{"report_id":"4b75c4ff-add6-4e54-9997-d201eaea7f21","version":6,"status":"done","tags":[],"date":"2026-01-10T21:34:59Z","url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"185.53.179.200","port":0,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"title":"fpoxxx.com","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"185.53.179.200","port":0,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-14T21:34:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-10T21:34:40Z","timestamp":1768080880,"ip_dst":{"addr":"Client IP","port":53498,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-01-10T21:34:40.874151+0000\",\"flow_id\":774038032004878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"54.75.69.192\",\"src_port\":443,\"dest_ip\":\"172.18.0.29\",\"dest_port\":53498,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.youstarsbuilding.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"70:FA:13:EE:FF:82:23:36:52:0A:5D:4D:41:EE:90:F5\",\"fingerprint\":\"1d:e0:7a:77:9e:39:3d:b5:85:c1:3d:30:3e:e7:35:c5:fe:d1:7e:38\",\"sni\":\"obseu.youstarsbuilding.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-12-03T00:00:00\",\"notafter\":\"2026-03-03T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1219,\"bytes_toclient\":3922,\"start\":\"2026-01-10T21:34:40.767758+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-10T21:34:40Z","timestamp":1768080880,"ip_dst":{"addr":"Client IP","port":53508,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-01-10T21:34:40.931027+0000\",\"flow_id\":1837510589189882,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"54.75.69.192\",\"src_port\":443,\"dest_ip\":\"172.18.0.29\",\"dest_port\":53508,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.youstarsbuilding.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"70:FA:13:EE:FF:82:23:36:52:0A:5D:4D:41:EE:90:F5\",\"fingerprint\":\"1d:e0:7a:77:9e:39:3d:b5:85:c1:3d:30:3e:e7:35:c5:fe:d1:7e:38\",\"sni\":\"obseu.youstarsbuilding.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-12-03T00:00:00\",\"notafter\":\"2026-03-03T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1219,\"bytes_toclient\":3922,\"start\":\"2026-01-10T21:34:40.823034+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"euob.youstarsbuilding.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"obseu.youstarsbuilding.com","ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2022-08-01","domain_rank":1721811,"first_seen":"2023-11-07T16:47:12Z","last_seen":"2026-01-09T16:12:28.846059Z","alert_count":0,"request_count":14,"received_data":10874,"sent_data":15131,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ww9.fpoxxx.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":4,"received_data":11644,"sent_data":1971,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"d38psrni17bvxu.cloudfront.net","ip":{"addr":"54.192.209.190","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-09-22T18:48:38Z","last_seen":"2026-01-07T05:56:16.677747Z","alert_count":0,"request_count":1,"received_data":11842,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"euob.youstarsbuilding.com","ip":{"addr":"54.240.174.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-08-01","domain_rank":2095641,"first_seen":"2023-10-25T16:14:24Z","last_seen":"2026-01-09T16:12:27.652954Z","alert_count":2,"request_count":2,"received_data":241801,"sent_data":906,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-04-20T13:57:08.276666Z","times_seen":368152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.youstarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js","fqdn":"euob.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.240.174.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"904ee8c403b71f60ccdf3ab74b1bf29f","sha1":"e19cabc3632e52424dc3ace01668ab64a6de6bb5","sha256":"f08e2bfa7eb53d34f35d976e6469f757165e71dc09ef14950585d28034ebcc9f","sha512":"3e856ad0f394b24fa983ab1f75c7db942e418cc68cbb70db5114dc778b9def4d4887a332cb6925d7b6d5f27afff2e6cd64593b58f75eeee91b86bcc4fc74c722","ssdeep":"1536:5uQSSob5Cqdw0/3BHz9FSUsqLonSZcgZ+tqXYCJxBcTKYt21lbgspzMohFcWmqBO:5uHSu/5z7ZLYC5X9MoGqBvQZjfuWd1h","tlshash":"7dc3c5edb2e27025439324a5157f410ae27b5e503c4b8294d17ee9d4ac7ce8e817bfac","size":120370,"data":"","first_seen":"2026-01-07T14:15:44.831745Z","last_seen":"2026-01-29T07:42:23.884656Z","times_seen":824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-04-20T13:57:08.276666Z","times_seen":368152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-20T13:47:04.749163Z","times_seen":345656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.youstarsbuilding.com/sxp/i/9c8fd36ad2c2af958c402ab3de108d62.js","fqdn":"euob.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.240.174.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48dbbaeb8a87de9f9f7687d0ac5b75e8","sha1":"1b46e579637acd6dd723c8ffa6cef2a3f462cf64","sha256":"16a65e1a9c44007b2813c2c1cf7a825394652ad58d7cff8c6416825bdf46e71c","sha512":"c546e68ea7e8753a8d5198077237db3475022c099b3942a6fb00f1a4e5384f34a1fd2a0c0a7234f492c39803f8d4a1ed554850cf536dae218692ff72bd4e3a7c","ssdeep":"1536:5uQSSob5Cqdw0/3BHz9FSUsqLonSZcgZ+tqXYCJxBcTKYt21lbgspzMohFcWmqBi:5uHSu/5z7ZLYC5X9MoGqBvQZjfu+d1h","tlshash":"23c3c5edb2e27025439324a5157f410ae27b5e503c4b8294d17ee9d4ac78e8e817bfac","size":120379,"data":"","first_seen":"2026-01-08T07:54:32.807772Z","last_seen":"2026-01-29T07:42:23.89849Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-20T13:47:04.740272Z","times_seen":345677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-20T13:47:04.740272Z","times_seen":345677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2322529daaea399ca18cfb31854061ed","sha1":"bf881ca044f9e4b0ad739b12d8c37be29e6af231","sha256":"1f264fc5c15608c196ebf2e3a51448e4fdb20989fc8b002361112aa2b8355458","sha512":"78e093d254042c754e04b5a79d7ba3c0fc2bf5f5f11b8f650fd8fc06097be1bc57ce2b521d014e8d60a67d752f3c8279e787d3181e2e5d203b0c2e7b52cc3462","ssdeep":"","tlshash":"2bb0124418fb6400263b30ee4b0b7200202008170804a5007a0c83c30f50316ce0a69c","size":116,