","sha1":"8da38ee2d197cc3b7aa2bdf62829e435d82e43dd","sha256":"59b510397ebb3aecb2c8b53b2689a68cd5cfe7bf7ce7e4c61304fe09867def86","sha512":"e4cad9097afedc522e18cc2aea1149c1fd8494ee0e10f41a80896f3c9570569dc4d4333f754314c5472de4bcdf785b0acdb1ab093cfd9e9cfcfc4c989f3cabe3","ssdeep":"","tlshash":"e7d097494487b922b3f0f9348a24a082d80340281c7628125edcaa2c0e4ae8063dad49","size":235,"data":"","first_seen":"2026-09-16T18:31:33.31928Z","last_seen":"2026-09-20T21:20:37.467329Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5594,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-09-20T20:26:48.98787Z","times_seen":24920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b774effe4a349c6dd82ad4f4f21d34c","sha1":"51e69892ab49df85c6230ccc57f8e1d1606caccc","sha256":"0bfe935e70c321c7ca3afc75ce0d0ca2f98b5422e008bb31c00c6d7f1f1c0ad6","sha512":"58007911bf9f66711ef65e807b26c396a2d6fb464f4381520c5d4a575dbb81510f79d35e349604128a771acf2a117a2afdedc012d83b0eb822668aee0def4747","ssdeep":"","tlshash":"c7000000000c00c0c000003c0000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-09-20T20:20:28.034992Z","times_seen":49970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2284743fe8a6178f117d584e3091d6e","sha1":"93d24c83d4a695e2a463bf66ea18a3e2147e9148","sha256":"8cf878073f71bf93dd67f56aab913b4a584f5ea15c56ea7030f96b9f26f23a4b","sha512":"7aa1cd340f7dc20e2259c9ef76fc6dd184133548d47ee9cf1c300e8ded20ae3e298748b874bb735dc639bb025be759096e3edfedd1c0396a094748bfe2734cf1","ssdeep":"","tlshash":"28c02bcf30c6da74817d001203179dc48107349f114b808743d040e400174908c1dcd7","size":138,"data":"","first_seen":"2026-02-18T11:53:38.7823Z","last_seen":"2026-09-20T20:20:28.062511Z","times_seen":87833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"85c19c2d570aa311c48f0b7796628a04","sha1":"ec65b399e31e916af18de2f7831d7a7f7108feff","sha256":"48459f27fd74ef41117611336b65a7a59258ac5714680b6f119806974910e651","sha512":"a300fb37e9f54d04dc72c3f4e95bca62de1bd5dd879efb2b3f085ba103ca67403f0f6a91f66655e6be972fa7eaed6690a40d1468d55ae4b72b9464cf41f34aac","ssdeep":"","tlshash":"dbf07daba3c147e8b66a9277b8834d967c7790b00a4c55185696f1f385c09f5d8ac902","size":616,"data":"","first_seen":"2026-09-16T18:31:33.325717Z","last_seen":"2026-09-20T21:20:37.485135Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a931635074a5017da74948b67e16c76f","sha1":"a6799582ad16a7c1ab8221c166268130df6691d2","sha256":"1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c","sha512":"7c96bb515bdba9ad60854b433d24e77982a321dd7ca71599fd8f79acee580802f56829a5dbb7f64932a51ad50d18a9438251a6ad8127ad2b2e332811033d2c7b","ssdeep":"","tlshash":"a5d023cc3941f262d06274b9041704dfd173384a1e1cdf4184154875667c5d9407f4c4","size":206,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-09-20T20:20:28.130719Z","times_seen":215190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c62bc4fd3c4e105cb3fb62fb748d59c","sha1":"f6e2d1e74e35ec4c4740ba02e890b98bda11417f","sha256":"9f4a6a370cd350425d8ac08047e7646116468672e99765ca198e6d463ee5286d","sha512":"5cb125ce0b7fdde81c6df58f6e27943a130f0d9e2a366d94ea8ed926da635dfe2b2c5778a14ed99bb35c7b2a48dcd12090cbac18370611d1c0438e1c2621efb4","ssdeep":"","tlshash":"6cd0129b738060e3d797fea709580020c1ef0b8402d2753d42d5d51070fe9ce83461e3","size":203,"data":"","first_seen":"2023-06-16T07:31:00Z","last_seen":"2026-09-20T20:20:28.093318Z","times_seen":198433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/4fd832e7/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6062264bcc5585f2c169a58e72d7599","sha1":"4cae9ee8ada22cb795456e6df296ac7a9b0f16c4","sha256":"7b28bc24de02d27025bb4d1b1b60c8b911db9050cafa06c09b0161a7e7011aa0","sha512":"fd88304c96a0630238637287efeec3054afd12e17c1c47879140fe126a86687886c14f2ce28b227bf444f8716e4be03307c02481cf3aa297a769ddb92b7de938","ssdeep":"12288:csccDe9e15/8VHvoxOmu2mL5x+uQeZNvN4XP4Vn81Xq5EJeFBYTX8WzgNi2X:c+Qe1KPoxqdx+uhZNCf4+SEoFBYTyNp","tlshash":"54755c8537a2b42743a2e4a9a95f0103f57e2c4c9408c1bcf9bddae56d74d0a607bfb4","size":1624126,"data":"","first_seen":"2026-09-16T19:23:09.671616Z","last_seen":"2026-09-20T21:20:37.517857Z","times_seen":425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.qm0uBrmE8W4.2021.O/ck=ytembeds.base.d7UHKqYQujY.L.F4.O/am=AAAAQA/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywH5QkKR-Id92dYATk3-S7HIBoFgng/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8327c0133126206c210be4d2cf0f814","sha1":"86dbb9aefbdd3398ebbd4b47e4ac228b88eb5628","sha256":"a23b771a7d345695c15713967cb78b43b93cd116ede668db7319f2624340d427","sha512":"96899dc954294e03f3772f0f4c02a1f780b0389e7a647c198720846609cb21da77065c4a8864b5646ac7e4437dc61020db97dd2c22d5162d1f22b8a95da5467f","ssdeep":"12288:GuBrh0EencTyXGld16WDVcIm4zDSG8UvCeoBJjlXc7WPz6/wWXqkZTNvl6hkTeu7:d3xc4SLTKCNIdoZ8cgk/SmuWl2xYNMsq","tlshash":"7f159ff0b35231b5e1077e65f9b78003b67e5502e10818acf0a7be9c56fc9a82d76729","size":898250,"data":"","first_seen":"2026-09-18T15:45:00.788062Z","last_seen":"2026-09-20T21:20:37.429831Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d91b3086c461ba10081c181a65f27251","sha1":"5141438e89e621f6adee701617109cc7cbf66958","sha256":"94e6d602cdcd4b222f2068bfe759eaa1d7a2b8c2eb17d0e79eb0d18b7f5eeef7","sha512":"3240e7d412c79ab6e5f5c2524d0ed4f768b50a9ab1c97f04449a80c4354120cfdd56bcecd9d8614110bef73299a411cc84ef3ab1a4de368ec6935f5f20f6da65","ssdeep":"","tlshash":"d9a022320ca02b000cf0303c388b0c0008cebc32b30320c00020c0bc0fb80ca0223afb","size":72,"data":"","first_seen":"2026-09-16T18:31:33.395272Z","last_seen":"2026-09-20T21:20:37.476874Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0278638048c0d6e8fd7837c015e64d22","sha1":"5f337164427a1baa69209b3b7467c8fdcc9fe836","sha256":"b68c15616f59a2e901436901f9dd99436ddede28eddc91dbbd87899afe690e81","sha512":"7239446671aab8f4f4379ab76b3b773426c4df3e07fd1126cbde6820f5fe52ce6deb8c2bf57fd41dc2449ff3c72a824a97b63161231bab5e0ca7a8b46d52ed18","ssdeep":"","tlshash":"d2e02bd82a429e7372d8f7c8d0ab0300c636450264cddd48c389fd404aec9e35b3bc69","size":298,"data":"","first_seen":"2026-09-16T18:31:33.378349Z","last_seen":"2026-09-20T21:20:37.543449Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e3571e3b916706e86c0644acc80582e5","sha1":"8dc786cd5598ddfca34ee5fe38db76529b336dd2","sha256":"322a782361604a257d957ce6b5e8196839409448bfa05bbce628ed00182d366d","sha512":"21e82e6b2b677a4af70bac029641d29da9bd5420a3136076ba913fec71d1e0c31dc64f94f3fc1cac788cec5fa86cb221c799704018ffb6c6eddfd85f0e9f5c1e","ssdeep":"","tlshash":"cbe07d62be833512572b524734033e8c053d1a2aac6f885a6910f0e0496fec781234d3","size":303,"data":"","first_seen":"2026-09-16T18:31:33.435436Z","last_seen":"2026-09-20T21:20:37.545074Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"814c6df525930b717a84d771d6284940","sha1":"c7a8771bb3ed762101155345f40a209e7b496151","sha256":"cad5b54da0377a4f8aba53a4e0b7516032ab504a92d31d4afaabd16fc7962abc","sha512":"3c68f2e387e83ad824ab0db37fde820a31e348ef55f9be7e3cb56da46871a6fd1ea95d11def8a9501e8ec3a3dfe12909525d86ac6d7d02df34aefd9a4550658d","ssdeep":"","tlshash":"a4b012d9b65449a6310eb39843369dbcc1f7754509b00808a27ef8dd3f7871207f59e4","size":108,"data":"","first_seen":"2026-09-16T18:31:33.396907Z","last_seen":"2026-09-20T21:20:37.517092Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e085cfd640d33bd9f5873206beba1102","sha1":"75e0cbf5aa476ce8d7b69f1db6bbe4d52bd89b85","sha256":"5318b38afed853e0a869a48dc580d39ff42d12feca1527eeb1ec84f2651eab31","sha512":"54e56c16d06eb7115237811fbaf081bb47d743d2989c17a49613a1c3db1947ca069276a9986c459a87852f6cf1de1bee5c2dbfe8fc1a2edb372b24fbe1b67ff1","ssdeep":"","tlshash":"c59002c93591965921c16554150b8426d8194c3204897404c95206612d60127801b61d","size":56,"data":"","first_seen":"2026-09-16T18:31:33.31343Z","last_seen":"2026-09-20T21:20:37.489201Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ef5217284762e0dcd54bf1f48c2ad454","sha1":"e1b261d4f7c6c57a7a878909d9526e4df7e2dbd6","sha256":"6d912d85bac7936316b7f15431adbfb9f73eacf28daf5211efca674138649f17","sha512":"1853d7f8fd4c8d216089e65b836fdd6dc770e50237f3d671acdf9f58153116b824aede285f02f1702f331717b1ff722655016ae3eec7f3d2a1bc3ed5865b2c66","ssdeep":"","tlshash":"61f062e5704a283d0a60ff728023238c8412a5212e07dcf6b529dfd1c633063f2e21e7","size":640,"data":"","first_seen":"2026-09-16T18:31:33.369875Z","last_seen":"2026-09-20T21:20:37.43612Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bb235fe6be2010c36786127eafd2fb44","sha1":"7aa8233fbb6cacde3543e919b97def3ed07c51e1","sha256":"6ce6294a9fb256bd1c74cdeacbb57b30815b36124d69d49927a60245f1b9a161","sha512":"d11eb622ef36aa461a3dde9583672450136b1f1a16e4cb6f6ddbdcaeaf4af26fbf87383e82330114022a166def7ee959d301f71ffc39479f221a633138f85d3c","ssdeep":"","tlshash":"a8d022c91c6320b82b8da3278cf7d64acbebf1034747c60a809c3a3c6c834626125e83","size":202,"data":"","first_seen":"2026-09-16T18:31:33.398382Z","last_seen":"2026-09-20T21:20:37.540415Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d48a24ae9672ee573050e4d3aeeebe4d","sha1":"8f8c4d27852980a1ec5a8b1aba30769001314ec8","sha256":"53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255","sha512":"02dd385ce15083c89617859325e29ce885ae235c8c5be416828066dcb5db78e69229802d87aaf759224e2656ab4c23bf1740ae1d357cfdb57ebf78ab77488921","ssdeep":"","tlshash":"43800020202088288888200b20308b8abaa0a228a83a2000a08c8e2cb822e80a038820","size":29,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-20T20:20:28.001471Z","times_seen":196925,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","size":4,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-09-20T20:42:07.603027Z","times_seen":293824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-20T20:20:28.123198Z","times_seen":245354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-09-20T20:20:28.108125Z","times_seen":184037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eb0459bfce4185888ecf61fb07987581","sha1":"6ecc5900b43c207e98d1ed6eb5466775394dcae1","sha256":"2da1328d303231148fbb72c789184345c17a07537b30cc89882911769b6340cc","sha512":"b2c3752fc57b6076539a3d9ea92a668789b0325060535e38e89d788af364290cf0ffed671897ede3441ea9b526ebf7bcbaab0d5d03f821aee87ad9bac31aa408","ssdeep":"","tlshash":"c710000000000000000000000000c0c000000000000300000000000000000000000000","size":2,"data":"","first_seen":"2023-03-12T19:03:08Z","last_seen":"2026-09-20T21:20:37.45988Z","times_seen":1419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"44f3750ed60b103707a540560b4c9007","sha1":"3dee379382549a4613ca98e94414e6c2048943df","sha256":"1c98fb247cb1462735e61f7f421f5a3fa1059d6fea74e4520b34142aaf1c4ef4","sha512":"c3777e930945335b485ce8093933efa38c16153ba5e32d2ed497a74ea10167ff235baf3fe7185e650a8afda46ad93d97153b370f088d52a1d4efb5fb50afa0e2","ssdeep":"","tlshash":"99d0a7c4abe2655483c0942705233321daca2551ec095351c320f75bf6e094b251b4e5","size":235,"data":"","first_seen":"2026-09-16T18:31:33.423312Z","last_seen":"2026-09-20T21:20:37.511653Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3391110bc2a73231436d29b17b0ed1cc","sha1":"e17b86af377a1e3300ab8102d8a38997f4f2dbbc","sha256":"7be58ecd146c3f3d7eecf303d5b0ffda215a1b8194f42c6a75a175b9c44cf5aa","sha512":"3e07d544176c4958296d7f8f8765963bdbca0d6e82a57d31e06df243afade250dcc2dec51debff945119864cd171473eea5aa445db5205d20daeb3480b4868e8","ssdeep":"","tlshash":"6fa0220a8c083830f0000fbc2a2332a8282e20303228080a208882b08eb0ac8bc203aa","size":65,"data":"","first_seen":"2026-09-16T18:31:33.400377Z","last_seen":"2026-09-20T21:20:37.516502Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4e7ad097239541ffc068367c59541263","sha1":"ae9450311a2b7104ddc8b7b81af0aa36899ebe3c","sha256":"5a39f5f1a4d81e2479826e2cc678b5b680fe4bd93838397dbaa01b3d7d497e5e","sha512":"8c10eb1c342e12fd04c06e2fe7736d33d933bea6a316c9414ff4b056aa0327cdc581617f1bfcac9bdcb5aaf747a6a62993b0a7e96ace35f56bca57604289f53a","ssdeep":"","tlshash":"75d02e83bb3c03a40301ba9888e3803873cfc82229cc9acca2072ca286084e7c04208e","size":260,"data":"","first_seen":"2026-09-16T18:31:33.368046Z","last_seen":"2026-09-20T21:20:37.549313Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f502ac14e14405587d798139e860b5f","sha1":"b267cfc679f39f2d95f9d3fa41bca0eafb931aa6","sha256":"39d2483e41bf71db160191d9a148b4bc26c0739e732727e37be0f18bdc8cabca","sha512":"f5bc3d4834c9c4ed165d49476795fb1170fdc577b58fe4b21dfc67cfb4f6eebf045a3812ef48a2f15758e790ce7e111cf9dbd9ffcc3438288c7340e6eeb7661f","ssdeep":"","tlshash":"b1c022ccbb3e600d9121f90031f84e46cb4125ac4407ede3a70128b4448180aca1f406","size":194,"data":"","first_seen":"2024-08-23T10:18:17Z","last_seen":"2026-09-20T20:20:28.153314Z","times_seen":184166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5c244fde4e6f1ade71beed5c11edb59","sha1":"6bc634a7f8505a2ce340807aecfa1e50c2a578b3","sha256":"d561924e4295103128924509bbe71b3eed6625592d75ba3cc35c365189d6081d","sha512":"6ed66e7a246ab961cedd150553b6a9aa692988813dd4ee30c8b7d78d80bb8765a828112c6860d08eb382cae34e22bdd76ecda5ee1c9c7ee25a49b1d2639474f9","ssdeep":"","tlshash":"966000300c000330c0000c00000c0000003300000000003003000c0000300c0000000f","size":13,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-09-20T20:20:28.059265Z","times_seen":181923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"[CoingeckoCoinPriceMarqueeWidget] This widget is deprecated and is no longer maintained. Please visit https://www.coingecko.com/widgets to get the new version of this widget, which features a new design and better performance!","filename":"https://widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","line_number":7,"column_number":63396}]},"http":[{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/slick/slick-theme.css","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.175Z","timestamp":1789930778175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/slick/slick-theme.css HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1165\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5362,"size_decoded":1474,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5d5467913e6993e7ce475116c74587a9","sha1":"7a9aee7ad36f6eba9a213967b052cb807a02c7a2","sha256":"e69bdf0d68f559df15d9fbddb2b0346b78895aa6e06de6c87236b28d5e2be5ae","sha512":"025c4c8e04461f15b402c00fad86fcd56e71bcdf856471b9036a4a50bc5fc73fa8a57a45287fb5683df6932bf990b74b76c8f9044a6830c53b085bca0ea18a79","ssdeep":"96:+V15CEXdql+MeDpaX806FjAf8YwkKbZk5PueS/Fj93:SP3XdcTGp6804Af8YwkKbZk5Pu1l93","tlshash":"5ab113aca506e1c6163388803fa30755eb9b30431f110eacffa413545fbe0ac5ad9b9d","first_seen":"2023-05-11T19:38:54Z","last_seen":"2026-09-20T19:00:51.766984Z","times_seen":597,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/moment.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.184Z","timestamp":1789930778184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/js/moment.js HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32196\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":150941,"size_decoded":32434,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-09-20T19:00:51.767659Z","times_seen":1599,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/bootstrap-select.