{"report_id":"637f5f9b-8d07-4a49-a624-2c665f0fc909","version":6,"status":"done","tags":[],"date":"2026-02-05T13:04:40Z","url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"title":"EarnElite","dom":{"size":41672,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33601)","md5":"f712216e8ecbaa36b4278e74c3ecfb5c","sha1":"fde408f6babedfa248f2a8a79c8ad812f541a648","sha256":"6ee2b25a1d317730600da95d35f554b32a2f886d6f14d033f5c1aef2f8cccdca","sha512":"0e19769229431dc16a394e82c9014cd36512bc279f8194a597c9a3faf7f3adb9a4bc6d27854475ca8e7d37b24687ad3b6fffda09808839b8112f930688310d2f","ssdeep":"768:m6QxnfoFC0jmJvoWl8kq8kMLc641cGrsamQ+agGvSJ5E4toQiWhQ9B0tICvA:l8KgoWl8PMsQiWhQ9ytU","tlshash":"cf130f709157667f528b4db0b420ab1ef0eac30cc913c949e3fd57a65fc6c9acda5a20","dom_hash":"domhashb337e7a679553d11540c9869660c6641","first_seen":"2026-02-05T13:04:42.654592Z","last_seen":"2026-02-05T13:04:42.654592Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"172.67.173.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-12T13:04:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cloud.imgs-cdn.com","ip":{"addr":"172.67.192.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-18","domain_rank":0,"first_seen":"2026-01-21T21:43:00.877136Z","last_seen":"2026-02-05T12:00:27.139277Z","alert_count":0,"request_count":6,"received_data":40176,"sent_data":2748,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"earnujmte-byhnbi.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-02-05T12:05:37.994107Z","last_seen":"2026-02-05T12:05:37.994107Z","alert_count":158,"request_count":79,"received_data":2314126,"sent_data":36347,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"comeontasktogether.top","ip":{"addr":"104.21.85.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-17","domain_rank":0,"first_seen":"2025-10-18T12:56:29.370266Z","last_seen":"2026-02-01T03:00:56.913172Z","alert_count":0,"request_count":2,"received_data":3476,"sent_data":1115,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"log.plausible.space","ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":2218878,"first_seen":"2025-06-27T02:57:24.696629Z","last_seen":"2026-01-31T04:00:28.822022Z","alert_count":0,"request_count":2,"received_data":4173,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-02-01T23:57:17.209153Z","alert_count":0,"request_count":2,"received_data":37437,"sent_data":883,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-01T22:32:08.727296Z","alert_count":0,"request_count":1,"received_data":8607,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/HomeFAQ-OISYuPS4.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"77e7b7d0b871b3068d31da17fd31904c","sha1":"2a42ecf0732ebc17be847667167b6d289e46363e","sha256":"5c6b56121bb1fb499e466a01cf2578ba28afaf4cfca516870901f6ec2517d432","sha512":"f7a5ddfe1dfdfe8b5663c3059b639c81f944ef42fa549286c7a2426462ce4497f46480bb68e4f7f2efd7e1193e5e3d6557e4d4b9764f476c691b8f6242ccb7c9","ssdeep":"","tlshash":"8641ab3f4603964de81f0ad4d2ca8e00327d895af7a18c696fb60d052660db0f19ffb9","size":2250,"data":"","first_seen":"2026-02-05T12:00:34.352262Z","last_seen":"2026-02-05T13:05:58.947823Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/4e51e895/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e52aa0ebc4c3eaec9b5dc3fb189816ad","sha1":"deee2067e9e36617f997fb3be3788432b87129a7","sha256":"e9abd0d74c5ecca848c706e3f94780a00efc33f66f1a7971ded040458851fd69","sha512":"c1274aa8cacaa39f2724cdbc73acff36088115445878ed95e4fa62553cfd35475d5db1266b5dafd3e71fc8fb645baa6837f84de0478bee8848cd8e1969b94099","ssdeep":"384:LZ9f+ec30st6d53jPj6ANwSYpBZKjTfPXRbiNu44mHQP4Ia3zPw5BWngmurjtF4x:LGMws5vZqjQj7BO4G3IaIgurjtcG12","tlshash":"0ce2c6cdbbb1b4314373a5f5902f100fb23e586eb4088999b284d8e16cf59694627f7d","size":32131,"data":"","first_seen":"2026-01-29T12:44:11.570685Z","last_seen":"2026-07-11T04:57:24.138665Z","times_seen":25164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/no-DPATb4DZ.