"data":"","first_seen":"2025-11-04T03:02:26.970433Z","last_seen":"2026-04-19T19:03:01.176897Z","times_seen":641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-20T13:47:04.74497Z","times_seen":345691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-20T13:47:04.749163Z","times_seen":345656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-20T13:47:04.74497Z","times_seen":345691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/ct?id=80705\u0026url=http%3A%2F%2Fww9.fpoxxx.com%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20domain%20-%20landingpage\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1768080880735\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=53595209985199500805189716718008786680822102285216597120552129000695967905050849089028202790\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=W1siZWYiLDc3Ml0sWyJhYm5jaCIsMTRdLFstMzAsIltcInZcIiwwXSJdLFstMzIsIjAiXSxbLTM2LCJbXCI1LzRcIixcIjUvNFwiXSJdLFstOSwiLSJdLFstNDMsIjAwMDAwMDAxMDAwMDAwMDAwMDExMTAwMTAwMDAwMTAwMDAwMDAwMDAwMSJdLFstNDYsIjAiXSxbLTQ4LCJbXCItXCIsXCItXCIsXCItXCIsXCItXCIsXCItXCJdIl0sWy00OSwiLSJdLFstNTMsIjAwMSJdLFstNjIsIjU4Il0sWy02NCwiLSJdLFstMTcsIjQ4Il0sWy0xOCwiWzEsMCwwLDBdIl0sWy0yMywiKyJdLFstMjQsIltdIl0sWy00LCItIl0sWy00NSwiNzUyLDAsMCw3MTksMCwwLDc2MSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwIl0sWy00NywiVVRDLGVuLVVTLGxhdG4sZ3JlZ29yeSJdLFstNTAsIi0iXSxbLTU2LCJsYW5kc2NhcGUtcHJpbWFyeSJdLFstNTgsIi0iXSxbLTYxLCItIl0sWy02OCwiLSJdLFstNzQsIi0iXSxbLTIyLCJbXCJuXCIsXCJuXCJdIl0sWy0xLCJMaW51eCB4ODZfNjQiXSxbLTI3LCItIl0sWy0yOSwiLSJdLFstMzgsImMsLTEsLTEsMCwwLDIzLDAsMCwzMiw3OSwtMSwwLCwyMzcsNTQ5LDU0OSJdLFstNTEsIi0iXSxbLTEyLCJcIjFcIiJdLFstMzUsIlsxNzY4MDgwODgwNjIyLDBdIl0sWy02NiwiLSJdLFstNzEsImEwMTAwMTAxMTAwMTAwMTAxMDAwMTAxMDAxMTAxMTAwMDAwMDEwIl0sWy04LCItIl0sWy0xMCwiLSJdLFstMjEsIi0iXSxbLTYwLCItIl0sWzEyLCJ7XCJjdHhcIjpcIndlYmdsXCIsXCJ2XCI6XCJtZXNhXCIsXCJyXCI6XCJsbHZtcGlwZVwiLFwic2x2XCI6XCJ3ZWJnbCBnbHNsIGVzIDEuMFwiLFwiZ3ZlclwiOlwid2ViZ2wgMS4wXCIsXCJndmVuXCI6XCJtb3ppbGxhXCIsXCJiZW5cIjo4MCxcIndnbFwiOjEsXCJncmVuXCI6XCJsbHZtcGlwZVwiLFwic2VmXCI6NDk0MTk1MDQzLFwic2VjXCI6XCJcIn0iXSxbLTEzLCItIl0sWy0yNiwiLSJdLFstNSwiLSJdLFstMzksIltcIjIwMTAwMTAxXCIsMixcIkdlY2tvXCIsXCJOZXRzY2FwZVwiLFwiTW96aWxsYVwiLFwiMjAxODEwMDEwMDAwMDBcIixudWxsLGZhbHNlLG51bGwsZmFsc2UsbnVsbCw1LHRydWUsZmFsc2UsbnVsbCwwLGZhbHNlLGZhbHNlLGZhbHNlLGZhbHNlXSJdLFstNDAsIjM3Il0sWy00MSwiLSJdLFstNTIsIi0iXSxbLTU3LCJTM2xSVFUxSlNnTVdGbHhNVmxzWFFGWk1TazFZUzBwYlRGQlZYVkJYWGhkYVZsUVdTa0ZKRmxBV0N3c05Yd0VNQ2drTFdGZ0xXdzljV2dvSldGaGFBRmdCREYxWUMxcGJYd0FYVTBvRENBTUJEdzhOQ0JVT0NBQVdUUmRjUVVsV1MwMUtGZ1Y1VVUxTlNVb0RGaFpjVEZaYkYwQldURXBOV0V0S1cweFFWVjFRVjE0WFdsWlVGa3BCU1JaUUZnc0xEVjhCREFvSkMxaFlDMXNQWEZvS0NWaFlXZ0JZQVF4ZFdBdGFXMThBRjFOS0F3Z0RBUThCQ2dBVlNseE5iVkJVWEZaTVRSbFJXRmRkVlZ4TEV3NElBQlpORjF4QlNWWkxUVW9XQlhsUlRVMUpTZ01XRmx4TVZsc1hRRlpNU2sxWVMwcGJURkJWWFZCWFhoZGFWbFFXU2c9PSJdLFstNjksIldpbjMyfHx8NDh8LXwtIl0sWy03MiwiRXhVPSJdLFstNywiLSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltcImRlc2NyaXB0aW9uXCJdfSJdLFstNTUsIjAiXSxbLTY1LCItIl0sWy02LCJ7XCJ3XCI6W1wiMFwiLFwib25SVEJGYWlsdXJlXCIsXCJOb3RpZnlQYWludEV2ZW50XCIsXCJfX2N0Y2dfY3RfODA3MDVfZXhlY1wiLFwiX19jdGNnX2N0XzkyNzU0X2V4ZWNcIl0sXCJuXCI6W10sXCJkXCI6W119Il0sWy0yOCwiZW4tVVMsZW4iXSxbLTMsIltcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIl0iXSxbLTMxLCJmYWxzZSJdLFstMzQsIi0iXSxbLTM3LCItIl0sWy00MiwiODgzMzk5MDE2Il0sWy02NywiLSJdLFstNzAsIi0iXSxbLTczLCJFaFE9Il0sWyJibmNoIiwyNTldLFstMTQsIi0iXSxbLTE2LCIwIl0sWy0xOSwiWzAsMCwwLDAsMCwwLDEsMjQsMjQsXCItXCIsMTI4MCwxMDI0LDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCwxMDI0LDAsMCwwLDAsXCItXCIsXCItXCIsMTI4MCwxMDI0LG51bGxdIl0sWy0yMCwiLSJdLFstMiwiNixJc045bkduV2JBWUFJeE5mUWFPcUdFMENGQVFzY0cwMEluaE9iWUJBS1lVT3pRTzZFWDAyMEltR0xjdTYydXJkUC9jMmQycE5tVlpBd2YzLy84ejc5R3JIYTFXdTNPbVhQUHZlIl0sWy0zMywiLSJdLFstNTQsIntcImhcIjpbXCIzMjk5NzI4NDUyXCIsXCI4MjI4MjMxMTlcIixcIl8zXCIsXCIyNjM5MjIyNDY4XCJdLFwiZFwiOltdLFwiYlwiOltcIl8wXCIsXCIyNjQ2MDM4ODJcIl0sXCJzXCI6MX0iXSxbLTU5LCItIl0sWy0xNSwiLSJdLFstMjUsIi0iXSxbLTQ0LCIwLDUsMCw1Il0sWy02MywiLSJdLFsiZGRiIiwiMCw3LDEsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMSwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwyLDAsMCwwLDMsMCwwLDAsMCwwLDAsMiwzLDQwLDAsMTcsMCwyLDAsMCwwLDAsMCwwLDAsMSwyLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAiXSxbImNiIiwiMCwwLDAsMCwwLDAsMCwwLDAsMywzLDAsODMsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwxLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCJdXQ%3D%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=zVxyCKab8j\u0026pto=663\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1768080880.WeLdyqhv0JCnm1Bl\u0026suid=1.1768080880.n8aM4vpvFYtbgXfH\u0026tuid=1.1768080880.HF4v2bmdcB8McEgn\u0026fbc=-\u0026gtm=-\u0026it=7%2C199%2C82\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=jx.2.0%3B\u0026sck=-\u0026io=aGA2Og%3D%3D","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"af106fa2c43919b2cb855680c7648cca","sha1":"f4d92ca60f1a2ba12aca7aea6b71a450d8eec4fd","sha256":"2565b8cc0ee6495edb1ec2aff87944a1dea039d527a08ccb7d4dce5c0532baae","sha512":"ad3932e8355b23cbcceaf25e7bf2d41ed187cf921d60320647f192c87fbbeeedc4668a9f3d6c0c3bc3eab769c4efdfaceb0b2bf9c5dedfb2f0afcf9e5baa8d8f","ssdeep":"","tlshash":"b661d873de56ac457bf6a9236758896eb7aa973716cf8d2a8c3772c9047b394df00000","size":3297,"data":"","first_seen":"2026-01-10T21:35:10.291436Z","last_seen":"2026-01-10T21:35:10.291436Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"149da60e0855829f92218165959e9d85","sha1":"25d76a5631987784e86912dcbfab4a2179eca6b0","sha256":"bdebfb40cbd97531cce0eb5f79bf5987dc216d2923ef3ef6dd46c4d302fd24f9","sha512":"463569c25f1ebc13328a190d7ca4159990b9a8556df49a091d1627c10a14c7a230845492f609f537a88a6a84ba3906aac9ca490c610a8183a9143ebd600ee860","ssdeep":"","tlshash":"aa210d9a2cf6001c6bb7309d4f0b8008b536ac5ba298cb057d0c56903f2862bd672be9","size":1258,"data":"","first_seen":"2026-01-10T21:35:10.300176Z","last_seen":"2026-01-10T21:35:10.300176Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/mon","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:56.