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.200Z","timestamp":1789930778200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-select.js HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24735\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":111455,"size_decoded":24973,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (301)","md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-09-20T19:00:51.768332Z","times_seen":701,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/cannabis-legalised.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.327Z","timestamp":1789930778327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/cannabis-legalised.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 930888\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":930888,"size_decoded":931156,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 3421x2280, components 3","md5":"f55e2332080c6ca5b67439ab15811e30","sha1":"8a61a7af5f8d96d2bd6af1f43f13f672f608f510","sha256":"ed936bcb16b618378dc87b1b26af543bbc3664ac748d2a50996e4dc73aa63338","sha512":"a92172a0bd59b7681686640bbbe19b15a1ae503fb29b3a59ac8b0fb604d84a8ea759e5d42a7868d7ed12b3b38a0892380d57843fe673552845e39a9b8dd3f6b9","ssdeep":"24576:DJY81E/P6hLJIgGKclCawU7UUXngziBeDsUp6tGkHXq:DSfAJIgRaw+3gxp6HHa","tlshash":"2b1533747e46cde3d2e92a823059061c736efdb6bd1b5a08362640d166c3587fe9133e","first_seen":"2025-03-18T04:27:57.403157Z","last_seen":"2026-09-20T19:00:51.76902Z","times_seen":552,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.d7UHKqYQujY.L.F4.O/am=AAAAQA/d=1/br=1/rs=AGKMywEw66IOdckEzMKrVOb5pCav8uG0Ww/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.053Z","timestamp":1789930779053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.d7UHKqYQujY.L.F4.O/am=AAAAQA/d=1/br=1/rs=AGKMywEw66IOdckEzMKrVOb5pCav8uG0Ww/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=21.YT=IUVmBwxAQpsi4ok29V9505JXPxVX_CldIM7UzLf5lhchEFnHWbljy048Gq1qvD2mcv9AJwMN5ZVH6o4m-uLwkuoCdYp-thEgzgyb8-Rmc58R-Qq2lxrZvenvTfAdGCrreshBFWymUgrgw3XBzMYgUtcac3pviMPTx8w5BE-3CDiplXBEODYvdNUxTFFiobwXVk0OphKl0Jc5-Nr7mohxF4FzA_0cIIchnPIgvQyBSHD6WZM0Iv8QofBf06oc20AumZX1uku_N00K5Rs7T_mj_pxW-0B0W0BgXu17q4mxtoX8eoqWGTVIYQAyRFolkvxvXtjV5ecV0-E97OXH9yyHSQ; YSC=3mAYq-92sA4; VISITOR_INFO1_LIVE=NlBBMLIh5jo; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUw%3D%3D; __Secure-ROLLOUT_TOKEN=CMSazNr24Y7amQEQ8cz74ev9lgMY8cz74ev9lgM%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 0\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 12:55:40 GMT\r\nexpires: Sat, 18 Sep 2027 12:55:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 18 Sep 2026 09:11:44 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nage: 194639\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":857,"mime_type":"text/css; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T20:47:15.730746Z","times_seen":18573756,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.069Z","timestamp":1789930779069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 18 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 204431\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-20T20:46:52.016497Z","times_seen":995106,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:40.029Z","timestamp":1789930780029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://www.youtube.com\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 272\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 20:17:02 GMT\r\nexpires: Thu, 16 Sep 2027 20:17:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 06 Sep 2023 03:18:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin\r\nage: 340958\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":478,"size_decoded":1017,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e78ea4caa31c35bac97a41e5930ffe8","sha1":"dbf99131b9b5087e664b9fdc7097c97655474517","sha256":"6fa88a20839537ae66da730e5bd183035265176d972bc8df075b89da0c6186ea","sha512":"cf798ef67c90f90f23635beb202095a2c76052d491c224aa14535bb9b16f28fa9a850b8db887f158afd01d634aecb9e2b05a27efdfd225d3583e6297bdd78b43","ssdeep":"","tlshash":"2ef09e6d577829d8930f87c0be5974127d9f23e85194b3b541d4f9326138ee2d141cd9","first_seen":"2025-05-26T15:52:21.952281Z","last_seen":"2026-09-20T20:20:27.905625Z","times_seen":53840,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":16,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.210Z","timestamp":1789930778210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coingecko-coin-price-marquee-widget.js HTTP/1.1\r\nHost: widgets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: qdG2E7yuprzpD92tmuQTHsg9WLeSp2GAwFbdpwF/9TG6OqrOcrw49t0xAy9Ru0CuvBXrKO3HxYfGer2Z34j64aw/9qIl8DZg\r\nx-amz-request-id: VXPQAT8JR3CV0BYQ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 03 Jul 2026 04:41:16 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: pUfu3vFk32PoX9Yh9wO6PBDW1nhUzKSO\r\netag: W/\"c943d4422dad6300bbaf689c2211180f\"\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 597217\r\nexpires: Mon, 21 Sep 2026 18:59:38 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a3e311846990568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230974,"size_decoded":69828,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36129)","md5":"c943d4422dad6300bbaf689c2211180f","sha1":"4cf78792b3a9dddc6f2ee8219bbfdd213194f144","sha256":"d8d3d9a390c75f612142118d3281d85b95cb50e84c2f6d9438daa83efa8e2437","sha512":"c5516ee60fdc9e900036dec072c7c2de8d01dcfce22fc901048697428c43604ea8dd8d907abda960ce8aae5201ec7f649300af511c8bcccac469a9541f0d9d4f","ssdeep":"3072:/uPfvYNJshGWDSBttCWINmVZrnPodE5rUzpI4Oz:XYBctCo2c4Oz","tlshash":"bc34198eb6c0f19947b693e9605f394ba77d28fc68884380e972f4e5587e05c6132f6c","first_seen":"2026-07-05T23:38:03.171209Z","last_seen":"2026-09-20T19:00:51.771785Z","times_seen":430,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":21,"connect":71,"send":0,"wait":64,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/storage/app/public/photos/SfhdiZ7vM9qdFmFLEmqZdCqmbCO7RwyDFspa4lit.png","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.241Z","timestamp":1789930778241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /storage/app/public/photos/SfhdiZ7vM9qdFmFLEmqZdCqmbCO7RwyDFspa4lit.png HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1242\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1242,"size_decoded":1450,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"c6a5abb575f4c14729b299058539998f","sha1":"90a8e0cfc7695944c9d28f3cf908ecbeb3367d0c","sha256":"7271dd5c11fb9a1052a5e91a09afbe7d148fd3388dc51c338df62a0a16f06739","sha512":"80fa0b7d01774d4a68e42ffd4b874c60a129684d86af168699905342e95af7ff7bc84559ea5a2619a600d75346b41664522b621b7bbe3fc7b5d14448568865af","ssdeep":"","tlshash":"7721843ac1c1061af0334264fb81f7983619825192970f603b9eb177facd0bb52a37c8","first_seen":"2024-02-20T08:09:53Z","last_seen":"2026-09-20T20:40:27.861714Z","times_seen":3101,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.612Z","timestamp":1789930778612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 20 Sep 2026 18:59:38 GMT\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23175,"size_decoded":1494,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da021909beab0ff8237ca3132d715150","sha1":"cb4dfe7ecbaffe34c9c0f7264a20376fea1c3c02","sha256":"c598de7a97f99eca9a992b31e0ae65ebb1c1744981af3d577c965041fcff3594","sha512":"2ce8f240884297d891fb4e24220c80e23067b7d9185aa514deeaa9b04269f061f1a0cf806096ab311b78ad83467682e96ddcf9d394fb0e9746c4bb7ce702ace7","ssdeep":"384:cO3B3u3UOCZVOrkOOc/3O9K4O+VZO3wyOYbbOJW8v9AeUtGv4RK0:ddeU9Al","tlshash":"89a2bc66142fa580aa472ce337df3d31df4fb194b450887a6ffd2898ac56c22636630c","first_seen":"2025-09-17T09:11:46.441038Z","last_seen":"2026-09-20T19:00:51.773045Z","times_seen":680,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":4,"connect":15,"send":0,"wait":37,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/proccess-box-arrow.png","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.810Z","timestamp":1789930778810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/proccess-box-arrow.png HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16334\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16334,"size_decoded":16600,"mime_type":"image/png","magic":"PNG image data, 1490 x 263, 8-bit/color RGBA, non-interlaced","md5":"0dd316e116e17f7d7517466f824ce9b7","sha1":"4543ef53c6fa9fe6e4a3247e3549a2558d9c8178","sha256":"70a4fe15a5bd83d6c6be718edd76d79f376a2ec053ed4f145c10a89f7722ca83","sha512":"6d7a588326f88ddfe15a0ef2f0c114793a7be74c09c1ea24cbb69dab07a37f1ebcc108da1968f8a8f04164b2d0110d1d75e649545b83ee998b30fb9e2b1fbf20","ssdeep":"384:k+EBl/lCSqJz6KOG3QgdziFeKzU6Cb0HC63jjfLy:k/RlCj/BRBigKzU6Coi63jDm","tlshash":"a972cfc7e09f1c32dd446a7af0fb1f57b694478e0a6041717fadcd6518239486acbc86","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-09-20T19:00:51.773606Z","times_seen":566,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/jquery.min.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.177Z","timestamp":1789930778177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/js/jquery.min.js HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29664\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86927,"size_decoded":29902,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-20T20:40:27.873014Z","times_seen":145446,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/livestamp.min.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.185Z","timestamp":1789930778185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/js/livestamp.min.js HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 590\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1414,"size_decoded":826,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (520)","md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-09-20T19:00:51.774873Z","times_seen":630,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/css/animate.css","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.189Z","timestamp":1789930778189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/css/animate.css HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4459\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77907,"size_decoded":4768,"mime_type":"text/css","magic":"ASCII text","md5":"91cc40989e5e96e8d6bddc0f19598441","sha1":"77b5378a2b4bfc120e52782dd869aeab7efe2fd4","sha256":"6b6b686ecaa56e02ec5aced95541a03f922f599b31f1b4cd429ceca824a6e669","sha512":"90750a22634147d99cc10d6ee1120bb6c889982eaee77f5b82445aa5f1ab6f05db90fc5f6a9933017bdd1a7ad3bb76e518d5c73c25f4925ae513bcc0661afe8c","ssdeep":"384:oNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLcec:oNuKuWg9unuLuJu9KIZQMcLcec","tlshash":"80732fad2991108456638a1d83df5e68673ce573181aacef73c2488fcf8bf6857c9147","first_seen":"2023-04-05T10:43:58Z","last_seen":"2026-09-20T19:00:51.775555Z","times_seen":24801,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.760Z","timestamp":1789930778760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:59 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376059\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-09-20T20:33:55.895983Z","times_seen":10029,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":3,"connect":34,"send":0,"wait":18,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/slick/ajax-loader.gif","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.803Z","timestamp":1789930778803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/slick/ajax-loader.gif HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/temp/custom/slick/slick-theme.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4178\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4178,"size_decoded":4443,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-09-20T19:00:51.776719Z","times_seen":47114,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/images/row-bgimage-2.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.815Z","timestamp":1789930778815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /images/row-bgimage-2.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 402\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 18:59:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":916,"size_decoded":639,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"611e30db491dd03ddc998dcaf0ee2809","sha1":"429218a9f5b8715e25b15c016d187129eb179e41","sha256":"38d729eb9237a213ef1aa2fc9e253cb6b6a98c7c28ba5591c31155a34425f02b","sha512":"dc67c1545f3b30c7a14bc30d2c8d9afb067fe68f6e86e0ad669ab4d45e6f5585621068cfd3bf7362c90d057bd3cec8d633b0a20dc10574a845cab9a7a6cf9493","ssdeep":"","tlshash":"6511237f44151a7e1211c2627011332cc0dfbf1a6e426980e16311aa6ed47c5c5fd59d","first_seen":"2026-09-20T18:57:13.650789Z","last_seen":"2026-09-20T19:00:51.777339Z","times_seen":2,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/slick/fonts/slick.woff","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.864Z","timestamp":1789930778864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/slick/fonts/slick.woff HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/temp/custom/slick/slick-theme.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: font/woff\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1380\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1380,"size_decoded":1645,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 1380, version 1.0","md5":"b7c9e1e479de3b53f1e4e30ebac2403a","sha1":"af91c12f0f406a4f801aeb3b398768fe41d8f864","sha256":"26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc","sha512":"976f6e9d65859b1a5e3bbd426441e6885d1912f5694f40e2897b10f46b3bd0c7d940f7917a6050d6bb8cdeaaa5e5f0332391d3d398f6c21ce27299dfc7036911","ssdeep":"","tlshash":"cb21a55dbda5eb19fe9ed376738497e1bb1e849db2a20246990e2e3db280040a880655","first_seen":"2023-04-05T04:33:55Z","last_seen":"2026-09-20T19:00:51.778472Z","times_seen":26365,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/about.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.289Z","timestamp":1789930778289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/about.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43712\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43712,"size_decoded":43979,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 570x590, components 3","md5":"6662d34c4f26f1f26586d8b0718889cc","sha1":"1ca95815bd8c654a8365e6139c7bfc3c7e0af298","sha256":"48fb855c939d83924f83ac5349c8ef9d349ed88299720755a5c4870c5e6374bd","sha512":"d9996ba23333a2b4452837d7875cb6df0203d263d1d44c16afca1ea126d398cdd1b3d3c37ccc25e402bb3022359d0669ecd0adde0fcf379d4ed0d61acb260f3b","ssdeep":"768:TmNXFtG2SzAhaf7oHK1sNolxl6K7CMV55gRWDwyCe+dPLiHnGYRhCeN1:TU1tG2SzAWkKXHl6K7LV0jH0n3RB","tlshash":"2e13f10085136a734b169cf6a32bc469d44affd693b092ce9b30c0692484fc1db976f7","first_seen":"2024-08-19T16:43:15.382088Z","last_seen":"2026-09-20T19:00:51.779246Z","times_seen":552,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/forex-investment-sm.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.313Z","timestamp":1789930778313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/forex-investment-sm.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 104779\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":104779,"size_decoded":105047,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"6d151c71ab3804dd08464df134c5eb5c","sha1":"f61ed4d743c8ac0234e6f658bbe73fb8ac49016d","sha256":"1b96f6c6d53f390d0364b45bdab190e4f66e357e1648023acf2dfa6f0de3f3d9","sha512":"0c092a4e518ba544cf24b6fb50371b794c42c30c8534c09ac58e197cc5e9d57370d3834d717d8aa3ec1680000616d3ee9bf175941fcdf1fb17ffcf27042d2b59","ssdeep":"3072:ZvsEfdDR84g4acvSPqKdLJ3r9VfCyb9CwxX5:Z0uR8IacvSP3dd3rOOX5","tlshash":"e1a312754d4f85c99ee1473293d48db20fdd8d615b80cb69ba2e60aebd72826e407b30","first_seen":"2025-03-18T04:27:57.381676Z","last_seen":"2026-09-20T19:00:51.780458Z","times_seen":555,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/738/large/CG_EOS_Icon.png?1731705232","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:39.062Z","timestamp":1789930779062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/738/large/CG_EOS_Icon.png?1731705232 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: zs/KdI0HUoRnWia/JNqtMvv70ycY0JkoX5HkXtM5hK16EBvf12vQ8n2VAQqKes9JnL3y7uuSEg5aCm6Vy5ny7wWREwkA9S/V\r\nx-amz-request-id: V2GT9HWWW6TT5MB4\r\ndate: Sun, 20 Sep 2026 18:59:39 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 15 Nov 2024 21:13:55 GMT\r\netag: \"e57d503851189addb2768cf2c838a64d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1WzZRILTVssxSmYKEl54vLexpATuWM8L\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 7000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uG4p63xKg2aG7iHGDXD8sYbteaWjAFaDQd5GeLfpjUjxPN2Jjv5DhYc9yPweU6mpghpejwN9TtzPcZvPlvIVlUIgOQf7x3Yh0S2QB9b6KjdDfGvAxKUsyJKwVhODAQ2P9iFlxrHHrokXVtoh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a3e311897c388755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24537\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24537,"size_decoded":25500,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"e57d503851189addb2768cf2c838a64d","sha1":"9e549bcc32f84550061ad391348c883f900f208c","sha256":"16bd234f9403281e3bcf1eaa6d291b47c6b051926b942e7790e9ca114bcaf511","sha512":"a2b016e9c4b77bee3c47f4d47b3377aa178fa35e961eb4abcdcf7579bf9c20a0557a350858a7e99760d66f20c12f222352be0ae9482542785d56a2b512d0c587","ssdeep":"384:IrUUKAlDpY+iqWepCiwr4bAoMKJTGa+YQAi9bUxAivP5z9SHb2hhMlRepSTtIvQq:IRPfTWeLwbOr+Yqbr+z92bp5+oq","tlshash":"85b2e053bfa045652f998c7090bbc24637f78f81d55e0e8acabd192c7fa72c451d720a","first_seen":"2024-11-25T11:23:20.548553Z","last_seen":"2026-09-20T19:00:51.781156Z","times_seen":1302,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.qm0uBrmE8W4.2021.O/ck=ytembeds.base.d7UHKqYQujY.L.F4.O/am=AAAAQA/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywH5QkKR-Id92dYATk3-S7HIBoFgng/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.396Z","timestamp":1789930779396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.qm0uBrmE8W4.2021.O/ck=ytembeds.base.d7UHKqYQujY.L.F4.O/am=AAAAQA/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywH5QkKR-Id92dYATk3-S7HIBoFgng/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=21.YT=IUVmBwxAQpsi4ok29V9505JXPxVX_CldIM7UzLf5lhchEFnHWbljy048Gq1qvD2mcv9AJwMN5ZVH6o4m-uLwkuoCdYp-thEgzgyb8-Rmc58R-Qq2lxrZvenvTfAdGCrreshBFWymUgrgw3XBzMYgUtcac3pviMPTx8w5BE-3CDiplXBEODYvdNUxTFFiobwXVk0OphKl0Jc5-Nr7mohxF4FzA_0cIIchnPIgvQyBSHD6WZM0Iv8QofBf06oc20AumZX1uku_N00K5Rs7T_mj_pxW-0B0W0BgXu17q4mxtoX8eoqWGTVIYQAyRFolkvxvXtjV5ecV0-E97OXH9yyHSQ; YSC=3mAYq-92sA4; VISITOR_INFO1_LIVE=NlBBMLIh5jo; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUw%3D%3D; __Secure-ROLLOUT_TOKEN=CMSazNr24Y7amQEQ8cz74ev9lgMY8cz74ev9lgM%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 222760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 12:53:41 GMT\r\nexpires: Sat, 18 Sep 2027 12:53:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 18 Sep 2026 09:11:44 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 194758\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":898250,"size_decoded":223674,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"b8327c0133126206c210be4d2cf0f814","sha1":"86dbb9aefbdd3398ebbd4b47e4ac228b88eb5628","sha256":"a23b771a7d345695c15713967cb78b43b93cd116ede668db7319f2624340d427","sha512":"96899dc954294e03f3772f0f4c02a1f780b0389e7a647c198720846609cb21da77065c4a8864b5646ac7e4437dc61020db97dd2c22d5162d1f22b8a95da5467f","ssdeep":"12288:GuBrh0EencTyXGld16WDVcIm4zDSG8UvCeoBJjlXc7WPz6/wWXqkZTNvl6hkTeu7:d3xc4SLTKCNIdoZ8cgk/SmuWl2xYNMsq","tlshash":"7f159ff0b35231b5e1077e65f9b78003b67e5502e10818acf0a7be9c56fc9a82d76729","first_seen":"2026-09-18T15:45:00.788062Z","last_seen":"2026-09-20T21:20:37.429831Z","times_seen":326,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?on05ug","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.853Z","timestamp":1789930779853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /generate_204?on05ug HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=21.YT=IUVmBwxAQpsi4ok29V9505JXPxVX_CldIM7UzLf5lhchEFnHWbljy048Gq1qvD2mcv9AJwMN5ZVH6o4m-uLwkuoCdYp-thEgzgyb8-Rmc58R-Qq2lxrZvenvTfAdGCrreshBFWymUgrgw3XBzMYgUtcac3pviMPTx8w5BE-3CDiplXBEODYvdNUxTFFiobwXVk0OphKl0Jc5-Nr7mohxF4FzA_0cIIchnPIgvQyBSHD6WZM0Iv8QofBf06oc20AumZX1uku_N00K5Rs7T_mj_pxW-0B0W0BgXu17q4mxtoX8eoqWGTVIYQAyRFolkvxvXtjV5ecV0-E97OXH9yyHSQ; YSC=3mAYq-92sA4; VISITOR_INFO1_LIVE=NlBBMLIh5jo; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUw%3D%3D; __Secure-ROLLOUT_TOKEN=CMSazNr24Y7amQEQ8cz74ev9lgMY8cz74ev9lgM%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 20 Sep 2026 18:59:39 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":172,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T20:47:15.730746Z","times_seen":18573756,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/css/bootstrap-select.css","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.205Z","timestamp":1789930778205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-select.css HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2208\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12860,"size_decoded":2517,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"3c13518e758f95b39f33ce9249aef2ea","sha1":"edbb8b3ed265e6a52a60d58aa45309f1716fb056","sha256":"032c55f8092688bd96e242ab5c1b7c63d8c04bd502ef4bfadb277e7ac57ddf47","sha512":"6cad1c0d0875376ef0cc6f9cb0a1bc161a535ba54301a9ef48b9005974d729c924496b81ae36d46e3b3beb96e75d7b7244a2bf66c2323493c5db70a728787561","ssdeep":"192:NAEV3IkN9UXliukFaFfF70Vi2Ar9kyWSDCJiUzuDcL5:kliu9F70Vi2ArLlDCJn","tlshash":"1242119db3d202704099806a398a7e6677dee451324eccb973dfe25c2f80543e9377a6","first_seen":"2023-05-22T09:42:17Z","last_seen":"2026-09-20T19:00:51.782478Z","times_seen":631,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.cryptocompare.com/serve/v3/coin/chart?fsym=BTC\u0026tsyms=USD,EUR,CNY,GBP\u0026app=cp.vexotra.com","fqdn":"widgets.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.787Z","timestamp":1789930778787,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /serve/v3/coin/chart?fsym=BTC\u0026tsyms=USD,EUR,CNY,GBP\u0026app=cp.vexotra.com HTTP/1.1\r\nHost: widgets.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T20:47:15.730746Z","times_seen":18573756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/44/large/xrp-symbol-white-128.png?1696501442","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:39.064Z","timestamp":1789930779064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/44/large/xrp-symbol-white-128.png?1696501442 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: N8ud0GZ4WWk25Py3PawfslX9hr5oALvbo2VVyhjH2dGFtli6xcNtTXR8LycVBTKl/wHkPf2oZOgxGr0GLzLBm8lniAEIKDRm\r\nx-amz-request-id: AFBJG1VHJY2MHM3Y\r\ndate: Sun, 20 Sep 2026 18:59:39 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:58:49 GMT\r\netag: \"8c9a8c477f324c88cead49db9a5fc1a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: dvTdjQhaHPc3d2gEiPjuvrzI.pMVPEqU\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 5803\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ooto6jjAXtKutI%2FHqiK9vyN%2FJeVD1guo5qaghYIXr5Zpdc7LNOk3W7D4S5%2BkYF0sa0nlQLdjAJI3L288NqTmyBKVZoVjGNKynfvHniT8hD95tOujJ5hshaNMttV1qANruglEUeoo6pQK%2FpQ5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a3e311897c378755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12328,"size_decoded":13301,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8c9a8c477f324c88cead49db9a5fc1a2","sha1":"8a8a7c615c7f00893e4c3374ad134581a053c8ce","sha256":"3672b3785d85e582ef497a6588dbe75cef4c60f982f678549f309fe784400a2b","sha512":"849e4018007f9b5406d4910a2da39689fcf847bce6f8586c7db389066af1efaf9ae8ae5bd374401b285d988a16fc2480be1e813a6ae3e2af78f485efa523fab4","ssdeep":"384:BFv36FCrffjNiI0gXcwWIzS3qJ+GmJQauo:jIqaGK3qJGbuo","tlshash":"56429d3b1465c94a4b535f7ec1ed4bb386f31224cdf224e69d781a02db0e61a2f390da","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-09-20T19:00:51.783119Z","times_seen":1948,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:45.898Z","timestamp":1789930785898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 18:59:45 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa903df-891\"\r\nexpires: Tue, 15 Sep 2026 08:45:00 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k5CH/8nb2xQBFB7Ha39AFnobmAeNX/PCbuuatFLq/7TxPW9zIJ6YR08R9ogMAcnGoQUMRD4\r\nx-77-nzt-ray: fdb54123e70223e3462db06aadd13239\r\nage: 469185\r\nx-77-cache: HIT\r\nx-77-age: 705\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1044,"mime_type":"application/json","magic":"JSON text data","md5":"d3bf99e1aae5fe61840075977c32fc08","sha1":"92e9f68592ad767e421e2d9d0fc2dc090fdbfc7d","sha256":"a46e74c0e02a932725399c083e9c080d89a74355efdc44c0e689384355c3220d","sha512":"7a0d22bc90615e11450cfa9de74c58942a1a0872f1e94cb70fae4aaa556c4bc85bf088a5f4072fc81550de014285423822523f5aeb8c5f1079dcd480817ce904","ssdeep":"","tlshash":"7b415783c4b80d431b8c262bb89655415d50c3c7ec893d4e766e9a7f2f4cea910e677d","first_seen":"2026-09-15T08:49:00.586011Z","last_seen":"2026-09-20T20:55:55.054533Z","times_seen":174,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":32,"connect":8,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.120.204.223","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:46.193Z","timestamp":1789930786193,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cp.vexotra.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 6ychn5i0QkeJ1Ca87368UA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 20 Sep 2026 18:59:46 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: veullqx+JHgEJbcwNtTfrE/QnXs=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T20:47:15.730746Z","times_seen":18573756,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":77,"connect":94,"send":0,"wait":29,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/2/large/litecoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:39.065Z","timestamp":1789930779065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/2/large/litecoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: 5EP3Oq/gZHOd6tbGB9gVCc2uQTvgfwdCg7Ktg/NU45EfkDduqHW/mwW9oNgiG5U5+LkXEgWRBHs=\r\nx-amz-request-id: Y9E7JG7XFCQ7R5X5\r\ndate: Sun, 20 Sep 2026 18:59:39 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:40:00 GMT\r\netag: \"2cb0c91b0d82542c140d900d549dddc0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5qPrLUbI5j.JglMI78Hfu1JUQECZPGFM\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 1829\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DRYi0xGvS1B%2BGBmMb%2B3zElWqy%2BHvDqDsVVEa9fhhT059YN719wuUvUiHe8bawa9abNmDf9J%2FYRZxDFNdQ3mzTsto3EMsHWVukUNSJz%2BHOHrUXRmL1fWfQkCWI2H7NnC50kfLTYHcMbLbiMHy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a3e311897c368755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7680\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7680,"size_decoded":8634,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit gray+alpha, non-interlaced","md5":"2cb0c91b0d82542c140d900d549dddc0","sha1":"ed1c900fca53fc1b94a536c76bf2c9760424ed9d","sha256":"169ed6742d2bc4098e00de38a610578bd6e98227e13a8b38ad47cd977056385e","sha512":"a660f2ae5c860cdbc7b5b7dc8e2408ddfec249c5de96ca269ebd01e674c24241650bb719fccab0f4139f94eba25e65b231797c0528fbc94202b516d6419e28d5","ssdeep":"192:NSGHHL/j2qkaS+zipeHxwauyPXfEsYF7yWgX1jjBghvnFDoz:MGHrrDkdeRwaNPhFW+lgZ1e","tlshash":"65f18e96df82af6cc6915575f8b78734814a0f0ad6ae4907f9dcaf0ab94a3004be6012","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-09-20T19:00:51.784307Z","times_seen":1242,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/jquery.form.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.182Z","timestamp":1789930778182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/js/jquery.form.js HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11763\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43811,"size_decoded":12001,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-09-20T19:00:51.784938Z","times_seen":804,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/css/main.css","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.188Z","timestamp":1789930778188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/css/main.css HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jun 2024 19:39:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7274\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39430,"size_decoded":7583,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b39b120d982a43061d75aff36836cb66","sha1":"3cc164da9117c9aa3ff45f851b6cd730df19ec3f","sha256":"0b901f67aabcda491e6312f3b76e33088cc544e4c645805025c4b4fa9ba7893a","sha512":"048ea04696d476cca6ea3bcaabd9b038f39c28bbd3e491eea296ea532fb276ebe8783f62f2562e9f9c494df49842572ca0ac33e91a5361e4080782d780cb9fa9","ssdeep":"192:B/JTy7mDXgPQ4DFcDwDFcDWDFdDlXds3IQh7a2TAsDElyHSXmtGsd0+NUCcHNGXo:8KaYjDHjhUCNQ1jzp7PGX2fMd5Xedb","tlshash":"0803509cda1621037237dab867e20756fb6440a3cb02056cbbddb3518ff45b88662edd","first_seen":"2025-04-28T01:39:11.801543Z","last_seen":"2026-09-20T19:00:51.791763Z","times_seen":333,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/menu.svg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.244Z","timestamp":1789930778244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/menu.svg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 481\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":982,"size_decoded":794,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"464397bb0033a309123c20bdc1306166","sha1":"1dd2aff9a642f3c01942fafa22fa27483762f223","sha256":"dc1db702ebdb8a1218082fd20e55ec5a0af59e92393f2a7ab7f9bacc790499a2","sha512":"4009186075ca4204205219bdd31c92c89ae212af6a4c90688687333e02bba751ac4a6eecb54d363c42e7821d13e25e5100df3add3e8f9d1b05f5512e9c477f90","ssdeep":"","tlshash":"a311214f4752dcbe243643a877f425c63bf08c57c1b149e09a273c37f42d5608e99168","first_seen":"2025-04-28T01:39:11.795951Z","last_seen":"2026-09-20T19:00:51.792555Z","times_seen":570,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/x7msE3tx8QI","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.795Z","timestamp":1789930778795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /embed/x7msE3tx8QI HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script', base-uri 'self';object-src 'none';script-src 'nonce-WDHWQ6jY0EmQoGLrniGAxw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-YNID=21.YT=IUVmBwxAQpsi4ok29V9505JXPxVX_CldIM7UzLf5lhchEFnHWbljy048Gq1qvD2mcv9AJwMN5ZVH6o4m-uLwkuoCdYp-thEgzgyb8-Rmc58R-Qq2lxrZvenvTfAdGCrreshBFWymUgrgw3XBzMYgUtcac3pviMPTx8w5BE-3CDiplXBEODYvdNUxTFFiobwXVk0OphKl0Jc5-Nr7mohxF4FzA_0cIIchnPIgvQyBSHD6WZM0Iv8QofBf06oc20AumZX1uku_N00K5Rs7T_mj_pxW-0B0W0BgXu17q4mxtoX8eoqWGTVIYQAyRFolkvxvXtjV5ecV0-E97OXH9yyHSQ; expires=Fri, 19-Mar-2027 18:59:38 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=3mAYq-92sA4; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Mon, 25-Dec-2023 18:59:38 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=NlBBMLIh5jo; Domain=.youtube.com; Expires=Fri, 19-Mar-2027 18:59:38 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUw%3D%3D; Domain=.youtube.com; Expires=Fri, 19-Mar-2027 18:59:38 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CMSazNr24Y7amQEQ8cz74ev9lgMY8cz74ev9lgM%3D; Domain=youtube.com; Expires=Fri, 19-Mar-2027 18:59:38 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"21.YT=IUVmBwxAQpsi4ok29V9505JXPxVX_CldIM7UzLf5lhchEFnHWbljy048Gq1qvD2mcv9AJwMN5ZVH6o4m-uLwkuoCdYp-thEgzgyb8-Rmc58R-Qq2lxrZvenvTfAdGCrreshBFWymUgrgw3XBzMYgUtcac3pviMPTx8w5BE-3CDiplXBEODYvdNUxTFFiobwXVk0OphKl0Jc5-Nr7mohxF4FzA_0cIIchnPIgvQyBSHD6WZM0Iv8QofBf06oc20AumZX1uku_N00K5Rs7T_mj_pxW-0B0W0BgXu17q4mxtoX8eoqWGTVIYQAyRFolkvxvXtjV5ecV0-E97OXH9yyHSQ","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-03-19T18:59:38Z","raw_expires":"Fri, 19-Mar-2027 18:59:38 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__Secure-YNID=21.YT=IUVmBwxAQpsi4ok29V9505JXPxVX_CldIM7UzLf5lhchEFnHWbljy048Gq1qvD2mcv9AJwMN5ZVH6o4m-uLwkuoCdYp-thEgzgyb8-Rmc58R-Qq2lxrZvenvTfAdGCrreshBFWymUgrgw3XBzMYgUtcac3pviMPTx8w5BE-3CDiplXBEODYvdNUxTFFiobwXVk0OphKl0Jc5-Nr7mohxF4FzA_0cIIchnPIgvQyBSHD6WZM0Iv8QofBf06oc20AumZX1uku_N00K5Rs7T_mj_pxW-0B0W0BgXu17q4mxtoX8eoqWGTVIYQAyRFolkvxvXtjV5ecV0-E97OXH9yyHSQ; expires=Fri, 19-Mar-2027 18:59:38 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none"},{"name":"YSC","value":"3mAYq-92sA4","quoted":false,"path":"/","domain":".youtube.