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1673\r\nOrigin: http://ww9.fpoxxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1673,"data":"e=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\u0026cri=AWcVwkOg4d\u0026sf=0\u0026dc=\u0026cp=15\u0026gtm=-\u0026gac=-\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tb=1\u0026ich=0\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=15019\u0026mo=0\u0026pn=15938\u0026spn=920\u0026fp=237\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww9.fpoxxx.com\r\ncontent-type: application/json\r\ndate: Sat, 10 Jan 2026 21:34:56 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T21:34:36.880Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ww9.fpoxxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/chronos?dune=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.tAtPDKRwvMK_7B4awfAIgCO1AvWAQpYf5gQwXtDx72vN-9OjDVIkKw.gSURxOXFqCQCW88CwVZlAg.E7iY3S7iBXQJoZ2fsONBj_l6kiwJ8Tle1blyxKVKZ8f0UF8rNrNpMALvEhdefDABTZQL6Ow4dSNn6myyAM9AzvoLV1UriaxZZifsQk2TlXRdZsoP78aTqzn_MRbJWga02vJr6LVEMW2E3U5wN34fi5rtbQ7_rWn4-yM-IFeBWVQuUvrlVJTss3ObZNw5lBLt.SINH4Hqj8KwD6TvhwpWSQg\u0026t=6962c5f0\u0026token=8e3e2da9151952b548117b8141368f84d761f9c3","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"185.53.179.200","port":80,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:40.312Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /chronos?dune=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.tAtPDKRwvMK_7B4awfAIgCO1AvWAQpYf5gQwXtDx72vN-9OjDVIkKw.gSURxOXFqCQCW88CwVZlAg.E7iY3S7iBXQJoZ2fsONBj_l6kiwJ8Tle1blyxKVKZ8f0UF8rNrNpMALvEhdefDABTZQL6Ow4dSNn6myyAM9AzvoLV1UriaxZZifsQk2TlXRdZsoP78aTqzn_MRbJWga02vJr6LVEMW2E3U5wN34fi5rtbQ7_rWn4-yM-IFeBWVQuUvrlVJTss3ObZNw5lBLt.SINH4Hqj8KwD6TvhwpWSQg\u0026t=6962c5f0\u0026token=8e3e2da9151952b548117b8141368f84d761f9c3 HTTP/1.1\r\nHost: ww9.fpoxxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww9.fpoxxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 21:34:40 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9fe3cb2b7313dc79bb477bc8fde184a7","sha1":"4d7b3cb41e90618358d0ee066c45c76227a13747","sha256":"32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864","sha512":"c54ad4f5292784e50b4830a8210b0d4d4ee08b803f4975c9859e637d483b3af38cb0436ac501dea0c73867b1a2c41b39ef2c27dc3fb20f3f27519b719ea743db","ssdeep":"","tlshash":"2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315","first_seen":"2023-04-05T07:27:09Z","last_seen":"2026-04-20T13:47:04.729028Z","times_seen":81862,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/mon","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:41.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2482\r\nOrigin: http://ww9.fpoxxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2482,"data":"e=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\u0026cri=zVxyCKab8j\u0026sf=0\u0026dc=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%3D%3D\u0026cp=1\u0026gtm=-\u0026gac=-\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tb=1\u0026ich=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=1002\u0026mo=0\u0026pn=1879\u0026spn=877\u0026fp=237"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww9.fpoxxx.com\r\ncontent-type: application/json\r\ndate: Sat, 10 Jan 2026 21:34:41 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/mon","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:45.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1700\r\nOrigin: http://ww9.fpoxxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1700,"data":"e=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\u0026cri=zVxyCKab8j\u0026sf=0\u0026dc=\u0026cp=5\u0026gtm=-\u0026gac=-\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tb=1\u0026ich=0\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=5007\u0026mo=0\u0026pn=5884\u0026spn=877\u0026fp=237\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww9.fpoxxx.com\r\ncontent-type: application/json\r\ndate: Sat, 10 Jan 2026 21:34:45 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/mon","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:46.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1670\r\nOrigin: http://ww9.fpoxxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1670,"data":"e=37dfbd8ee84e00126ce6c73dea4f829d9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d57138a682317071a10acf9f29f671c8bd2885379364fab2c770c823bd6679300395425915b010966020ac2ba391a77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2e1071055df5da2469290ea2fd417a8dfaf57a96e45d761b7fabf0a19ccd71e8cfc248b5038e523d65cceb92a9e471d280f061856b4a95b9c3330751b06871fed04b2ca690e527d05be054ae964c975dc1ce63d67a60c7da7886779ad3e8f38de7ff0b79e425a4c5853b4d26eec16992a850f614540bd34148c78587cfd1ec8220887290defbc879e43c2374a77e3ab2939f45659faa50ad16e9850dd837a37e564051cf20b400d087f63fb4c7768719e4aed2d060824f6f6bbd06541c3e073ec3ac42ba4ed3c0910fa3de3dbddf6c94c2f9f03dd789b40d342ed2a7080a94e459004cbbbdb861b82799ec58f3fd28b07cbc2c9252d508caaf3dc3063ae2ae930b232d3446735f4e1db8e0926dd504bf45464321f0b451b8cd6458b7f987fcbc16b1b3b9fdf4a4bded590c79a21394bc4b6f9d42621ddf63557164fe7bb128119396c525ca26a14ccff97ba5ee758b671d65655b280196d2e5c53d7c5392184d95dbd1bbaeb22501d8b2ef20c29c0173a581676b37eb8dcb1461e1358f34f206f17ddf4bc9c213e4a866b3dfd9aec71433abb9643de023f1d4eff504966e280451c12a515ab0a35f8de408d8d9c69946c7869b214e6a12fc2fa104aa55b0897584721e6353307d63f305cdd26247b36fdcb5aa768a9a0f9e7e6eae1374308db7925918fc7bf48e10da00311c58e56d7990a5d674d9067d888f16a1dcddfb9c5098190c6407f829600ec0dd\u0026cri=AWcVwkOg4d\u0026sf=0\u0026dc=\u0026cp=5\u0026gtm=-\u0026gac=-\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tb=1\u0026ich=0\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=5007\u0026mo=0\u0026pn=5926\u0026spn=920\u0026fp=237\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww9.fpoxxx.com\r\ncontent-type: application/json\r\ndate: Sat, 10 Jan 2026 21:34:46 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/mon","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:50.