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"YSC=3mAYq-92sA4; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none"},{"name":"__Secure-YEC","value":"","quoted":false,"path":"/","domain":".youtube.com","expires":"2023-12-25T18:59:38Z","raw_expires":"Mon, 25-Dec-2023 18:59:38 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-YEC=; Domain=.youtube.com; Expires=Mon, 25-Dec-2023 18:59:38 GMT; Path=/; Secure; HttpOnly; SameSite=lax"},{"name":"VISITOR_INFO1_LIVE","value":"NlBBMLIh5jo","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-03-19T18:59:38Z","raw_expires":"Fri, 19-Mar-2027 18:59:38 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"VISITOR_INFO1_LIVE=NlBBMLIh5jo; Domain=.youtube.com; Expires=Fri, 19-Mar-2027 18:59:38 GMT; Path=/; Secure; HttpOnly; SameSite=none"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUw%3D%3D","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-03-19T18:59:38Z","raw_expires":"Fri, 19-Mar-2027 18:59:38 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUw%3D%3D; Domain=.youtube.com; Expires=Fri, 19-Mar-2027 18:59:38 GMT; Path=/; Secure; HttpOnly; SameSite=none"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CMSazNr24Y7amQEQ8cz74ev9lgMY8cz74ev9lgM%3D","quoted":false,"path":"/","domain":"youtube.com","expires":"2027-03-19T18:59:38Z","raw_expires":"Fri, 19-Mar-2027 18:59:38 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"__Secure-ROLLOUT_TOKEN=CMSazNr24Y7amQEQ8cz74ev9lgMY8cz74ev9lgM%3D; Domain=youtube.com; Expires=Fri, 19-Mar-2027 18:59:38 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":153986,"size_decoded":63636,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52128)","md5":"875ad6c85aaa07d30d9f0bab702a7c83","sha1":"548aa0591b903c6f584635ffbda1a378014f23cb","sha256":"3b95e17ffe7953df5bf8c9c7a29895790e0b29137827c85f8d7fd6e2f146fe04","sha512":"3cc262cdde3408bf5522b332b837973820995d020ec4f6e021791e75c355253b1407c11632c60517c5b785b9ddd8bb82884e56f5fd2c08bd2ef92b4c65b7a004","ssdeep":"1536:8JqUfChdMkMCYXMZbLGRuharblCo43UEwg5qex8r9mYZdWHHw4Tu3y8m4ghZ:JUqhd/YEqhC0Ewg1Qkv4gb","tlshash":"ede30a240868a876c5939547edbaff3e5cf8023a07c995aebcbbd75c01ec6510e6f412","first_seen":"2026-09-20T19:00:51.793236Z","last_seen":"2026-09-20T19:00:51.793236Z","times_seen":1,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":139,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.857Z","timestamp":1789930778857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:59 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376059\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-09-20T20:33:55.895983Z","times_seen":10029,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1/large/bitcoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:39.060Z","timestamp":1789930779060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/1/large/bitcoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: Q8fZRkpbasN16dUKSGeWkjdTlaxKiz+9lSvLLobd6HIXw7b1D5TWhZc5uRppfo47AZI+r/5SzPg=\r\nx-amz-request-id: EGRGZKKA5SVF4GDF\r\ndate: Sun, 20 Sep 2026 18:59:39 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:28:22 GMT\r\netag: \"565e8c524f6da22928811f836d0b92a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K_Yd_oAsiQpaEoTt9rotaTCh6C_AUMdt\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 2995\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7Kequ7sLL5XE4eZetVJrTsMta18yoNnE%2FiONr%2BUajredIWodWV1gxtAlkCiTfdXjAjJMYz%2BKN1J2pzPIN5LtkSnBn630YSGMMfGPjSuoiRLhepd3Jp1mTz2NnSii60aVyOkwFTyM7As60J5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a3e311897c358755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12242\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12242,"size_decoded":13193,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"565e8c524f6da22928811f836d0b92a2","sha1":"c52a8b6052273f04ffe097517461948beb849d3b","sha256":"1eb4e75d64a76a5d1fba301715ae227c683b34e8f75291670cdf7ae2a59de86f","sha512":"eaec675e23843f9fbe93edf354d54bd9b35001daa17b2345f6193e004035f1d16e0f5fdd933826a0dfb2e58e803174adf0cffdedba3ed561b1f1f528b15f4263","ssdeep":"192:CcG4VfIT9czHUiIxaA0BOlAD6sXLsU9Hogsr/ncqUd/gaPQ8SB+Dfd4rfMst/C0b:1G4VfIOExaA0Bz6aLmncqqoFBdLMoC0","tlshash":"1a42c005aae317c9cfa9803311a524136489c3800e65e8e6b1d4dc7cee9eb096fb37e5","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-09-20T19:00:51.795198Z","times_seen":1549,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":3,"connect":39,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/storage/app/public/photos/XhLRPRVtSojv6ztKcE9ynV5iQ2uct56XTNy7xKRO.png","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:39.378Z","timestamp":1789930779378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /storage/app/public/photos/XhLRPRVtSojv6ztKcE9ynV5iQ2uct56XTNy7xKRO.png HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1242\r\ndate: Sun, 20 Sep 2026 18:59:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1242,"size_decoded":1450,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"c6a5abb575f4c14729b299058539998f","sha1":"90a8e0cfc7695944c9d28f3cf908ecbeb3367d0c","sha256":"7271dd5c11fb9a1052a5e91a09afbe7d148fd3388dc51c338df62a0a16f06739","sha512":"80fa0b7d01774d4a68e42ffd4b874c60a129684d86af168699905342e95af7ff7bc84559ea5a2619a600d75346b41664522b621b7bbe3fc7b5d14448568865af","ssdeep":"","tlshash":"7721843ac1c1061af0334264fb81f7983619825192970f603b9eb177facd0bb52a37c8","first_seen":"2024-02-20T08:09:53Z","last_seen":"2026-09-20T20:40:27.861714Z","times_seen":3101,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/css/bootstrap.min.css","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.169Z","timestamp":1789930778169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/css/bootstrap.min.css HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20694\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":153182,"size_decoded":21182,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"f411c136e2bb302ada2120b3eb1d5bc3","sha1":"3ae9bb0e7929489abd23736ae892939c8fe98645","sha256":"6b3bef53dc4a96ec07149d02a60b5fd026332bbce0b4ece79f3c55e3ddb85f5c","sha512":"73c0081669f87b45999da4ce0974ce2f347eb88ad310b63d01e22e52ae8e0c668eeb5f418ea1b6ae18afff2e9d21d98cedb6be0a9ccc464933b4c3d77d5066f6","ssdeep":"1536:K/NImGVh5+QYYDnDEBi83NcuSE9/7ht//1K0q3SYiLENM6HN26x:K/Fs4D9Dq3SYiLENM6HN26x","tlshash":"0be375a6f5a0312de467c61960d0bafe156f8245d7221ffbf82737644b896cb0a63d0c","first_seen":"2023-04-06T09:07:33Z","last_seen":"2026-09-20T19:00:51.795895Z","times_seen":4642,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/flaticon/flaticon.css","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.171Z","timestamp":1789930778171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/flaticon/flaticon.css HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 599\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3109,"size_decoded":907,"mime_type":"text/css","magic":"ASCII text","md5":"ea599ea4d42d8857576411a32ca71ad1","sha1":"9a3f3981a4d5d504c8dd78eae45e57d047ba3ed5","sha256":"5392f32016b9330f52883b8c33216665f1d5704d7824690ffc905842391568c1","sha512":"5df631c177a112132ae79305062ccc47b0f80c1d9723d16962bab79a1c3578173a8204c1361068e95eeb3a9ffc9f30356f15858fc2957280a58504ba5c9cd90b","ssdeep":"","tlshash":"1b51f554867e4040e7559b881f9f7780a768b02fcdc49c09b2059f6cfee19ad83c1aec","first_seen":"2025-04-28T01:39:11.855739Z","last_seen":"2026-09-20T19:00:51.796592Z","times_seen":577,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/slick/slick.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.219Z","timestamp":1789930778219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/slick/slick.js HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14215\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87157,"size_decoded":14453,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-09-20T19:00:51.797285Z","times_seen":792,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/storage/app/public/photos/SfhdiZ7vM9qdFmFLEmqZdCqmbCO7RwyDFspa4lit.png","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.725Z","timestamp":1789930778725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /storage/app/public/photos/SfhdiZ7vM9qdFmFLEmqZdCqmbCO7RwyDFspa4lit.png HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1242\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1242,"size_decoded":1450,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"c6a5abb575f4c14729b299058539998f","sha1":"90a8e0cfc7695944c9d28f3cf908ecbeb3367d0c","sha256":"7271dd5c11fb9a1052a5e91a09afbe7d148fd3388dc51c338df62a0a16f06739","sha512":"80fa0b7d01774d4a68e42ffd4b874c60a129684d86af168699905342e95af7ff7bc84559ea5a2619a600d75346b41664522b621b7bbe3fc7b5d14448568865af","ssdeep":"","tlshash":"7721843ac1c1061af0334264fb81f7983619825192970f603b9eb177facd0bb52a37c8","first_seen":"2024-02-20T08:09:53Z","last_seen":"2026-09-20T20:40:27.861714Z","times_seen":3101,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.764Z","timestamp":1789930778764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:59 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376059\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-09-20T20:33:55.895983Z","times_seen":10029,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":30,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.qm0uBrmE8W4.2021.O/am=AAAAQA/d=1/excm=base,root/br=1/rs=AGKMywEuLijXyX4VESP7Qbg9cnR-M7XRng/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.055Z","timestamp":1789930779055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.qm0uBrmE8W4.2021.O/am=AAAAQA/d=1/excm=base,root/br=1/rs=AGKMywEuLijXyX4VESP7Qbg9cnR-M7XRng/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=21.YT=IUVmBwxAQpsi4ok29V9505JXPxVX_CldIM7UzLf5lhchEFnHWbljy048Gq1qvD2mcv9AJwMN5ZVH6o4m-uLwkuoCdYp-thEgzgyb8-Rmc58R-Qq2lxrZvenvTfAdGCrreshBFWymUgrgw3XBzMYgUtcac3pviMPTx8w5BE-3CDiplXBEODYvdNUxTFFiobwXVk0OphKl0Jc5-Nr7mohxF4FzA_0cIIchnPIgvQyBSHD6WZM0Iv8QofBf06oc20AumZX1uku_N00K5Rs7T_mj_pxW-0B0W0BgXu17q4mxtoX8eoqWGTVIYQAyRFolkvxvXtjV5ecV0-E97OXH9yyHSQ; YSC=3mAYq-92sA4; VISITOR_INFO1_LIVE=NlBBMLIh5jo; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUw%3D%3D; __Secure-ROLLOUT_TOKEN=CMSazNr24Y7amQEQ8cz74ev9lgMY8cz74ev9lgM%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 158665\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 12:48:28 GMT\r\nexpires: Sat, 18 Sep 2027 12:48:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 18 Sep 2026 09:11:44 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 195071\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":466585,"size_decoded":159579,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"c428f499e5eca6a2431c42762ad298f9","sha1":"5cee4d8489fb387b6fd8076240255690d1bd1f7b","sha256":"aa99491112a3d6f40c74405d0d8086ef7f9878469d398a018d96da51ca45ad11","sha512":"01435c7abd9538e7c107ac1bdf5b8f39b5e4f3d483a9bf493b93271227a480a2d65cac7e558c369dc8ae06ec9f6d3f9d7df014df5964152908a936ea2d7b5e04","ssdeep":"6144:PNL7ytLkHpJ7aYtacsI9ILPafg/kK8LMz233xrQpbXSa1AwXyUpHJBXGvWMSD:U3csccPaf0C1a1rymvXGvWnD","tlshash":"e3a45dd973a2706392a2f1e0902f0107b27a7896f44c9c7cf698ddd52eb494945bbf38","first_seen":"2026-09-18T15:45:00.72343Z","last_seen":"2026-09-20T21:20:37.428388Z","times_seen":339,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/zE1wsox6mlI6vW7qaXUn9CXAmrkG-Mkw0oAR1wP9fow.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.459Z","timestamp":1789930779459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /js/th/zE1wsox6mlI6vW7qaXUn9CXAmrkG-Mkw0oAR1wP9fow.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 24771\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 01:53:20 GMT\r\nexpires: Fri, 17 Sep 2027 01:53:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 10:00:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 320779\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64164,"size_decoded":25582,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (62846)","md5":"fc95640559093295f42e61bbd9687b78","sha1":"63060e0e1182b8735f3f0944421a672419ae427b","sha256":"cc4d70b28c7a9a523abd6eea697527f425c09ab906f8c930d28011d703fd7e8c","sha512":"6cc42a70161bd848648b3724a81c822f63b20022ba09db46224e829c35d4105119428649a50b11aaed2d66efc9bdde563c4b073ae6c30040c7c869f737b22fde","ssdeep":"1536:jLt7xrQtnha4ZIKW8QbNc1Ndqui/HrksERf3ZP+W:VghSbO1NdTiaR1","tlshash":"5153f7cfb6d277351ae2a2d24057450f92bfa51a4c88585fb909f6f40e7488b503bfb8","first_seen":"2026-09-16T18:31:33.254379Z","last_seen":"2026-09-20T21:20:37.395284Z","times_seen":131,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":4,"connect":23,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/x7msE3tx8QI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYihZMA8=\u0026rs=AOn4CLBe2bWn1to_h8BqX8LbE70rVtsPxA","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.634Z","timestamp":1789930779634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:39 GMT","end":"Fri, 27 Nov 2026 08:04:38 GMT"},"fingerprint":{"sha1":"2A:D8:D5:75:13:05:95:74:73:6C:36:B9:80:D5:C8:07:5F:73:A8:FA","sha256":"6D:AC:01:3D:52:E0:90:92:14:D1:67:F1:DD:E6:F7:E7:05:1B:5E:12:11:27:14:C6:33:88:5C:19:18:B5:B7:0F"}}},"request":{"raw":"GET /vi/x7msE3tx8QI/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgYihZMA8=\u0026rs=AOn4CLBe2bWn1to_h8BqX8LbE70rVtsPxA HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72571\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 18:55:53 GMT\r\nexpires: Sun, 20 Sep 2026 20:55:53 GMT\r\ncache-control: public, max-age=7200\r\nage: 226\r\netag: \"1468369451\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72571,"size_decoded":73243,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"5f7b4d1be6b5f8daea9672d501d170df","sha1":"e4996681c696113ae6220663ceaa1dd1b5b81b9b","sha256":"b906417cc0f86cc56e2c41d345c313ed00960009cf7c6ea232d5b1d88087653b","sha512":"2f404c575ec480dec2c40f1610caf07491f865eae39b422354277908648f79e2aef51b1794a057877b7f57a764b67c3d73696a086932a3adf78ae5da1335ebd7","ssdeep":"1536:HL4c1gP4td8L5KhzO2RY10oYu/v52Suz1+IgQxL6ZSzetizp:sc1gP4g5Khy2RCY0RNuzILQxL6ISczp","tlshash":"c063f19afa7f310be37593b541f712945a922628df92f2fb3017084d0b629dab84df14","first_seen":"2026-09-06T08:00:50.069513Z","last_seen":"2026-09-20T19:00:51.800249Z","times_seen":11,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":17,"receive":28,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.1/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.166Z","timestamp":1789930778166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:00:53 GMT","end":"Tue, 17 Nov 2026 07:00:48 GMT"},"fingerprint":{"sha1":"C1:F8:7B:6D:E1:C5:FF:2F:6A:0C:24:9D:28:61:CF:AD:73:C0:93:77","sha256":"4F:45:62:98:5D:83:FB:FF:D2:77:E0:3C:78:CB:71:D4:E1:09:FE:CD:6C:74:A3:1E:91:95:90:51:1A:80:D4:0C"}}},"request":{"raw":"GET /releases/v5.7.1/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NleZ%2BhT%2FcTeqPPFbp2U2lZ49BY%2Bj%2Buy7ZM2WwoXGJV7bC5psXZYqKeiAlgOqfTHQEO5%2F%2FY9gGHsXutw8T1Xd3iWHTZBKpNGeIQrPZ09wIzdPuSqPybxSU2TFfdCQ8DbBi6kSk6py\"}]}\r\nlast-modified: Fri, 22 Sep 2023 01:45:49 GMT\r\nvary: Origin\r\netag: W/\"7b1d7f457d056ace7b230b587b9f3753\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3e31184286c5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54456,"size_decoded":13211,"mime_type":"text/css","magic":"ASCII text, with very long lines (54456), with no line terminators","md5":"7b1d7f457d056ace7b230b587b9f3753","sha1":"4e0b45eedbe0c405f1faff0d5236a9ee0ff2065b","sha256":"9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf","sha512":"dccd340ffae7f27fb66555c13bd1e26f418a369926f0c49453f7b654db610f2058c4a586f817ed35861cb848d7972ad23badfbb627733015df13bb109b420d52","ssdeep":"768:6V31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:6czrC4NnzHSBCkgu7cs1w","tlshash":"e8330bb8e54c41d9a732c04fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9f79","first_seen":"2023-04-05T14:01:20Z","last_seen":"2026-09-20T19:00:51.8009Z","times_seen":15575,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":54,"connect":35,"send":0,"wait":170,"receive":-1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/slick/slick.css","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.173Z","timestamp":1789930778173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/slick/slick.css HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 478\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1830,"size_decoded":786,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"68a281f599d6a4fa5e8cab54bc5f59fe","sha1":"515cb38cbd76ebee91d05f7544758f4eceaac07e","sha256":"1b786863757c336ef237105e2560e02e2e54b90781ecafb63732662caffe4cbb","sha512":"e001ba8f09719604413c08ad5aa641cc9a5fe286c2d049fa0e86e12972f3d0a72e2cbbb9322734766aaad2fd892ba98c8cc5c91a290da36dd9f36995fe861857","ssdeep":"","tlshash":"2e3119dc0152c5d68b3384444fd38649eeefa0930c241698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-13T11:05:16Z","last_seen":"2026-09-20T19:00:51.801501Z","times_seen":896,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/popper.min.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.179Z","timestamp":1789930778179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/js/popper.min.js HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7158\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20973,"size_decoded":7395,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20800)","md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-09-20T19:00:51.80209Z","times_seen":7774,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/real-estate-investment-sm.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.324Z","timestamp":1789930778324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/real-estate-investment-sm.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 103474\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":103474,"size_decoded":103742,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"513853b7ee43c65811c9944d1b7f955e","sha1":"2b0031baa444165d350c3350ba133b5acb870a8a","sha256":"069e73aa63a77e4b8abec49c7c4e5fa241c8de1a364932dfb0106458ea29c88d","sha512":"974e70195aee421039f2ace2049356b5a1f7f17af9c5eecc0d66440e06f8579e305ae91775b5a9ee7b40a5ff475a4e86828df305fde5ee1f4000f29308f633c4","ssdeep":"1536:QFIkprDLn7pNoLfhuJgHeC+NkV69orEmTxrQt98jGnxZuV2wWHpc9+leU06GMA0M:QukprbpkuJgHet9rtqjQUre26PQZd","tlshash":"d3a312704694f447c86e6ffd1844db2cd163372c7022a078b9af96d26a486e61c1f57f","first_seen":"2025-03-18T04:27:57.409907Z","last_seen":"2026-09-20T19:00:51.802677Z","times_seen":554,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BPT5w8s3.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:45.979Z","timestamp":1789930785979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-BPT5w8s3.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 18:59:45 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-3e9c\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k0chcvpS0ZTbimCzOrzbQPIu/VuXgG4u+4P+cCyfAqIzjXb4/xuZE5OLKhpVWNXt3Xsy93g\r\nx-77-nzt-ray: fdb54123e70223e3462db06a5e419d3a\r\nage: 469167\r\nx-77-cache: HIT\r\nx-77-age: 469167\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16028,"size_decoded":6769,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15620)","md5":"3548e3eff8e1868b716127efa99cb827","sha1":"b7851100835c8503db0855767eed7fd9b6ea0256","sha256":"5d183c1962f6085d86e7f85b799c50f3000f0444856d623063f0b68ca6608a7d","sha512":"00ec239fba1b3c30dbaa2e2f26d72357fc55fba2ad6e6f55a168374519d8a1fe4de774813df55cc14b8174666851c97d68074068913006eb5bc505e0fc324b98","ssdeep":"384:0NpFT88tMPdBgaw5O+mvRan7/qKsDoKEwA3Q+crsbUzgfTtQfQIeIU:0NpFX+dBgaw5O+aanrmoKRA3Q+cwbUwL","tlshash":"f972e8741210783f712f6c492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","first_seen":"2026-09-15T08:49:00.602794Z","last_seen":"2026-09-20T20:57:36.067068Z","times_seen":176,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.856Z","timestamp":1789930778856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:59 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376059\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-09-20T20:33:55.895983Z","times_seen":10029,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T18:59:36.973Z","timestamp":1789930776973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.1.33\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 20:59:37 GMT; Max-Age=7200; path=/; samesite=lax; secure\nroyal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 20:59:37 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 10749\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 18:59:37 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-20T20:59:37Z","raw_expires":"Sun, 20-Sep-2026 20:59:37 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 20:59:37 GMT; Max-Age=7200; path=/; samesite=lax; secure"},{"name":"royal_trades_option_session","value":"eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-20T20:59:37Z","raw_expires":"Sun, 20-Sep-2026 20:59:37 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D; expires=Sun, 20-Sep-2026 20:59:37 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49587,"size_decoded":12100,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (626), with CRLF line terminators","md5":"892685c935e51a43e8e22026d8f629bc","sha1":"8175c2b240c602d665331a3b26b3b470278bdb41","sha256":"2f1a5bbdea41f1a82f700a1a25675bcb491baed496c5a507cfa1e928c1e17e4a","sha512":"e1a744f1c4bf0cbe195a4b3fdcef242249b98b0d5dca59b5e46e105412c9bfb1256c7d8e2b5e865621ca3121ebf9b87ee3e035a261e794f1e4e27cfebb2d1f7c","ssdeep":"768:JP3nwQ5ackLXFxMIuCBIV8JO05jC7esZD8Md:R3nwL7LXFGIuCyZD8Md","tlshash":"502371387489757b412382a79231235aeadfcab7c61b8592b6fc63770fe2c04d847479","first_seen":"2026-09-20T18:57:13.657025Z","last_seen":"2026-09-20T19:00:51.819801Z","times_seen":2,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":340,"connect":94,"send":0,"wait":240,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/popup.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.208Z","timestamp":1789930778208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:29:44 GMT","end":"Sat, 21 Nov 2026 04:29:42 GMT"},"fingerprint":{"sha1":"AD:56:9A:7A:0D:59:51:B4:A7:48:82:60:B8:DB:1F:A1:A1:FD:51:F3","sha256":"BD:3C:C8:79:0A:A4:32:CB:65:88:4E:EB:BC:86:AF:40:EE:41:55:58:77:2D:F1:14:A0:79:98:26:E5:1B:17:AF"}}},"request":{"raw":"GET /widgets/latest/popup.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Sep 2026 03:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GqhTfCy9Na9u0bMQ1bfwy4qC32CisiyylXEELQP1%2B7BJkuwQHA%2F11ruSlDJxI4AhJjDap6Fh8UvxP0cyrCBTCHCdJVvI6RSWl%2BM1yqg2YD0sAmaeBOri26EinsiT9agTQM9Hyg%3D%3D\"}]}\r\nexpires: Tue, 07 Sep 2027 21:44:58 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"6a9cda0f-438e\"\r\nage: 1113279\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a3e311843a8c0b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17294,"size_decoded":6348,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"5632f4f8e280e27acbf42fd4d495242f","sha1":"41fbc9b0b33c628b2b43e36746755ff5f5a3d8a1","sha256":"01a5656ceefcabad1eb952c49536b65d7e80799bb74842eab974fa1eaf817b75","sha512":"16e8315e8fb2b9f0c3cdf6ee3ea3b8c1b15df154af9e92b5499e3f50d2ab3da3cacc3da452f6db7854f2e81894f349dea1a73a45c4cc5e8d36fae872fad672ac","ssdeep":"384:UzCKMPZATN09o0mtEMDXYddj512IHVxBCZlXbtrts:UVMhAh060sEMDXbbZzK","tlshash":"ac72d95d06b7103a5e231229feff1b0c60ba42578100fd22bf9ddd865fc1aa8d6667d8","first_seen":"2026-09-06T08:00:50.052311Z","last_seen":"2026-09-20T19:00:51.821444Z","times_seen":32,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":10,"connect":2,"send":0,"wait":26,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/investment-consultancy-sm.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.307Z","timestamp":1789930778307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/investment-consultancy-sm.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 65789\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65789,"size_decoded":66056,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"bce108b1f6b7e457c17fd834671653fd","sha1":"8ea5a9e514d2217ae81b6ac406f5cdbe4d0a5fcd","sha256":"80e141a0b2e918793daf5d8c6d43f95ae0d4bc3f479c0cfd816fda3bc1df1731","sha512":"547db66a7a8b6c16dc4b58d620d35d92b5b85d587886aec5c70efa6a24ea42725e9b0640cc9457915b1cd3d6276019721b0702e782a0a02baa5a0e5f4aa4a793","ssdeep":"1536:k/3s0Q2NUrGnNjKB93VoWk7SogjepsipU8QpHXaTPAA:WXNUrAjKBBwSoIxpHqTf","tlshash":"eb5302457cc037d85ded036191ab578b2fb35390e5a2e356baca724c572ba3ced03892","first_seen":"2025-03-18T04:27:57.402289Z","last_seen":"2026-09-20T19:00:51.822229Z","times_seen":554,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.1/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.761Z","timestamp":1789930778761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:00:53 GMT","end":"Tue, 17 Nov 2026 07:00:48 GMT"},"fingerprint":{"sha1":"C1:F8:7B:6D:E1:C5:FF:2F:6A:0C:24:9D:28:61:CF:AD:73:C0:93:77","sha256":"4F:45:62:98:5D:83:FB:FF:D2:77:E0:3C:78:CB:71:D4:E1:09:FE:CD:6C:74:A3:1E:91:95:90:51:1A:80:D4:0C"}}},"request":{"raw":"GET /releases/v5.7.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/releases/v5.7.1/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 74320\r\netag: \"3638e62ea50e6f5859b6a15276c25c87\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:51 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yY%2BBrgWjUg2WJQ4gaBtQg%2Fn%2BrdwnIBnPtpkbxlqYfLzCABosnHEJtbW69NQl6IREah6Tx2jH3yEwcrPHOaIIIdJ1Jn5QlgxjUbeKNNbSLMM8vImVliOpD%2F3Jzy%2F7LqHQW4nWKiC%2B\"}]}\r\ncf-ray: a3e311874c4e5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74320,"size_decoded":75033,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74320, version 329.30998","md5":"3638e62ea50e6f5859b6a15276c25c87","sha1":"f5aa1a463e223a294a42b314e1c63a614d594ec0","sha256":"9e6bd5b2d75bba485d2337d020750744983a3521ec697adfe21b29ee4f14f6a9","sha512":"0c7c4817722acaefe37770ab2f30b658065670044a4d73bea7a441780b3d40bc309d8c9593473b69c3521e4f8c40d1e0b8fdeef1619be26365db0ebdca5f5575","ssdeep":"1536:T9XBTV3zaFDGMq0gGmrbhafkPovybyJ0HgYEWdOXmkKHJaIvSI:118iMqmmxarybNHg59KHBF","tlshash":"bc7312c35adf8912c5633b6c3d8b41362f2469549a652e4275ef0deeb6f17b82f88011","first_seen":"2023-04-10T15:09:54Z","last_seen":"2026-09-20T19:00:51.823913Z","times_seen":7429,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":148,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kBo8UDI-1M0wlSfdzyIEkpwTM29hr-8mTYCxCmuA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.860Z","timestamp":1789930778860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/archivo/v25/k3kBo8UDI-1M0wlSfdzyIEkpwTM29hr-8mTYCxCmuA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 23:15:23 GMT\r\nexpires: Sat, 18 Sep 2027 23:15:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 157455\r\nlast-modified: Mon, 08 Sep 2025 17:57:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39156,"size_decoded":39969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39156, version 1.0","md5":"b590eac708ab31938a2b67ab7805bd8b","sha1":"55ba8f2b88b65a56f00108ee08200f32d5b26b84","sha256":"3d109f97a71d3d3d04d16e5c4b95be8f89146a55ebbed239b90f5a8c5d4f437a","sha512":"7b7458b8aeff6ca9978e97015961de788d561b706c59a7d9b5929ec660b14deb64083d970a8b09ab6a0fa608a0cc8ba4fa999ff7081c8f9803b06ecbc4f50c33","ssdeep":"768:HxFN+MkgnkudzCtNe1ck1NToNiADfLa2UFIUa7J6kkOlWiRbM8pQV:RX+MkgkUzcNswYCfL5UVaxkIdy","tlshash":"7e03012bc3f45d8f2f32c674e1801943e9ab4a14ce1af868ac77c97506f9730d19b584","first_seen":"2025-06-14T03:24:43.788943Z","last_seen":"2026-09-20T19:00:51.824828Z","times_seen":1475,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/4fd832e7/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.056Z","timestamp":1789930779056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /s/player/4fd832e7/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=21.YT=IUVmBwxAQpsi4ok29V9505JXPxVX_CldIM7UzLf5lhchEFnHWbljy048Gq1qvD2mcv9AJwMN5ZVH6o4m-uLwkuoCdYp-thEgzgyb8-Rmc58R-Qq2lxrZvenvTfAdGCrreshBFWymUgrgw3XBzMYgUtcac3pviMPTx8w5BE-3CDiplXBEODYvdNUxTFFiobwXVk0OphKl0Jc5-Nr7mohxF4FzA_0cIIchnPIgvQyBSHD6WZM0Iv8QofBf06oc20AumZX1uku_N00K5Rs7T_mj_pxW-0B0W0BgXu17q4mxtoX8eoqWGTVIYQAyRFolkvxvXtjV5ecV0-E97OXH9yyHSQ; YSC=3mAYq-92sA4; VISITOR_INFO1_LIVE=NlBBMLIh5jo; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUw%3D%3D; __Secure-ROLLOUT_TOKEN=CMSazNr24Y7amQEQ8cz74ev9lgMY8cz74ev9lgM%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 