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1703\r\nOrigin: http://ww9.fpoxxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1703,"data":"e=37dfbd8ee84e00126ce6c73dea4f829d9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8a838f032a3c4dfb7e71068e398c30c5526554769b03030a33060acfed3e1c77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2842230603a6df28637a05a5ac417e88afa47a96e85a71197eabaea7c69a71bdcfc248b5038e523d65cceb92a9e471d280f061856b4a95b9c3330751b06871fed04b2ca690e527d05be054ae964c975dc1ce63d67a60c7da7886779ad3e8f38de7ff0b79e425a4c5853b4d26eec16992a850f614540bd34148c78587cfd1ec8220887290defbc879e43c2374a77e3ab2939f45659faa75a60ee49841d438ed73414752c73aba1fdfc2a93ff6c734c408ec8adfcd6c83550435bd52541d3e4c7de6a268b349c2e78164fdde2abdde6cde82c8f07688bcf174603ed0a9110495f7195442acd5b166a43892f658f3fd2fb074bc2c965bd308caab3ac3063ae2ac927a2238610236165b16aefd916ad203da595c176ca1e05dd58a1912ffbfd9b2bc64c2e5ecfc989ffa8d1f067da30186cc2a30de421747c57f4f3229af2fbd7c0bc3f5c0648c68d72d8ba324cda653912a722566423a65f584b68c542d2d880457d19680efa2c0410480b1ba7b9ecf7b7bd0da1222118f959f5473ea73d62d9767b04acc4cc9d401bafa64f091e3bf845520abb92969826ab4d9e1ef47e033674741cd371d32e4f406d0b206c09b87da0098c595390f3747bc35b717ea08e39363972e51611c6f3f6deb5b8e81315da57d80fab727d3cf519e2b30fc406e269ff4c35519bd24b79c1ac706330856ae646fd1edc562ca573e9a8213bdcd84a9d550d05c493044b1652f579c930c58a62ea5ba986b9dd9b24b0120ef\u0026cri=zVxyCKab8j\u0026sf=0\u0026dc=\u0026cp=10\u0026gtm=-\u0026gac=-\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tb=1\u0026ich=0\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=10013\u0026mo=0\u0026pn=10890\u0026spn=877\u0026fp=237\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww9.fpoxxx.com\r\ncontent-type: application/json\r\ndate: Sat, 10 Jan 2026 21:34:50 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"185.53.179.200","port":80,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T21:34:40.095Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ww9.fpoxxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 21:34:40 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nVia: 0.0 Caddy\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_p2IegkP4sYRla0sB+IdmebAKHV91R8lciAwKaMh8IsfQPSCNmiTlyqnBflDtdc4UyfqIeiifbmrcNpw580L6KQ==\r\nX-Buckets: bucket011\r\nX-Domain: fpoxxx.com\r\nX-Language: norwegian\r\nX-Pcrew-Blocked-Reason: hosting network\r\nX-Pcrew-Ip-Organization: Blix Solutions\r\nX-Redirect: zeropark_adult\r\nX-Subdomain: ww9\r\nX-Template: tpl_CleanPeppermintBlack_twoclick\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10242,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (426)","md5":"a57e22978ec72fc69b22a025c72f60d7","sha1":"2f6a073e8911913cd2cefa18e8009356d556b652","sha256":"614c94bf75b4b15af24491623a7b241d44ce1fa27c2272207dc9993f5e1f77ee","sha512":"944b0be2f700657a83139de3f95d7515e6f9f5a8ac6a191d2ce69e21ee3c3bd5cf7f255f6e0baf2c5a326246be6698cfc0f611af23b508b54c8062934622bef8","ssdeep":"192:TiVzYoHMfOBro2Tc/TIeW5H0llap1WeC5KS92NQeVky:Ti9YoHMfO2/TIXyN+QA","tlshash":"3822e8825ae36819602bc0c9cba673087156a043cb4bccc9f9ec1674ef8e550a623edc","first_seen":"2026-01-10T21:35:10.28712Z","last_seen":"2026-01-10T21:35:10.28712Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":32,"dns":1,"connect":31,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlackConsent_657d9013/img/arrows.png","fqdn":"d38psrni17bvxu.cloudfront.net","domain":"d38psrni17bvxu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.190","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:40.473Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/cleanPeppermintBlackConsent_657d9013/img/arrows.png HTTP/1.1\r\nHost: d38psrni17bvxu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 11375\r\nConnection: keep-alive\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 17:50:20 GMT\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 Aug 2025 17:42:07 GMT\r\nETag: \"dce8vhow0h2h8rz\"\r\nVary: Accept-Encoding\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: hj_PFjjG6wEU5wxcf26EzMnnB_YHpJzr7ua8f2RamNOqAi90uh3RCA==\r\nAge: 13460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":11375,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 600, 8-bit colormap, non-interlaced","md5":"0cb2e5165dc9324eb462199f04e1ffa9","sha1":"9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8","sha256":"67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865","sha512":"7a285c4a87b9f9093b7ba720d8fe08e0ad7e2ebde9ef8c8d11b70afa08245af8f8a7281c7b3fbe8bad21c3afde4f32634d3bd416822892aa47ba82c12f4b8191","ssdeep":"192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/","tlshash":"94329f86e207c9addc119cb16bd8e9384c673cc3c66925b748987669e4bb80475f049f","first_seen":"2023-04-05T14:20:44Z","last_seen":"2026-04-19T19:03:01.171686Z","times_seen":205203,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":42,"connect":1,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww9.fpoxxx.com/favicon.ico","fqdn":"ww9.fpoxxx.com","domain":"fpoxxx.com","tld":"com"},"ip":{"addr":"185.53.179.200","port":80,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:40.481Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww9.fpoxxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 21:34:40 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 0\r\nLast-Modified: Wed, 16 Oct 2024 07:59:04 GMT\r\nConnection: keep-alive\r\nETag: \"670f7248-0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"ww9.fpoxxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/ct","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:40.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"POST /ct HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 4335\r\nOrigin: http://ww9.fpoxxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4335,"data":"id=92754\u0026url=http%3A%2F%2Fww9.fpoxxx.com%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20Adult\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1768080880818\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=74217122299082822770801851560021661216629789077762002171621056571882611976795142151500077006\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=AWcVwkOg4d\u0026pto=746\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1768080880.WeLdyqhv0JCnm1Bl\u0026suid=1.1768080880.n8aM4vpvFYtbgXfH\u0026tuid=1.1768080880.HF4v2bmdcB8McEgn\u0026fbc=-\u0026gtm=-\u0026it=7%2C199%2C84\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Oi15fzZz"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww9.fpoxxx.com\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Sat, 10 Jan 2026 21:34:40 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be; Max-Age=29030400; Path=/; Expires=Sat, 12 Dec 2026 21:34:40 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: http://ww9.fpoxxx.com\r\ncontent-length: 1072\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3174,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2cd07a37459b026f5a566230d816cbd0","sha1":"a996b23804081ec4aeef2d0331743b93439479d4","sha256":"e97eca8a403a068bbf72d0790774e17afe95e21dc66a534ca3424b3abfe04ed2","sha512":"f577d44791bab06d6727a9b25a5f462c3a38f54e1f08b1e09a77bbdf16d213c24a293e4bcbbf0c1c50441dcde390e24e7e6721ccb3584f2dc023f40f5dc55742","ssdeep":"","tlshash":"2561f9647b549d146f9bb5933f28f4a263e4c28e254fcc7e8075f6c948aa75cfe15020","first_seen":"2026-01-10T21:35:10.28946Z","last_seen":"2026-01-10T21:35:10.28946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":110,"dns":1,"connect":34,"send":0,"wait":57,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/tracker/tc_imp.gif?e=37dfbd8ee84e00126ce6c73dea4f829d9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8a838f032a3c4dfb7e71068e398c30c5526554769b03030a33060acfed3e1c77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2842230603a6df28637a05a5ac417e88afa47a96e85a71197eabaea7c69a71bdcfc248b5038e523d65cceb92a9e471d280f061856b4a95b9c3330751b06871fed04b2ca690e527d05be054ae964c975dc1ce63d67a60c7da7886779ad3e8f38de7ff0b79e425a4c5853b4d26eec16992a850f614540bd34148c78587cfd1ec8220887290defbc879e43c2374a77e3ab2939f45659faa75a60ee49841d438ed73414752c73aba1fdfc2a93ff6c734c408ec8adfcd6c83550435bd52541d3e4c7de6a268b349c2e78164fdde2abdde6cde82c8f07688bcf174603ed0a9110495f7195442acd5b166a43892f658f3fd2fb074bc2c965bd308caab3ac3063ae2ac927a2238610236165b16aefd916ad203da595c176ca1e05dd58a1912ffbfd9b2bc64c2e5ecfc989ffa8d1f067da30186cc2a30de421747c57f4f3229af2fbd7c0bc3f5c0648c68d72d8ba324cda653912a722566423a65f584b68c542d2d880457d19680efa2c0410480b1ba7b9ecf7b7bd0da1222118f959f5473ea73d62d9767b04acc4cc9d401bafa64f091e3bf845520abb92969826ab4d9e1ef47e033674741cd371d32e4f406d0b206c09b87da0098c595390f3747bc35b717ea08e39363972e51611c6f3f6deb5b8e81315da57d80fab727d3cf519e2b30fc406e269ff4c35519bd24b79c1ac706330856ae646fd1edc562ca573e9a8213bdcd84a9d550d05c493044b1652f579c930c58a62ea5ba986b9dd9b24b0120be78794b7d8f650cb9cab5414fc7707b85c6db029c99\u0026cri=zVxyCKab8j\u0026ts=219\u0026cb=1768080880954","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:40.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=37dfbd8ee84e00126ce6c73dea4f829d9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8a838f032a3c4dfb7e71068e398c30c5526554769b03030a33060acfed3e1c77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2842230603a6df28637a05a5ac417e88afa47a96e85a71197eabaea7c69a71bdcfc248b5038e523d65cceb92a9e471d280f061856b4a95b9c3330751b06871fed04b2ca690e527d05be054ae964c975dc1ce63d67a60c7da7886779ad3e8f38de7ff0b79e425a4c5853b4d26eec16992a850f614540bd34148c78587cfd1ec8220887290defbc879e43c2374a77e3ab2939f45659faa75a60ee49841d438ed73414752c73aba1fdfc2a93ff6c734c408ec8adfcd6c83550435bd52541d3e4c7de6a268b349c2e78164fdde2abdde6cde82c8f07688bcf174603ed0a9110495f7195442acd5b166a43892f658f3fd2fb074bc2c965bd308caab3ac3063ae2ac927a2238610236165b16aefd916ad203da595c176ca1e05dd58a1912ffbfd9b2bc64c2e5ecfc989ffa8d1f067da30186cc2a30de421747c57f4f3229af2fbd7c0bc3f5c0648c68d72d8ba324cda653912a722566423a65f584b68c542d2d880457d19680efa2c0410480b1ba7b9ecf7b7bd0da1222118f959f5473ea73d62d9767b04acc4cc9d401bafa64f091e3bf845520abb92969826ab4d9e1ef47e033674741cd371d32e4f406d0b206c09b87da0098c595390f3747bc35b717ea08e39363972e51611c6f3f6deb5b8e81315da57d80fab727d3cf519e2b30fc406e269ff4c35519bd24b79c1ac706330856ae646fd1edc562ca573e9a8213bdcd84a9d550d05c493044b1652f579c930c58a62ea5ba986b9dd9b24b0120be78794b7d8f650cb9cab5414fc7707b85c6db029c99\u0026cri=zVxyCKab8j\u0026ts=219\u0026cb=1768080880954 HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=4806463f566292cb2feae8a3e62e9cec\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Sat, 10 Jan 2026 21:34:40 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-20T14:00:27.172499Z","times_seen":366504,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/mon","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:41.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2470\r\nOrigin: http://ww9.fpoxxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2470,"data":"e=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\u0026cri=AWcVwkOg4d\u0026sf=0\u0026dc=enJ2bn4Jbnl5I3lueXlueQglPicnbnkIenJ6bnkIeHlyfG55CHx4eG55CHN7eG55CH1yfm55CHN7eW55CH19fW55CHtueQh5fG55CHN%2BfW55CHN%2BfG5%2BD214enZufAlueXk8bnl5bngKenx5bnkIbnl5I255eW54Cn95bnkIbnl5KRRueXlueAp4bnwPbXx6dm58CW55eSIlKG55eW54CnpueQhueXkpFG55eW54CntufA9ten96dm58CW55eThueXlueAp6bnkIbnl5KRRueXlueAp7bnwPbXp%2BcnZufAlueXkue255eW54Cm55eThlLC4%2FCSo%2FPy45Mm55eyI4bnl7JSQ%2Fbnl7Km55ey0%2BJSg%2FIiQlbnl5bnkIbnl5KRRueXlueAp7bnwPbXh5fXZufglufAlueXkpbnl5bngKe255CG55eThueXlueApueXl6bnl5bnwPbnkIbnwJbnl5KW55eW54CntueQhueXk4bnl5bngKbnl5em55eW58D25%2BD21%2BeXt2bnwJbnl5O255eW54Cm55eRwiJXh5bnl5bnkIbnl5J255eW54Cm5%2BCW55eS4lZh4Ybnl5bnkIbnl5LiVueXlufg9ueQhueXkjKG55eW54Cn9zbnkIbnl5KRRueXlueApybnwPbXN8f3ZufAlueXk4bnl5bngKe255CG55eS5ueXlueApueXkbPiknIigALjIIOS4vLiU%2FIionbnl7IjhueXslJD9ueXsvLi0iJS4vbnl5bnkIbnl5KRRueXlueAp6bnwP\u0026cp=1\u0026gtm=-\u0026gac=-\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tb=1\u0026ich=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=1002\u0026mo=0\u0026pn=1921\u0026spn=920\u0026fp=237"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww9.fpoxxx.com\r\ncontent-type: application/json\r\ndate: Sat, 10 Jan 2026 21:34:42 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/mon","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:43.