483058\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 01:54:20 GMT\r\nexpires: Fri, 17 Sep 2027 01:54:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 16 Sep 2026 04:40:45 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 320719\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1624126,"size_decoded":483746,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"4108abc48c279e7e4019355a90e9e560","sha1":"3c8796994171e48ae95602aa667b98628ef80ff5","sha256":"d052bfbd7330fa8ce06563a36a2937df9008c4cd9085850203eaddd43a087973","sha512":"d32786c3b6077e1faf7f7ad19092104ac6d0e5dc9d2c4f35c58376f260b6c6d34c38820430558c55411e1e6e73363121c15aa68bec9e5ea36dcf2e190bfcc082","ssdeep":"12288:csccDe9e15/8VHvoxOmu2mL5x+uQeZNvN4Xp:c+Qe1KPoxqdx+uhZNC5","tlshash":"fe257cd933a3742793a3f464a96f0007b07e1d19a408c4bcf9b9d2e46d7894a917bf6c","first_seen":"2026-09-16T19:23:09.492074Z","last_seen":"2026-09-20T21:20:37.381181Z","times_seen":430,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/flaticon/Flaticon.woff2","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.858Z","timestamp":1789930778858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/flaticon/Flaticon.woff2 HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/temp/custom/flaticon/flaticon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15636\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15636,"size_decoded":15903,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15636, version 1.0","md5":"7e6e07c9567fead57aad008ba0f35ad8","sha1":"d5fc38cc2b8feeee4abaf792ec9a0975988d5595","sha256":"97715d73c5593d1985486d8af235ffac8e7a08cad8e5c0517b115fa7bc372053","sha512":"ef21213d3cbdf6c17abfdb044c8dc8ec159173ff43ab2e9c833d6416a23df06785ccb8dc056f6f587b8712c1028f1d56a4c454f62a807fe5f35ca368fae86f5e","ssdeep":"384:Uc5Cd909FNFKcI3gyIaNMqhmM21zjlBRc2:UYCdSbecwfh4N1","tlshash":"2d62d16323b0dfa8e7df61618d25f03dc35f092590228eeed3d5e9940028fe46da0ac5","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-09-20T19:00:51.826184Z","times_seen":603,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/4fd832e7/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.052Z","timestamp":1789930779052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /s/player/4fd832e7/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=21.YT=IUVmBwxAQpsi4ok29V9505JXPxVX_CldIM7UzLf5lhchEFnHWbljy048Gq1qvD2mcv9AJwMN5ZVH6o4m-uLwkuoCdYp-thEgzgyb8-Rmc58R-Qq2lxrZvenvTfAdGCrreshBFWymUgrgw3XBzMYgUtcac3pviMPTx8w5BE-3CDiplXBEODYvdNUxTFFiobwXVk0OphKl0Jc5-Nr7mohxF4FzA_0cIIchnPIgvQyBSHD6WZM0Iv8QofBf06oc20AumZX1uku_N00K5Rs7T_mj_pxW-0B0W0BgXu17q4mxtoX8eoqWGTVIYQAyRFolkvxvXtjV5ecV0-E97OXH9yyHSQ; YSC=3mAYq-92sA4; VISITOR_INFO1_LIVE=NlBBMLIh5jo; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUw%3D%3D; __Secure-ROLLOUT_TOKEN=CMSazNr24Y7amQEQ8cz74ev9lgMY8cz74ev9lgM%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 58427\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 01:56:55 GMT\r\nexpires: Fri, 17 Sep 2027 01:56:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 16 Sep 2026 04:40:45 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 320564\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":544215,"size_decoded":59107,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"0b7a5a3a5f5411f5704dfc56710d6ce5","sha1":"75fc616a787530a7ef28822c22c21f3e79143779","sha256":"d2e199d95d94c019df7152e6cc7b6efd282609e6cf5e4fb52d5afc5518a8525e","sha512":"4d14ca3e1c90c6259760fa325a5c04ca9d89ddac1075910595f1f708ea2caa500e55836f061a1b3a732565bb6638aec3bc51c28cf27807ba54930fe6cae0d5d2","ssdeep":"6144:58d5Fe/qoMOg7UABLdIoImM5KPLL8Oi4u7:+YxMOg7UAfIoIr5KPLLTg","tlshash":"7fc4d972e0a1233cb2278d9997d9d54d7339d983e2e12afff11166dacbc77821316206","first_seen":"2026-09-16T10:51:20.334182Z","last_seen":"2026-09-20T21:20:37.379634Z","times_seen":474,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/279/large/ethereum.png?1696501628","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:39.061Z","timestamp":1789930779061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 01:42:10 GMT","end":"Sun, 08 Nov 2026 02:38:20 GMT"},"fingerprint":{"sha1":"6D:78:02:43:76:DB:BE:C9:E8:71:0F:71:A6:71:41:61:9D:5E:9A:38","sha256":"F5:E1:AF:C4:74:D3:9D:AE:45:76:F2:8B:BD:8D:EA:4C:FE:74:A2:D4:93:2B:B9:06:46:D1:FF:98:A0:81:92:EA"}}},"request":{"raw":"GET /coins/images/279/large/ethereum.png?1696501628 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: PedDQkGJ2eGb68O9psfo6bA5vs9J5obTBkD4V0/U9NAbDEK96kEWNzmxKV4zxeekuNC2Y45Mn4peJLCULk4/DdpljU/G7ru9\r\nx-amz-request-id: RMK4VEQY8KG7YGM7\r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 18:59:39 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:48:08 GMT\r\netag: \"af87366546180c799987073ac53f0733\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6vmhZ_PH5UG1O..xRx9fhSAwELb.H8zx\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nage: 2825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzYcr7VFd68OMY7cPri%2FBvoHHWaFjMVyfimJPIH4kal%2BiC3YwjZe1SYBqhCJhEpZcgvKoLvuTOAEbd4MC420z4kTrNUIIWX5VwwN636z2u4X7swrxq5hCj8zPwpNddsNi453c5fJn%2Bj3aVAw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a3e311897c3a8755-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13114,"size_decoded":14085,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"af87366546180c799987073ac53f0733","sha1":"184c444a964020e531cb72b9c5e3017e411d5185","sha256":"d90e937d915ab0c865ff6e335361386c56524d4d33fb66f2f04defe1500082eb","sha512":"01d259380cb9b000fafe13cd736aa34b2f73d4e5ab8927d44347a33f4168914cd97d10bda83ffbcd5da4c4c90f7bd9acb90026c7f6c0cd3f73c634ba697cb106","ssdeep":"192:htyirrPkRdnpyRa5GKLC4XCLAJRwwTCW2BwLVrCu3O1AFkNsJgvl8qiY0x:7xrPkX5Gt4XCLAPjIB67YRvTiX","tlshash":"3342afb7dc26c34e0440984c756c7bb5ac6abe6ccc4bfe7127f5b46db86418e7644089","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-09-20T19:00:51.828053Z","times_seen":1311,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":34,"dns":2,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:39.081Z","timestamp":1789930779081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 18:59:45 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa92cf9-4668\"\r\nexpires: Tue, 15 Sep 2026 11:39:16 GMT\r\nlast-modified: Tue, 15 Sep 2026 11:33:13 GMT\r\nx-77-nzt: k4wk8IWM/c1hbW1gUjihPCXx5X01uXCAEyZKExS/2pLIcoLf8mFKvVRmjez9tGjkvgRFnwI\r\nx-77-nzt-ray: fdb541232701f5f0462db06a13e1d72b\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 1046\r\nserver: CDN77-Turbo\r\nage: 9\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6052,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-20T20:46:10.62333Z","times_seen":9538,"resource_available":true,"data":null}},"time_used":6658,"timings":{"blocked":-1,"dns":29,"connect":8,"send":0,"wait":8,"receive":0,"ssl":6613},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:39.089Z","timestamp":1789930779089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:29:44 GMT","end":"Sat, 21 Nov 2026 04:29:42 GMT"},"fingerprint":{"sha1":"AD:56:9A:7A:0D:59:51:B4:A7:48:82:60:B8:DB:1F:A1:A1:FD:51:F3","sha256":"BD:3C:C8:79:0A:A4:32:CB:65:88:4E:EB:BC:86:AF:40:EE:41:55:58:77:2D:F1:14:A0:79:98:26:E5:1B:17:AF"}}},"request":{"raw":"GET /flags/svg/en.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 18:59:39 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kS1pM8AbDchLhPHDWyAXMoNX%2BrUwB7V2leQYCmBGuZxipAT7wCbXQF4qWMwkybPjFi2%2BGPw0Pq%2B2PjMwVFXKaFkmILYX0iy2sFCEHHagLtKdVz5DxzoYt01x5No9YQWp1P7WoA%3D%3D\"}]}\r\nexpires: Thu, 26 Aug 2027 05:41:02 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"639d0089-35e\"\r\nage: 2207916\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a3e311895f7f0b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":1174,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-09-20T19:47:40.122346Z","times_seen":14584,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.990Z","timestamp":1789930779990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:09 GMT","end":"Fri, 27 Nov 2026 08:06:08 GMT"},"fingerprint":{"sha1":"6B:DD:9E:90:A1:B8:0E:F7:83:1D:3D:17:DB:A5:85:98:F2:E5:07:8C","sha256":"99:41:52:4A:38:1D:4C:B3:19:1D:AD:0C:91:83:B5:70:FB:2C:08:37:01:B5:0D:75:CF:2D:88:E1:5D:C5:A2:7C"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1851\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1851,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$LbI5stZRAAZeSj0yfkre_oub0g0Tz6OnAEABEArZ1MsbWfHD_YYaLtPYOnS15h2jjmsn153LCSlezlL1iTWGn1BujRvk__PkW4_63PG5Do1Kj1KdB6r96JK9ngAAASzOAAAADPQBB-IAWSFmrCZzK82wT_mcI2nYLfdbmCCpvXOZcY0jwTIpIn8O-Tab7AjWyPZP3XK34IVzPW0wBHrPuM5ePmD3h6m99uwjmUGqaLeUQnJN9jrj1ru_FIWvjqYR7zASBQSRwJCqaY6QlufAIb74XZDQdzrylSDBwiinnM5Zrtrkulivt5F9KrTDQUtI4SAoxyOviSi6NBJnEbNnpNY9qLDba8SIxya0r0umQHjQDUoMF1_bIRmBGc2b5cVLWUTZojQjZnG7RfwLdryvv5clVETpM-4TjcX1cG2oQBjFK92FeszsQocPrMo00um_SVCcOsn0AbDYdMutOtY5Vew11KvkWCy5Fv6gobKmd04pFKytFIE6ra3OkX93ogN-W1sSgQV4NQxRq9iWzfEjzMhK9Zp1w0MF74Cg4Ah9eBngS5lvwjHdhaobj4zibh_07Mzey65niFIMCNL10NE7rIYvIRkRuMMm-iiViRtSiKPDPIpGWeLpoXxx4WRd8gOSJsHscpZ5otnkjoFogXiqpbPZ-wEn4zU5ziysnqXR4Wiu_qlKDm0MoS0pRgkVaGo41xFw4oqIML-bUv-zoQnlVhpOsBcLJf1x5P6__rBlGqYu1K1v9BiWt3jNjVvr-2ggb0Oq0HB30EUvb-ydgMPVRJ2C0S7bIqTmaATXLX_Gl-mUnDEEdwFbFTlMBb1kN5Ok4712WIJnq9A-Mld1b0zl236eJuh0X-BU84rd8NThgytvDIjp27gHeRoXE85aMPEICQboTMzsqaA3DTGfhbVVn79FxoWHk8NOvxhxmUJvIWrZZTBgTyaC4A-PJlc0D6cBMdNt8NtWu1OeadaxWFuowejQOThz7n1qp8FKwzSdzidRuSewgyukRPhdu4ZN5LUb6scJSGTe0NBDIlLOcbkxDUe7lgwoWGrAkGRuDA8rFcraqRn35aNjAks4GU_0oA7ZA-AjUtZo19JwWmeyBqZQWxXeNNknSDF4wHjrKI6huZKr4FP9T95u9VqrKrooOqNna5gkF0KCq9nFjOup54uyWkVt5n0sGruqzEhUopRLtNp0JwZ-BoAWcghbcd45_BtuD7brklJIZavKC2EVQjtP6YrqWxiueICUKHNFRV3AaApFaQ1Wb5uy2qxFy37f6ag2jaAUjUksGt-iFrMyeb2seiaGZzXZvfc5zkcfi2qGtAhDUAJ4nBiEJ9FP4ogFRX5y4JtR_ZdGE1FrpHi2DYLJ88rm5YJkToeGMh5XfuX-VAjhYhHZGNrfeLDFuznfTPOmmO3ft3TBQIoc91NrUSFEu7LXOhWgwNMd3uHMp_sEE5eAzrA2scYtiqp76XRJ7fGLa4V0YXJ8hqht6BNnC8cEi7x_ymR6RxAtrduRh18iSkcQQfBva5LwYJXqDZQLW9SEGI2SZ2DE-oIdyCZRvzFUou1fJ8Sqa8YOuD_9WIp4Noso25gALwKE8oycFE5leqfF6vJYRliUfOkT0JQJWvA2KJTilILKhegZAb7ToV9xgw55HYSKeDAPNuzgVeJRupswGVqwsQHU_nbbrCCQRejUQ8dE-C54kJVRkpRHemrfGT6Y_cgEs6hOmUENVt0v7_n9an6fsYBnS7hgf9rgGZGmOmFp1eZSu9wNvgMNUAhvejkGG_zeBuIvxHZZd3T-YIlPuWYQ-ceP-VjoFCfK0iaxwbDWbcm918g\"]"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sun, 20 Sep 2026 18:59:40 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":662,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"68ab012069512e81ae6a5595b9abd361","sha1":"43350c602d60ea22cd1d444843e2cb3c2aac3e74","sha256":"1f77c46710b719640ebd48f57c3b50cb44f6423ced4db6714f6e34e8a5360a7c","sha512":"3361710ef985ceba99feef84b5ca2c068ce778c89548e2f1b56aeca28456ad190ac0c769ba17cd5eb70cd70e05cda54b06f411980b4182c30871bb31dcab04dd","ssdeep":"","tlshash":"3ab01230d591c1603630dbe516cc601124c9c0c23e350756939c266503f55900e960ee","first_seen":"2026-09-20T19:00:51.830171Z","last_seen":"2026-09-20T19:00:51.830171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/themify/themify-icons.css","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.172Z","timestamp":1789930778172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/themify/themify-icons.css HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2706\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17817,"size_decoded":3015,"mime_type":"text/css","magic":"ASCII text","md5":"8550d4f5955437a51f49a5abff88a7a4","sha1":"e360e1412a31c69ed2188a9816d394478895c106","sha256":"9c66fe2fab3a1d65b14b92a20d4c817ed481d74846a8a5f33d3616200b973602","sha512":"c1eb60c4cf0c1a51bc2172d549b7d735304572c6d82e61675d6e3feb9ee74fe354eaa83da5d8cea4ab16b471879314e54cc21e4ad1ddcfc990852fe28677752d","ssdeep":"192:TjlG8SWxB5iQYxil3EguJ+JvZ247F52WM:s8NbAlMJdFg","tlshash":"f182d39495bf1ca41319e0c1734bf215bb0db6aa9a450c5ce293ff4cafd3a1199c2adc","first_seen":"2025-03-18T04:27:57.388175Z","last_seen":"2026-09-20T19:00:51.835831Z","times_seen":583,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/bootstrap.min.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.180Z","timestamp":1789930778180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/js/bootstrap.min.js HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13901\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55775,"size_decoded":14139,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (55494)","md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-09-20T20:02:53.813558Z","times_seen":4710,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/v3_0473660.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.301Z","timestamp":1789930778301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/v3_0473660.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6493\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6493,"size_decoded":6759,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 128x128, components 3","md5":"79516e0e08ecd4f26f179e82549f2f89","sha1":"f6038347935fb667021cb58791368b43fffcc8f3","sha256":"97a3df4c61f939660a54cfbfb1ac77cc7939b88ea38d2574c324ec85e422ade7","sha512":"d439d49ee43be35e9a52984b8c20f3ca9dd2c85689db9d0ceb9208682409db3b80abd489030deb42664f4561a5ca98c665b86ed1508848d868ff667435f97821","ssdeep":"96:XmZEsqS7Wn26kKX9aufHJe9+0BzgrZqk+a2aenqhddfmHTD/mZU:XKUS95DufH89IrZpfdKua","tlshash":"2bd16d636f329f81d9faf8f8420ad817422cc8d7a927bf4b5b390955bd738b14b42065","first_seen":"2025-03-18T04:27:57.420628Z","last_seen":"2026-09-20T19:00:51.848456Z","times_seen":496,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/row-bgimage-1.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.812Z","timestamp":1789930778812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/row-bgimage-1.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 60132\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60132,"size_decoded":60399,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"c7feed19158ba81cae88cc2e4301ff66","sha1":"6e60297f5a9a1d8de2c95ec8152fbe1405ab04a3","sha256":"f43cd1a0f11fadf305cf2779a848d36348a987eec3c246cb0fc1dfa98e6405c3","sha512":"c75b2186d9befb2b2ab53262f9e1d77766abee44dfead060338dc43a33a3ef69780bb31beef5a469742c71231bb2163c5a9ce20549e39558a317d78c0736551f","ssdeep":"1536:NYHDndRCr/EpnjVSEbdwI5MG75BEDOsZxtBVdX:oDdRCzlXIGGd6DbdX","tlshash":"e343019a8fe5afa2ece8177575d7dba08d122c4743d5c1ea8ad10225a3fc231b81c4dc","first_seen":"2025-03-18T04:27:57.382441Z","last_seen":"2026-09-20T19:00:51.849507Z","times_seen":570,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:42.101Z","timestamp":1789930782101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Goog-Request-Time: 1789930782076\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: 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%3D%3D\r\nX-Goog-Event-Time: 1789930782075\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20260918.