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1670\r\nOrigin: http://ww9.fpoxxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1670,"data":"e=37dfbd8ee84e00126ce6c73dea4f829d9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d57138a682317071a10acf9f29f671c8bd2885379364fab2c770c823bd6679300395425915b010966020ac2ba391a77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2e1071055df5da2469290ea2fd417a8dfaf57a96e45d761b7fabf0a19ccd71e8cfc248b5038e523d65cceb92a9e471d280f061856b4a95b9c3330751b06871fed04b2ca690e527d05be054ae964c975dc1ce63d67a60c7da7886779ad3e8f38de7ff0b79e425a4c5853b4d26eec16992a850f614540bd34148c78587cfd1ec8220887290defbc879e43c2374a77e3ab2939f45659faa50ad16e9850dd837a37e564051cf20b400d087f63fb4c7768719e4aed2d060824f6f6bbd06541c3e073ec3ac42ba4ed3c0910fa3de3dbddf6c94c2f9f03dd789b40d342ed2a7080a94e459004cbbbdb861b82799ec58f3fd28b07cbc2c9252d508caaf3dc3063ae2ae930b232d3446735f4e1db8e0926dd504bf45464321f0b451b8cd6458b7f987fcbc16b1b3b9fdf4a4bded590c79a21394bc4b6f9d42621ddf63557164fe7bb128119396c525ca26a14ccff97ba5ee758b671d65655b280196d2e5c53d7c5392184d95dbd1bbaeb22501d8b2ef20c29c0173a581676b37eb8dcb1461e1358f34f206f17ddf4bc9c213e4a866b3dfd9aec71433abb9643de023f1d4eff504966e280451c12a515ab0a35f8de408d8d9c69946c7869b214e6a12fc2fa104aa55b0897584721e6353307d63f305cdd26247b36fdcb5aa768a9a0f9e7e6eae1374308db7925918fc7bf48e10da00311c58e56d7990a5d674d9067d888f16a1dcddfb9c5098190c6407f829600ec0dd\u0026cri=AWcVwkOg4d\u0026sf=0\u0026dc=\u0026cp=3\u0026gtm=-\u0026gac=-\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tb=1\u0026ich=0\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=3005\u0026mo=0\u0026pn=3924\u0026spn=920\u0026fp=237\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww9.fpoxxx.com\r\ncontent-type: application/json\r\ndate: Sat, 10 Jan 2026 21:34:44 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/ct?id=80705\u0026url=http%3A%2F%2Fww9.fpoxxx.com%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20domain%20-%20landingpage\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1768080880735\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=53595209985199500805189716718008786680822102285216597120552129000695967905050849089028202790\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=W1siZWYiLDc3Ml0sWyJhYm5jaCIsMTRdLFstMzAsIltcInZcIiwwXSJdLFstMzIsIjAiXSxbLTM2LCJbXCI1LzRcIixcIjUvNFwiXSJdLFstOSwiLSJdLFstNDMsIjAwMDAwMDAxMDAwMDAwMDAwMDExMTAwMTAwMDAwMTAwMDAwMDAwMDAwMSJdLFstNDYsIjAiXSxbLTQ4LCJbXCItXCIsXCItXCIsXCItXCIsXCItXCIsXCItXCJdIl0sWy00OSwiLSJdLFstNTMsIjAwMSJdLFstNjIsIjU4Il0sWy02NCwiLSJdLFstMTcsIjQ4Il0sWy0xOCwiWzEsMCwwLDBdIl0sWy0yMywiKyJdLFstMjQsIltdIl0sWy00LCItIl0sWy00NSwiNzUyLDAsMCw3MTksMCwwLDc2MSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwIl0sWy00NywiVVRDLGVuLVVTLGxhdG4sZ3JlZ29yeSJdLFstNTAsIi0iXSxbLTU2LCJsYW5kc2NhcGUtcHJpbWFyeSJdLFstNTgsIi0iXSxbLTYxLCItIl0sWy02OCwiLSJdLFstNzQsIi0iXSxbLTIyLCJbXCJuXCIsXCJuXCJdIl0sWy0xLCJMaW51eCB4ODZfNjQiXSxbLTI3LCItIl0sWy0yOSwiLSJdLFstMzgsImMsLTEsLTEsMCwwLDIzLDAsMCwzMiw3OSwtMSwwLCwyMzcsNTQ5LDU0OSJdLFstNTEsIi0iXSxbLTEyLCJcIjFcIiJdLFstMzUsIlsxNzY4MDgwODgwNjIyLDBdIl0sWy02NiwiLSJdLFstNzEsImEwMTAwMTAxMTAwMTAwMTAxMDAwMTAxMDAxMTAxMTAwMDAwMDEwIl0sWy04LCItIl0sWy0xMCwiLSJdLFstMjEsIi0iXSxbLTYwLCItIl0sWzEyLCJ7XCJjdHhcIjpcIndlYmdsXCIsXCJ2XCI6XCJtZXNhXCIsXCJyXCI6XCJsbHZtcGlwZVwiLFwic2x2XCI6XCJ3ZWJnbCBnbHNsIGVzIDEuMFwiLFwiZ3ZlclwiOlwid2ViZ2wgMS4wXCIsXCJndmVuXCI6XCJtb3ppbGxhXCIsXCJiZW5cIjo4MCxcIndnbFwiOjEsXCJncmVuXCI6XCJsbHZtcGlwZVwiLFwic2VmXCI6NDk0MTk1MDQzLFwic2VjXCI6XCJcIn0iXSxbLTEzLCItIl0sWy0yNiwiLSJdLFstNSwiLSJdLFstMzksIltcIjIwMTAwMTAxXCIsMixcIkdlY2tvXCIsXCJOZXRzY2FwZVwiLFwiTW96aWxsYVwiLFwiMjAxODEwMDEwMDAwMDBcIixudWxsLGZhbHNlLG51bGwsZmFsc2UsbnVsbCw1LHRydWUsZmFsc2UsbnVsbCwwLGZhbHNlLGZhbHNlLGZhbHNlLGZhbHNlXSJdLFstNDAsIjM3Il0sWy00MSwiLSJdLFstNTIsIi0iXSxbLTU3LCJTM2xSVFUxSlNnTVdGbHhNVmxzWFFGWk1TazFZUzBwYlRGQlZYVkJYWGhkYVZsUVdTa0ZKRmxBV0N3c05Yd0VNQ2drTFdGZ0xXdzljV2dvSldGaGFBRmdCREYxWUMxcGJYd0FYVTBvRENBTUJEdzhOQ0JVT0NBQVdUUmRjUVVsV1MwMUtGZ1Y1VVUxTlNVb0RGaFpjVEZaYkYwQldURXBOV0V0S1cweFFWVjFRVjE0WFdsWlVGa3BCU1JaUUZnc0xEVjhCREFvSkMxaFlDMXNQWEZvS0NWaFlXZ0JZQVF4ZFdBdGFXMThBRjFOS0F3Z0RBUThCQ2dBVlNseE5iVkJVWEZaTVRSbFJXRmRkVlZ4TEV3NElBQlpORjF4QlNWWkxUVW9XQlhsUlRVMUpTZ01XRmx4TVZsc1hRRlpNU2sxWVMwcGJURkJWWFZCWFhoZGFWbFFXU2c9PSJdLFstNjksIldpbjMyfHx8NDh8LXwtIl0sWy03MiwiRXhVPSJdLFstNywiLSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltcImRlc2NyaXB0aW9uXCJdfSJdLFstNTUsIjAiXSxbLTY1LCItIl0sWy02LCJ7XCJ3XCI6W1wiMFwiLFwib25SVEJGYWlsdXJlXCIsXCJOb3RpZnlQYWludEV2ZW50XCIsXCJfX2N0Y2dfY3RfODA3MDVfZXhlY1wiLFwiX19jdGNnX2N0XzkyNzU0X2V4ZWNcIl0sXCJuXCI6W10sXCJkXCI6W119Il0sWy0yOCwiZW4tVVMsZW4iXSxbLTMsIltcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIl0iXSxbLTMxLCJmYWxzZSJdLFstMzQsIi0iXSxbLTM3LCItIl0sWy00MiwiODgzMzk5MDE2Il0sWy02NywiLSJdLFstNzAsIi0iXSxbLTczLCJFaFE9Il0sWyJibmNoIiwyNTldLFstMTQsIi0iXSxbLTE2LCIwIl0sWy0xOSwiWzAsMCwwLDAsMCwwLDEsMjQsMjQsXCItXCIsMTI4MCwxMDI0LDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCwxMDI0LDAsMCwwLDAsXCItXCIsXCItXCIsMTI4MCwxMDI0LG51bGxdIl0sWy0yMCwiLSJdLFstMiwiNixJc045bkduV2JBWUFJeE5mUWFPcUdFMENGQVFzY0cwMEluaE9iWUJBS1lVT3pRTzZFWDAyMEltR0xjdTYydXJkUC9jMmQycE5tVlpBd2YzLy84ejc5R3JIYTFXdTNPbVhQUHZlIl0sWy0zMywiLSJdLFstNTQsIntcImhcIjpbXCIzMjk5NzI4NDUyXCIsXCI4MjI4MjMxMTlcIixcIl8zXCIsXCIyNjM5MjIyNDY4XCJdLFwiZFwiOltdLFwiYlwiOltcIl8wXCIsXCIyNjQ2MDM4ODJcIl0sXCJzXCI6MX0iXSxbLTU5LCItIl0sWy0xNSwiLSJdLFstMjUsIi0iXSxbLTQ0LCIwLDUsMCw1Il0sWy02MywiLSJdLFsiZGRiIiwiMCw3LDEsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMSwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwyLDAsMCwwLDMsMCwwLDAsMCwwLDAsMiwzLDQwLDAsMTcsMCwyLDAsMCwwLDAsMCwwLDAsMSwyLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAiXSxbImNiIiwiMCwwLDAsMCwwLDAsMCwwLDAsMywzLDAsODMsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwxLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCJdXQ%3D%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=zVxyCKab8j\u0026pto=663\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1768080880.WeLdyqhv0JCnm1Bl\u0026suid=1.1768080880.n8aM4vpvFYtbgXfH\u0026tuid=1.1768080880.HF4v2bmdcB8McEgn\u0026fbc=-\u0026gtm=-\u0026it=7%2C199%2C82\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=jx.2.0%3B\u0026sck=-\u0026io=aGA2Og%3D%3D","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:40.