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 983684381\r\nX-YouTube-Page-Label: youtube.embeds.web_20260918_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1789930779201\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C700%2C394\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 13050\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=21.YT=IUVmBwxAQpsi4ok29V9505JXPxVX_CldIM7UzLf5lhchEFnHWbljy048Gq1qvD2mcv9AJwMN5ZVH6o4m-uLwkuoCdYp-thEgzgyb8-Rmc58R-Qq2lxrZvenvTfAdGCrreshBFWymUgrgw3XBzMYgUtcac3pviMPTx8w5BE-3CDiplXBEODYvdNUxTFFiobwXVk0OphKl0Jc5-Nr7mohxF4FzA_0cIIchnPIgvQyBSHD6WZM0Iv8QofBf06oc20AumZX1uku_N00K5Rs7T_mj_pxW-0B0W0BgXu17q4mxtoX8eoqWGTVIYQAyRFolkvxvXtjV5ecV0-E97OXH9yyHSQ; YSC=3mAYq-92sA4; VISITOR_INFO1_LIVE=NlBBMLIh5jo; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUw%3D%3D; __Secure-ROLLOUT_TOKEN=CMSazNr24Y7amQEQ8cz74ev9lgMY8cz74ev9lgM%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13050,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20260918.01.00\",\"configInfo\":{\"appInstallData\":\"CJrawNUGENr3zhwQgc3OHBC9mbAFEIXI0hwQ8bTQHBDRiLgiEMr7gBMQh6zOHBDevM4cEImwzhwQ4sPSHBD299EcEL6E0RwQvKTQHBDBj9AcEMW10hwQuOTOHBC9tq4FEIiQ0RwQrom4IhD2q7AFELD40RwQo46BExCkqdEcEMuT0hwQvoqwBRD7tNIcEPDe0RwQn8-AExDM364FEOfr0RwQ3K3SHBCe0LAFEK7WzxwQ-MSAExDgt9EcEJOv0hwQ4oe4IhDQxtEcEMn2gBMQmY2xBRDGjNAcEOvN0BwQ9enRHCpwQ0FNU1VCVkwtWnEtRExpVUVwUUNuQTc1RlhhZ0J1QVd2LVFQdXdBQXhnVUdud0d5Qk1nR25LenBDektnckFRRGs4d0R0dVFHNUlVWHJMc0QyZFVGM1N6bmtBYTk4d1hqbndRRkJRUUR0SllHQlIwSDAA\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\",\"windowWidthPoints\":700,\"windowHeightPoints\":394},\"thirdParty\":{\"embedUrl\":\"https://cp.vexotra.com/\"}},\"events\":[{\"eventTimeMs\":1789930779208,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779212,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779216,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779216,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779217,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779217,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779383,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779384,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930778969,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930778785,\"latencyActionBaselined\":{\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930778829,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930778969,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930778993,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930778796,\"latencyActionTicked\":{\"tickName\":\"ndnss\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930778798,\"latencyActionTicked\":{\"tickName\":\"ndnse\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930778798,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930778829,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930778806,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930778829,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779053,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779091,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779042,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779103,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779042,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779080,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779042,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779095,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779042,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779070,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779389,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779199,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779393,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779396,\"latencyActionInfo\":{\"serverTimeMs\":119,\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1789930779424,\"screenCreated\":{\"csn\":\"rY7RUIOTqwM7Wshs\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"Gi2waoe-M6e2q7YPpa6F2Ac\"}}}},\"context\":{\"lastActivityMs\":\"16\"}},{\"eventTimeMs\":1789930779424,\"latencyActionInfo\":{\"clientScreenNonce\":\"rY7RUIOTqwM7Wshs\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"16\"}},{\"eventTimeMs\":1789930779424,\"screenCreated\":{\"csn\":\"834VIO_J7S7u_fWN\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"rY7RUIOTqwM7Wshs\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1789930779424,\"visualElementHidden\":{\"csn\":\"rY7RUIOTqwM7Wshs\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1789930779424,\"latencyActionInfo\":{\"clientScreenNonce\":\"834VIO_J7S7u_fWN\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1789930779424,\"visualElementAttached\":{\"csn\":\"834VIO_J7S7u_fWN\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMIp6n_4ev9lgMVaYT0Bx2N_QnHygEEBZ0BNA==\"}]},\"context\":{\"lastActivityMs\":\"17\"}},{\"eventTimeMs\":1789930779426,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"18\"}},{\"eventTimeMs\":1789930779427,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"19\"}},{\"eventTimeMs\":1789930779451,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"n6MFg656-folwk2B\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"43\"}},{\"eventTimeMs\":1789930779452,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"44\"}},{\"eventTimeMs\":1789930779455,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"48\"}},{\"eventTimeMs\":1789930779552,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"144\"}},{\"eventTimeMs\":1789930779553,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"145\"}},{\"eventTimeMs\":1789930779554,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"146\"}},{\"eventTimeMs\":1789930779556,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"149\"}},{\"eventTimeMs\":1789930779574,\"visualElementAttached\":{\"csn\":\"834VIO_J7S7u_fWN\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"165\"}},{\"eventTimeMs\":1789930779574,\"visualElementShown\":{\"csn\":\"834VIO_J7S7u_fWN\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"165\"}},{\"eventTimeMs\":1789930779627,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"219\"}},{\"eventTimeMs\":1789930779971,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIEg==\"},\"context\":{\"lastActivityMs\":\"563\"}},{\"eventTimeMs\":1789930779972,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"565\"}},{\"eventTimeMs\":1789930780025,\"visualElementAttached\":{\"csn\":\"834VIO_J7S7u_fWN\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"617\"}},{\"eventTimeMs\":1789930780025,\"visualElementShown\":{\"csn\":\"834VIO_J7S7u_fWN\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"617\"}},{\"eventTimeMs\":1789930780025,\"visualElementAttached\":{\"csn\":\"834VIO_J7S7u_fWN\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"618\"}},{\"eventTimeMs\":1789930780025,\"visualElementShown\":{\"csn\":\"834VIO_J7S7u_fWN\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"618\"}},{\"eventTimeMs\":1789930780026,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"hKBDWZXlWg_XZhlo\",\"clientScreenNonce\":\"rY7RUIOTqwM7Wshs\"},\"context\":{\"lastActivityMs\":\"618\"}},{\"eventTimeMs\":1789930780026,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"hKBDWZXlWg_XZhlo\",\"clientScreenNonce\":\"834VIO_J7S7u_fWN\"},\"context\":{\"lastActivityMs\":\"618\"}},{\"eventTimeMs\":1789930780026,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"618\"}},{\"eventTimeMs\":1789930780026,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"619\"}},{\"eventTimeMs\":1789930780026,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"619\"}},{\"eventTimeMs\":1789930780073,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"664\"}},{\"eventTimeMs\":1789930780073,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"665\"}},{\"eventTimeMs\":1789930780074,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"6hXndiCqtntaxpwn\"},\"context\":{\"lastActivityMs\":\"666\"}},{\"eventTimeMs\":1789930780974,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAICcQA==\"},\"context\":{\"lastActivityMs\":\"1566\"}},{\"eventTimeMs\":1789930780975,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"1567\"}},{\"eventTimeMs\":1789930780975,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAACxAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgFvCgYKBGFHSWYSCREAAAAAAEiDQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAAAAAiGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAAAA\"},\"context\":{\"lastActivityMs\":\"1567\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"Gi2waoe-M6e2q7YPpa6F2Ac\",\"clientCounter\":\"674\"}}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Sun, 20 Sep 2026 18:59:42 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":381,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-09-20T20:20:27.979018Z","times_seen":290026,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DKOWJlLK.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:45.980Z","timestamp":1789930785980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-DKOWJlLK.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 18:59:45 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-4e9d1\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: kwtWfCZvbZ3EZQ9hkdQpBYGXDQP2EMnjXQk7s83Ha3F0jsXlUVktv+SU2ctYBsDD+HCff+g\r\nx-77-nzt-ray: fdb54123e70223e3462db06a9b79ac3a\r\nage: 469166\r\nx-77-cache: HIT\r\nx-77-age: 469166\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":322001,"size_decoded":107702,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"1cfc843bd1f4a59fbdbd5873155bd1e5","sha1":"5f0736ed6a5a3a12496948110fa9265d39c6b175","sha256":"e7984d27930758951e5ce6f0c07dc2290082b8aef5b188faf9b5b1030a0c37aa","sha512":"7b5c5d8a3fefa7145e9d462811f8f103caa9a15d21273e0b03445ffac0599d25254e2e5849547138c02727ca242daa7f82b59da63c325661027c53e3bb5c51d3","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY3y2KQgcu5Ukxtvm3M:cOEIqXrP3nJwUr/K6vm3M","tlshash":"4d642ac57290b03543d791a6906f1109b33e5c18580d812cf269edf679baec8b2b7fb9","first_seen":"2026-09-15T08:49:00.59426Z","last_seen":"2026-09-20T20:55:55.045253Z","times_seen":177,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CoaqmBWZ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:45.982Z","timestamp":1789930785982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CoaqmBWZ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 18:59:45 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-8d76\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k/6b8UFEtEb/9CLvZAipTXFKmepl01eonVqLZ4b6V7L+a/h3/Bnl5e1VqaY2++I8wk4JUls\r\nx-77-nzt-ray: fdb54123e70223e3462db06a5009bd3a\r\nage: 469166\r\nx-77-cache: HIT\r\nx-77-age: 469166\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36214,"size_decoded":8226,"mime_type":"text/css","magic":"ASCII text, with very long lines (36201)","md5":"d67581c9b3003d85736b4a54c38a6f38","sha1":"0ada53753b0d87201b854a692e2bafd682b99811","sha256":"f849d090665d31e2c158996956b91a47ca60d0beb614a0ee17b25d3172636a86","sha512":"f7d871280eac56430f11bdeea780dd2d1681bea7347a9ef71f8977455147ac51a86ab59e2d5b9379677debd38ea37f726fd75207f250eeb57cd3013e70710c3f","ssdeep":"384:F8fY2l09kg7Tc6/WYtGLadKzSVX8Kj6+iZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM09kgTcCWYtG4XicrNSN56DwQ43","tlshash":"06f2966daad9093dac23c179e3f8e58c911af5e5df3226daf74239008ac17ff0986514","first_seen":"2026-09-15T08:49:00.636328Z","last_seen":"2026-09-20T20:55:55.053163Z","times_seen":174,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/coins/markets?vs_currency=usd\u0026ids=bitcoin,ethereum,eos,ripple,litecoin\u0026locale=en","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.777Z","timestamp":1789930778777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 17:41:37 GMT","end":"Sun, 29 Nov 2026 18:41:33 GMT"},"fingerprint":{"sha1":"AF:2C:42:9A:79:10:B8:27:14:C9:00:42:5D:31:6A:C2:E6:36:52:D3","sha256":"E1:48:0D:AE:71:35:F2:0C:8D:1B:58:67:01:07:1A:9F:9F:40:1E:A9:80:CD:29:A0:0C:EC:4C:75:20:A6:EC:40"}}},"request":{"raw":"GET /api/v3/coins/markets?vs_currency=usd\u0026ids=bitcoin,ethereum,eos,ripple,litecoin\u0026locale=en HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cp.vexotra.com/\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 18:59:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-data-source: 2.0\r\ntotal: 5\r\nper-page: 100\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"f060909833af0955aa07147081c5aed2\"\r\nx-request-id: 74c0e303-7782-4843-8325-152a93278968\r\nx-runtime: 0.005248\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: EXPIRED\r\ncf-ray: a3e311877f0b56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4023,"size_decoded":2254,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0de1014f758d78421934590b33956a4f","sha1":"19a4d0211973017305e477bcf7fdf330d8476f2f","sha256":"532ba740a81626134aca649453a872324b3e4f1b8d7b217a8e169f4d5cc019da","sha512":"728d83adc38329db796375d16bfdb0dc9760e4d0ee05b805d2f78aa8a19af1775d128e3fe4af5dc1608ff45d3b63641722a501489884d42f8a2722a703972a32","ssdeep":"","tlshash":"2b8115930d3498e2d6a12559699a33240d3efede8ccecc165bdecdce44547bb410ae4a","first_seen":"2026-09-20T19:00:51.852943Z","last_seen":"2026-09-20T19:00:51.852943Z","times_seen":1,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/slider-mainbg-002.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.805Z","timestamp":1789930778805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/slider-mainbg-002.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 157770\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":157770,"size_decoded":158038,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x730, components 3","md5":"ef58360d086e5cde10e81f53016f0721","sha1":"f854b33628d8f08c140b3eaf1512149c786f3ae3","sha256":"791bf0838f41d820f29c54c4157fb877eed9391ee4c9fbe5c740bc0aaa9fa12c","sha512":"eed48f42449ea66dad81a9c18d8fe4da21553f075442540c98fab98306e2971cdb0435bc483bf9e69d1cc9343c84e20169397ab5130d664ee98eb28cc86dee48","ssdeep":"3072:rZnn76sllzr98fzNYVdtvu3jNBXpeQKNr9QW63RBJVTpNJ6RxsfctBJTpgFy/:lnn76sD98fziVmznIpQjH7bctBHOy/","tlshash":"30f3123928f4494bce964ff60d66d6976eb24f20e71651c820ff263137820e49a213fb","first_seen":"2025-03-18T04:27:57.413662Z","last_seen":"2026-09-20T19:00:51.854527Z","times_seen":466,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/slider-mainbg.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.807Z","timestamp":1789930778807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/slider-mainbg.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 82942\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82942,"size_decoded":83209,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x730, components 3","md5":"039468794089e95ad715cae031648be5","sha1":"e8938bf54dda55d865849dd8b1313245f2261ed0","sha256":"02dfb50024fb0c935d552f003c96f65409a5e6092010b74fe1f3b08d1b5f309f","sha512":"61d01e7cd7dcc988705ff19d6e0ff8fe5c47f8cacfb5e054e1720859f2c04cc27a1f90d10527853aa2168b5f150ad1cb6ce9a24f8399de64834194e1c55d0b29","ssdeep":"1536:2cm23K8MTTSc2erxQ1DzUGDfA190SgLpWP43uco/4Z:xvaTSqmpUGDI190SAuct","tlshash":"bf83f13bc74f6b92d2eb1732c9c397a8af55a4b0e152010a966d813fbf6d7d66e07001","first_seen":"2025-03-18T04:27:57.416294Z","last_seen":"2026-09-20T19:00:51.855816Z","times_seen":488,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.992Z","timestamp":1789930779992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:09 GMT","end":"Fri, 27 Nov 2026 08:06:08 GMT"},"fingerprint":{"sha1":"6B:DD:9E:90:A1:B8:0E:F7:83:1D:3D:17:DB:A5:85:98:F2:E5:07:8C","sha256":"99:41:52:4A:38:1D:4C:B3:19:1D:AD:0C:91:83:B5:70:FB:2C:08:37:01:B5:0D:75:CF:2D:88:E1:5D:C5:A2:7C"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Sun, 20 Sep 2026 18:59:40 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":555,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T20:47:15.730746Z","times_seen":18573756,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:46.083Z","timestamp":1789930786083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cp.vexotra.com/\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 18:59:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 29bdde8cf3b7ff891a9df4c11873e6c312746345\r\nx-77-nzt: k0MSxK00meN4IEYYAVZPvrskWiEa8nAPHEUJm9HnOz8H4VdwtfBX11ANVK6wNFdY3PI2IV4\r\nx-77-nzt-ray: fdb541235e3ee0e9472db06a759e4a09\r\nage: 264\r\nx-77-cache: HIT\r\nx-77-age: 264\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3359,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-09-20T20:46:10.619196Z","times_seen":1659,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":35,"connect":8,"send":0,"wait":9,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/css/intlTelInput.css","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.198Z","timestamp":1789930778198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/css/intlTelInput.css HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2916\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28872,"size_decoded":3225,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"36ad59bd54fb93f8e30e3273470b91f1","sha1":"687880cd4146a6841f427ccf8f7dc38084996db7","sha256":"67215ee6059ca860b0c9947f70b739ab8cf2c53ba74d7ab1aa950cbf84fa7c2b","sha512":"d9a968bca0889c579b40efbaf1fc6d6f9fddcd48f80116f33693da9de3bee54ec1a56fa59b4e50a6980371be72e6de645d85cd0f162392c5e4a13daf4be19ed3","ssdeep":"384:9QVEnIft6NOMiac6LHvybiRF6y+CV5mxX5Yl:9jIft6T","tlshash":"d3d24c25cb603409b13bf372e6a04782eb37102be90246acb3da7d55dfa50e455e2fe1","first_seen":"2025-03-18T04:27:46.827076Z","last_seen":"2026-09-20T19:00:51.85758Z","times_seen":582,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/imager5555.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.304Z","timestamp":1789930778304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/imager5555.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12520\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12520,"size_decoded":12787,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 164x164, components 3","md5":"a09f123688ddee8c4e9c7547561a758d","sha1":"640721b8ac50bb159d54fd37835b1dd88ba8485f","sha256":"2d6a74d0be29e0833594ca7f35a38ff9ca8b80bbee0da06d9e4fad985e806d4a","sha512":"0e10a9fbfa0c43b9891c320ab25da23c1337924b8a1c4ee40a0bc02d0ddb0f2429f1e6b3372f89bb30d1693e8608e2e698d3d521734f6fe0240f7aee89a6c2bc","ssdeep":"384:rrgXSGGdXjidmAVwVg//CJ4MB9NQ9Q0oT:rUXMdmdmuwVgLO4U","tlshash":"4042c041e65faf0d66da2ba24dcbd61b70ad3d1684db09c3ad3b711334528c44eb553c","first_seen":"2025-03-18T04:27:57.422693Z","last_seen":"2026-09-20T19:00:51.858217Z","times_seen":507,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/row-bgimage-3.png","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.808Z","timestamp":1789930778808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/row-bgimage-3.png HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30335\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30335,"size_decoded":30601,"mime_type":"image/png","magic":"PNG image data, 637 x 321, 8-bit/color RGBA, non-interlaced","md5":"4fb3f9e980052107dc63d209f3e3a4e6","sha1":"42e7058bb8018444ad63b60822f504673e83b084","sha256":"e15aaf1d7e0e6d01a65f5142340ae08db269c646596baf9e8678b951014718f9","sha512":"858a60b8f5ac9b069638816288c901df10f578dbae07b45f8ef2206364a93a2a05d82516858f4c5f51a7e83a02a6d51f088e09ac6d415a0807f0212dd5fa7a75","ssdeep":"768:IdVL1Bg91o2uFmlwsGPKNL6aFpq9jsbr8EbQfWB3B:IdzeHo5FttU6SpmjQr8EbS0B","tlshash":"4dd2f13398b29448c01de0327b86db13067f4bf0ca59fa56677124723525764cf6bd6e","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-09-20T19:00:51.859761Z","times_seen":555,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/slick/slick.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.871Z","timestamp":1789930778871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/slick/slick.js HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14215\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87157,"size_decoded":14453,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-09-20T19:00:51.797285Z","times_seen":792,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/footer-bg.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.883Z","timestamp":1789930778883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/footer-bg.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/temp/custom/css/main.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20397\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20397,"size_decoded":20664,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x629, components 3","md5":"173006becf1f9024a75cbf6549d11bcd","sha1":"231f4956f43af8bd4763c626c83b94093d03d791","sha256":"a806702cc490d657e574c9a2eb2ff002abe0e8820c3a170d4883857fd5de23cb","sha512":"0016ba9f03659fe4aad0da2e1db61f0e5d809e254b3fe9beaa5680069802eb8de19effccd00fc7d0fa199b69b8dd11a16e4173a44481a09a843fdf6346686e7d","ssdeep":"384:ja64Ahf6E4e/50OI8e9saLroK5lmtpdKGRlG:jadAhf6E405hpeHLrN5grbO","tlshash":"2e924c67ff06d746c9989330c4fb17687fb600bde690564aa6b8083a1cde3467d8c1e1","first_seen":"2023-05-20T12:03:57Z","last_seen":"2026-09-20T19:00:51.862012Z","times_seen":603,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/storage/app/public/photos/XhLRPRVtSojv6ztKcE9ynV5iQ2uct56XTNy7xKRO.png","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:39.377Z","timestamp":1789930779377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /storage/app/public/photos/XhLRPRVtSojv6ztKcE9ynV5iQ2uct56XTNy7xKRO.png HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1242\r\ndate: Sun, 20 Sep 2026 18:59:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1242,"size_decoded":1450,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"c6a5abb575f4c14729b299058539998f","sha1":"90a8e0cfc7695944c9d28f3cf908ecbeb3367d0c","sha256":"7271dd5c11fb9a1052a5e91a09afbe7d148fd3388dc51c338df62a0a16f06739","sha512":"80fa0b7d01774d4a68e42ffd4b874c60a129684d86af168699905342e95af7ff7bc84559ea5a2619a600d75346b41664522b621b7bbe3fc7b5d14448568865af","ssdeep":"","tlshash":"7721843ac1c1061af0334264fb81f7983619825192970f603b9eb177facd0bb52a37c8","first_seen":"2024-02-20T08:09:53Z","last_seen":"2026-09-20T20:40:27.861714Z","times_seen":3101,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.187Z","timestamp":1789930778187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/js/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1712\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5594,"size_decoded":1949,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-09-20T20:26:48.98787Z","times_seen":24920,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/crypto-investment-sm.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.310Z","timestamp":1789930778310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/crypto-investment-sm.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94140\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94140,"size_decoded":94407,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"67019c83e967a0e72bf006b3c202f439","sha1":"01d41a39c437ea54138820ffaaab58bb86e21bf3","sha256":"d9319dba8677abd747aa26cde0db12276501d81b30cad9e175329c07fd3275bc","sha512":"665129cbc534ddaadd9510bbfe1690d485d85073b72e4667cf721b4d76f8ca317ce5581e92d226b9f078cc5be1cdbe421c008b16bd1af0c20cdd33d2092491f5","ssdeep":"1536:xiM96fkCGRm49r8NLZo7HxbE9QXjiv3cjSr6KgRTry8iycEymo++o+YZSRekfcwB:E+mk3R5r8NLZAZXTM9OtTry8Hymo++Sk","tlshash":"f7930250ea6b896050ccc536a8812bacdb265ab7a7d6350f38edf7cde1484f42937d06","first_seen":"2025-03-18T04:27:57.417698Z","last_seen":"2026-09-20T19:00:51.865075Z","times_seen":558,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cp.vexotra.com/temp/custom/images/stock-investment-sm.jpg","fqdn":"cp.vexotra.com","domain":"vexotra.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.321Z","timestamp":1789930778321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vexotra.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 10:07:32 GMT","end":"Sat, 19 Dec 2026 10:07:31 GMT"},"fingerprint":{"sha1":"E8:8C:6F:4C:0C:18:E3:F7:A8:05:90:02:8B:DA:95:A3:09:A7:CC:EB","sha256":"0C:3B:62:72:9F:19:D3:D6:6A:DF:36:72:2F:CF:77:A1:E5:E8:FC:BF:FB:C3:D8:10:28:F3:ED:57:A7:26:8F:EC"}}},"request":{"raw":"GET /temp/custom/images/stock-investment-sm.jpg HTTP/1.1\r\nHost: cp.vexotra.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InlScVBiaHRGQ1hHbE90VmhYZndtL1E9PSIsInZhbHVlIjoiajJoYTAvOWRORSt0ekVOTnFVemJkaE1namt5TUdZbGhhR3lkN2RqWVc2Tis1WS94SlZIRGdPdHY3YXZmTXphZnI5OFFTR3dYckdvVmdmall4NWVsQXlFSkVRZDVaV2lCWGFTbmRIaGM4UldnQ3MxVVM2WlkwU29XMUk2Mm9pMHciLCJtYWMiOiIxZmU4YTk4YzAzNDVhMWZiZTNlNDI4NzZhNzFhYTc2NTU4NTNkZWI4NTYyY2E5YzQ4OWNlZDY4MDY5YTQ3MDE5IiwidGFnIjoiIn0%3D; royal_trades_option_session=eyJpdiI6IkxLSXpYNXljQVJVckJnelFjdGNCYWc9PSIsInZhbHVlIjoiUVR2bjk4Q3ZyQUc3NTc0ZnBhSmxrVjV2MFc4K2NtMCs4L0dROUE5U0NkbDB0MUxsdGs4bVRudmNwZWZOSFJ5VGI3QU9XSFU4OWZsVk05aHBlc2x3NStOdS91V3NmWEZwL1d1WkpjV3c4Y3h1RVVrOFhpQ3JxRjNkMGtJTXQyVlYiLCJtYWMiOiI4NDEyYjBjOWQwZTNiYzllYTMyMjljZWEwYzIwZDEyODcxMzE0ZWVhZTZmNmRlZTE1NWM2NjI5YWRjNjc2NWYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 18:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Feb 2024 11:22:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 187318\r\ndate: Sun, 20 Sep 2026 18:59:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":187318,"size_decoded":187586,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 855x570, components 3","md5":"fc3e76cae0486fe2182e9580e7870ff0","sha1":"8b0885866f9dc0e6c22b63835c1be191ca0fc918","sha256":"26f8d247ea6b71c8e25a3dd239601cd0e4689f69cbec277e8e8d94987b7bf8d1","sha512":"8b7527cf0d06984371195bff3b27aae5c249bb7e83b72fd657a6a66aaa1a55932a6eb7eaf83b64895ded0ddff7748894360f3dfbf2fdd1245e03be804982744a","ssdeep":"3072:Q16tfXP9p8hwE9OwLVq8bOd6bDhD5ZLiB27bJWJ71aXaZktAO8tc:QufPLW9BtO6ZLyaEp1aUe","tlshash":"e20423408f34a8ce8aff9375bc26c202d258b9994e20feb7f02485e57cc59ee2547e44","first_seen":"2025-03-18T04:27:57.412829Z","last_seen":"2026-09-20T19:00:51.866449Z","times_seen":557,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"cp.vexotra.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"cp.vexotra.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:38.765Z","timestamp":1789930778765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:59 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376059\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-09-20T20:33:55.895983Z","times_seen":10029,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":22,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.qm0uBrmE8W4.2021.O/ck=ytembeds.base.d7UHKqYQujY.L.F4.O/am=AAAAQA/d=1/exm=base,r78Drb,root/excm=base,root/ed=1/br=1/rs=AGKMywH5QkKR-Id92dYATk3-S7HIBoFgng/m=cwx9N","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.150.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.560Z","timestamp":1789930779560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.qm0uBrmE8W4.2021.O/ck=ytembeds.base.d7UHKqYQujY.L.F4.O/am=AAAAQA/d=1/exm=base,r78Drb,root/excm=base,root/ed=1/br=1/rs=AGKMywH5QkKR-Id92dYATk3-S7HIBoFgng/m=cwx9N HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/x7msE3tx8QI\r\nCookie: __Secure-YNID=21.YT=IUVmBwxAQpsi4ok29V9505JXPxVX_CldIM7UzLf5lhchEFnHWbljy048Gq1qvD2mcv9AJwMN5ZVH6o4m-uLwkuoCdYp-thEgzgyb8-Rmc58R-Qq2lxrZvenvTfAdGCrreshBFWymUgrgw3XBzMYgUtcac3pviMPTx8w5BE-3CDiplXBEODYvdNUxTFFiobwXVk0OphKl0Jc5-Nr7mohxF4FzA_0cIIchnPIgvQyBSHD6WZM0Iv8QofBf06oc20AumZX1uku_N00K5Rs7T_mj_pxW-0B0W0BgXu17q4mxtoX8eoqWGTVIYQAyRFolkvxvXtjV5ecV0-E97OXH9yyHSQ; YSC=3mAYq-92sA4; VISITOR_INFO1_LIVE=NlBBMLIh5jo; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgUw%3D%3D; __Secure-ROLLOUT_TOKEN=CMSazNr24Y7amQEQ8cz74ev9lgMY8cz74ev9lgM%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 17816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 12:53:41 GMT\r\nexpires: Sat, 18 Sep 2027 12:53:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 18 Sep 2026 09:11:44 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 194758\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66091,"size_decoded":18729,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14301)","md5":"33b45c91cb626862e91196d11d547e35","sha1":"48a0e222d9f0c44f9f65637106dbe2a0faaba6d1","sha256":"d51ccd0fca2bc712576ac014eb7b63f0fac9f3c976e7f0d560bfde8af9a3a530","sha512":"7d229d9decc5c867002765396bd1c8f08956236a8b6bbcbfc2dfe5620539cea81587e4c39b24bf8543816e21a29521d743b798e800238bae2655bfb0c9dcd2b9","ssdeep":"1536:kkhQHZQiU/wkjPAb3j9vJe+VVqEKNmrHahxvlV3kAR:kkhQ5QiUYkcbzZJxRahxcAR","tlshash":"a65319b470e37570d397b738d3ab9480b66aa413c78868b5e0078b5e0efd9d07562f29","first_seen":"2026-09-18T15:45:00.744517Z","last_seen":"2026-09-20T21:20:37.430538Z","times_seen":317,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/f5f45af99605c7ba23e8a87b21404d1f294120ec.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.186.29.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cp.vexotra.com/","date":"2026-09-20T18:59:45.779Z","timestamp":1789930785779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/f5f45af99605c7ba23e8a87b21404d1f294120ec.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://cp.vexotra.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cp.vexotra.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 18:59:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c2-pfQgdZC/2pJdiFSOFWiKML7fs+8\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1218,"size_decoded":887,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b456c62a1d84cea51981f7bc33092b2b","sha1":"a5f4207590bfda925d88548e15688a30bedfb3ef","sha256":"00f6c1308af66939e6eae9a7a060dc11b80131611edb2bbd39c4f24a0ec1cfbc","sha512":"65e4f1a2d21d339a55e9727262b50be3dc07cc4a931537777115ca16a5e8843f170112bffb6138bcd66f238e451d2255b8845b9df96e52e1c51169d2f6c08cee","ssdeep":"","tlshash":"0621226d4a6822fe9245c6d6c5047f075abcdcb37104397efa0d4a4d60eb2a6213646b","first_seen":"2026-07-08T06:12:58.618771Z","last_seen":"2026-09-20T19:00:51.869352Z","times_seen":278,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":3,"connect":21,"send":0,"wait":25,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/x7msE3tx8QI","date":"2026-09-20T18:59:39.067Z","timestamp":1789930779067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 18 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 204431\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-20T20:46:52.016497Z","times_seen":995106,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}