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"GET /ct?id=80705\u0026url=http%3A%2F%2Fww9.fpoxxx.com%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20domain%20-%20landingpage\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1768080880735\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=53595209985199500805189716718008786680822102285216597120552129000695967905050849089028202790\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=zVxyCKab8j\u0026pto=663\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1768080880.WeLdyqhv0JCnm1Bl\u0026suid=1.1768080880.n8aM4vpvFYtbgXfH\u0026tuid=1.1768080880.HF4v2bmdcB8McEgn\u0026fbc=-\u0026gtm=-\u0026it=7%2C199%2C82\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=jx.2.0%3B\u0026sck=-\u0026io=aGA2Og%3D%3D HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sat, 10 Jan 2026 21:34:40 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=4806463f566292cb2feae8a3e62e9cec; Max-Age=29030400; Path=/; Expires=Sat, 12 Dec 2026 21:34:40 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: http://ww9.fpoxxx.com\r\ncontent-length: 1134\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3297,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3297), with no line terminators","md5":"af106fa2c43919b2cb855680c7648cca","sha1":"f4d92ca60f1a2ba12aca7aea6b71a450d8eec4fd","sha256":"2565b8cc0ee6495edb1ec2aff87944a1dea039d527a08ccb7d4dce5c0532baae","sha512":"ad3932e8355b23cbcceaf25e7bf2d41ed187cf921d60320647f192c87fbbeeedc4668a9f3d6c0c3bc3eab769c4efdfaceb0b2bf9c5dedfb2f0afcf9e5baa8d8f","ssdeep":"","tlshash":"b661d873de56ac457bf6a9236758896eb7aa973716cf8d2a8c3772c9047b394df00000","first_seen":"2026-01-10T21:35:10.291436Z","last_seen":"2026-01-10T21:35:10.291436Z","times_seen":1,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":134,"dns":27,"connect":34,"send":0,"wait":54,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/tracker/tc_imp.gif?e=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\u0026cri=AWcVwkOg4d\u0026ts=177\u0026cb=1768080880996","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:41.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=AWcVwkOg4d\u0026ts=177\u0026cb=1768080880996 HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Sat, 10 Jan 2026 21:34:41 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-20T14:00:27.172499Z","times_seen":366504,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/mon","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:55.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1703\r\nOrigin: http://ww9.fpoxxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1703,"data":"e=37dfbd8ee84e00126ce6c73dea4f829d9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8a838f032a3c4dfb7e71068e398c30c5526554769b03030a33060acfed3e1c77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2842230603a6df28637a05a5ac417e88afa47a96e85a71197eabaea7c69a71bdcfc248b5038e523d65cceb92a9e471d280f061856b4a95b9c3330751b06871fed04b2ca690e527d05be054ae964c975dc1ce63d67a60c7da7886779ad3e8f38de7ff0b79e425a4c5853b4d26eec16992a850f614540bd34148c78587cfd1ec8220887290defbc879e43c2374a77e3ab2939f45659faa75a60ee49841d438ed73414752c73aba1fdfc2a93ff6c734c408ec8adfcd6c83550435bd52541d3e4c7de6a268b349c2e78164fdde2abdde6cde82c8f07688bcf174603ed0a9110495f7195442acd5b166a43892f658f3fd2fb074bc2c965bd308caab3ac3063ae2ac927a2238610236165b16aefd916ad203da595c176ca1e05dd58a1912ffbfd9b2bc64c2e5ecfc989ffa8d1f067da30186cc2a30de421747c57f4f3229af2fbd7c0bc3f5c0648c68d72d8ba324cda653912a722566423a65f584b68c542d2d880457d19680efa2c0410480b1ba7b9ecf7b7bd0da1222118f959f5473ea73d62d9767b04acc4cc9d401bafa64f091e3bf845520abb92969826ab4d9e1ef47e033674741cd371d32e4f406d0b206c09b87da0098c595390f3747bc35b717ea08e39363972e51611c6f3f6deb5b8e81315da57d80fab727d3cf519e2b30fc406e269ff4c35519bd24b79c1ac706330856ae646fd1edc562ca573e9a8213bdcd84a9d550d05c493044b1652f579c930c58a62ea5ba986b9dd9b24b0120ef\u0026cri=zVxyCKab8j\u0026sf=0\u0026dc=\u0026cp=15\u0026gtm=-\u0026gac=-\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tb=1\u0026ich=0\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=15020\u0026mo=0\u0026pn=15897\u0026spn=877\u0026fp=237\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww9.fpoxxx.com\r\ncontent-type: application/json\r\ndate: Sat, 10 Jan 2026 21:34:56 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/mon","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:43.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1700\r\nOrigin: http://ww9.fpoxxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1700,"data":"e=37dfbd8ee84e00126ce6c73dea4f829d9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8a838f032a3c4dfb7e71068e398c30c5526554769b03030a33060acfed3e1c77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2842230603a6df28637a05a5ac417e88afa47a96e85a71197eabaea7c69a71bdcfc248b5038e523d65cceb92a9e471d280f061856b4a95b9c3330751b06871fed04b2ca690e527d05be054ae964c975dc1ce63d67a60c7da7886779ad3e8f38de7ff0b79e425a4c5853b4d26eec16992a850f614540bd34148c78587cfd1ec8220887290defbc879e43c2374a77e3ab2939f45659faa75a60ee49841d438ed73414752c73aba1fdfc2a93ff6c734c408ec8adfcd6c83550435bd52541d3e4c7de6a268b349c2e78164fdde2abdde6cde82c8f07688bcf174603ed0a9110495f7195442acd5b166a43892f658f3fd2fb074bc2c965bd308caab3ac3063ae2ac927a2238610236165b16aefd916ad203da595c176ca1e05dd58a1912ffbfd9b2bc64c2e5ecfc989ffa8d1f067da30186cc2a30de421747c57f4f3229af2fbd7c0bc3f5c0648c68d72d8ba324cda653912a722566423a65f584b68c542d2d880457d19680efa2c0410480b1ba7b9ecf7b7bd0da1222118f959f5473ea73d62d9767b04acc4cc9d401bafa64f091e3bf845520abb92969826ab4d9e1ef47e033674741cd371d32e4f406d0b206c09b87da0098c595390f3747bc35b717ea08e39363972e51611c6f3f6deb5b8e81315da57d80fab727d3cf519e2b30fc406e269ff4c35519bd24b79c1ac706330856ae646fd1edc562ca573e9a8213bdcd84a9d550d05c493044b1652f579c930c58a62ea5ba986b9dd9b24b0120ef\u0026cri=zVxyCKab8j\u0026sf=0\u0026dc=\u0026cp=3\u0026gtm=-\u0026gac=-\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tb=1\u0026ich=0\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=3005\u0026mo=0\u0026pn=3882\u0026spn=877\u0026fp=237\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww9.fpoxxx.com\r\ncontent-type: application/json\r\ndate: Sat, 10 Jan 2026 21:34:43 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.youstarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js","fqdn":"euob.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.240.174.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:40.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 18 May 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:29:53:45:CD:1F:37:FB:0A:5B:EE:BA:2B:10:20:63:7D:EE:AB:EB","sha256":"2F:1E:65:36:AB:FD:A7:A0:E2:EF:4F:B3:C2:81:B9:D4:40:D5:97:BE:7F:28:61:2C:32:1D:24:77:4B:21:66:37"}}},"request":{"raw":"GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1\r\nHost: euob.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 44480\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ncache-control: max-age=43200\r\ndate: Sat, 10 Jan 2026 14:05:13 GMT\r\nexpires: Sun, 11 Jan 2026 02:05:13 GMT\r\netag: \"1d632-4Zyrw2MuUkJNw6zgFmirZKbea7U\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: d1DkBmXj7Lz1X-CPfQP6hd-qdiBc-YzqGP6AwLSEhZHa_xq0V8yEbQ==\r\nage: 26967\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":120370,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"904ee8c403b71f60ccdf3ab74b1bf29f","sha1":"e19cabc3632e52424dc3ace01668ab64a6de6bb5","sha256":"f08e2bfa7eb53d34f35d976e6469f757165e71dc09ef14950585d28034ebcc9f","sha512":"3e856ad0f394b24fa983ab1f75c7db942e418cc68cbb70db5114dc778b9def4d4887a332cb6925d7b6d5f27afff2e6cd64593b58f75eeee91b86bcc4fc74c722","ssdeep":"1536:5uQSSob5Cqdw0/3BHz9FSUsqLonSZcgZ+tqXYCJxBcTKYt21lbgspzMohFcWmqBO:5uHSu/5z7ZLYC5X9MoGqBvQZjfuWd1h","tlshash":"7dc3c5edb2e27025439324a5157f410ae27b5e503c4b8294d17ee9d4ac7ce8e817bfac","first_seen":"2026-01-07T14:15:44.831745Z","last_seen":"2026-01-29T07:42:23.884656Z","times_seen":824,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":44,"dns":29,"connect":1,"send":0,"wait":2,"receive":3,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"euob.youstarsbuilding.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euob.youstarsbuilding.com/sxp/i/9c8fd36ad2c2af958c402ab3de108d62.js","fqdn":"euob.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.240.174.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:40.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 18 May 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:29:53:45:CD:1F:37:FB:0A:5B:EE:BA:2B:10:20:63:7D:EE:AB:EB","sha256":"2F:1E:65:36:AB:FD:A7:A0:E2:EF:4F:B3:C2:81:B9:D4:40:D5:97:BE:7F:28:61:2C:32:1D:24:77:4B:21:66:37"}}},"request":{"raw":"GET /sxp/i/9c8fd36ad2c2af958c402ab3de108d62.js HTTP/1.1\r\nHost: euob.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 44487\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ndate: Sat, 10 Jan 2026 14:56:31 GMT\r\ncache-control: max-age=43200\r\nexpires: Sun, 11 Jan 2026 02:41:27 GMT\r\netag: \"1d63b-G0bleWN6zW3XI8j/ps7yo/Riz2Q\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: soNADYV89Gxi71HiI81W-7s8GoPzjtBCmK8NOAvD_NJbUoCau7XJ8A==\r\nage: 24793\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":120379,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"48dbbaeb8a87de9f9f7687d0ac5b75e8","sha1":"1b46e579637acd6dd723c8ffa6cef2a3f462cf64","sha256":"16a65e1a9c44007b2813c2c1cf7a825394652ad58d7cff8c6416825bdf46e71c","sha512":"c546e68ea7e8753a8d5198077237db3475022c099b3942a6fb00f1a4e5384f34a1fd2a0c0a7234f492c39803f8d4a1ed554850cf536dae218692ff72bd4e3a7c","ssdeep":"1536:5uQSSob5Cqdw0/3BHz9FSUsqLonSZcgZ+tqXYCJxBcTKYt21lbgspzMohFcWmqBi:5uHSu/5z7ZLYC5X9MoGqBvQZjfu+d1h","tlshash":"23c3c5edb2e27025439324a5157f410ae27b5e503c4b8294d17ee9d4ac78e8e817bfac","first_seen":"2026-01-08T07:54:32.807772Z","last_seen":"2026-01-29T07:42:23.89849Z","times_seen":82,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":43,"dns":28,"connect":5,"send":0,"wait":4,"receive":2,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"euob.youstarsbuilding.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youstarsbuilding.com/mon","fqdn":"obseu.youstarsbuilding.com","domain":"youstarsbuilding.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww9.fpoxxx.com/","date":"2026-01-10T21:34:51.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youstarsbuilding.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:E0:7A:77:9E:39:3D:B5:85:C1:3D:30:3E:E7:35:C5:FE:D1:7E:38","sha256":"3D:73:19:D6:DC:8A:75:98:72:2D:32:C1:65:DF:5C:3A:0D:71:99:BA:F5:6D:C8:11:D9:E4:02:85:DC:8D:75:25"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youstarsbuilding.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1673\r\nOrigin: http://ww9.fpoxxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww9.fpoxxx.com/\r\nCookie: cg_uuid=e9a1de9ded085095d49a6291fc6e44be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1673,"data":"e=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\u0026cri=AWcVwkOg4d\u0026sf=0\u0026dc=\u0026cp=10\u0026gtm=-\u0026gac=-\u0026uvid=8e3e2da9151952b548117b8141368f84d761f9c3\u0026tb=1\u0026ich=0\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=10013\u0026mo=0\u0026pn=10932\u0026spn=920\u0026fp=237\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww9.fpoxxx.com\r\ncontent-type: application/json\r\ndate: Sat, 10 Jan 2026 21:34:51 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}