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ca1ac319196bac9a1ca6e08261188f0","sha1":"d84ff1416bf8089992f1daae12521bebc53af672","sha256":"19ebfa6dc36dc58633a8d41c72df4e0e4156091662d5749ee8712a11ed4f9613","sha512":"148045316914ad5151f20f1fefc0a57b8f0c37d7c776b01811eaac9e3294a2272bfc37ff91e51fa30acb202e00cff4183d54531ef18f6ae2e86b745efbf204f1","ssdeep":"384:ImtrMPPFsRkfQHE1YB2JqXJjlAcp1TBdv7YuBdHyFERTIFmbHfVvZ7ELmSSozauR:ImUF7smYB2Jq1P1TBquBAMUFedpEyGR","tlshash":"80c2f9f6c901a53ab55952d1bd06e207f2fc852ec624ca6a498f845f1dc3df9633e388","size":27768,"data":"","first_seen":"2026-02-05T12:00:34.341313Z","last_seen":"2026-02-05T13:05:58.931315Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-20T13:28:44.392047Z","times_seen":125722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aeee5878aa9ac43a2e33dc3f448672c5","sha1":"5c7aaf951e7241b777627ef3581fba3f235945c3","sha256":"c38bc05406e2706ff26fd0f8e898c18d23ced0e8161d3d03f1342609f5da6627","sha512":"c319e78766497bdf9807788a898fd5e8972a143c450050b6520fbb9a8fde66076f841a3633e62da5674f1c193f597fe823566b811b2dd31e05db56135d5ff493","ssdeep":"","tlshash":"be11cb7b3e80e639869894e4a03fc31cb1b224957855cd9110cde899e65caca9d2d5fc","size":993,"data":"","first_seen":"2026-02-03T19:08:25.700802Z","last_seen":"2026-02-10T17:15:10.980897Z","times_seen":2815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/HomePage-CyP8P9W1.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa7d4c847643bda69d581e8bce94d250","sha1":"3b12af88c338eb6434c7d38bed0b60ecec92c6d3","sha256":"c01df73576fcbab53c2c549e6250ef4febb1243f33349e32e6abb8eb491ba156","sha512":"9844027e3264e57cd3d910fb9182f9fc9d44c7e09d1a006fefc9e2942cd2ee9d1ab95bdc64ae5390b262f4543c9eb69152f70db34b9c982756559eb543f214e1","ssdeep":"192:aXLCoF4kagCA6AbWxGkgx1VteOCztH2GH5QrA0:aXLCoakagCzAb0Gk4VcOCz92GcA0","tlshash":"23127740e146dfbeed7a1cd0ae2d8044701f5fd8db1bc891e07e28210b78586776bb9a","size":9052,"data":"","first_seen":"2026-02-05T12:00:34.364415Z","last_seen":"2026-02-05T13:05:58.914512Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/useWord-CZffCRsc.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ef2850babb7762917902d1a8dc9f65d","sha1":"07acac5cba07495952a3f223f82866c25f5c92cb","sha256":"bfb160af732e768653934e4687cbf9cbac36dfc77096631854f00ef917beb6dd","sha512":"388cf9e223dda593f7258f745b23216e093626db455b8163d1b044a9c33fab52985f19fd44bd090b5f199aae32a9314f8712853cc1d47185cec6ac7f2a102fd7","ssdeep":"","tlshash":"70c02b453020caff133f05ee00b84c5443206c04326c6f64f118084b33d10830a67f09","size":142,"data":"","first_seen":"2025-11-21T04:16:31.886206Z","last_seen":"2026-08-18T12:35:08.642164Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/BottomBar-C5hHESOR.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"78213a1dd15651182373dad778f48aba","sha1":"12950d499ade43e0d07e150ed2918798951ff44e","sha256":"eca4b4d41e1b342527247420363f689a8eb72c805ba140994bf8e0fdeada44aa","sha512":"90ce4fbc3dad095e183d4fb28a875b2a5f2f2f3f32d6cfdebf1dfe6fec82f761acf13a9adb4d9a897938d3bf03b2c641d9a6a7ebf5daaf4ff59b21eee3d3289a","ssdeep":"","tlshash":"53214c84a1c99beeed6508c45a5dd348700b1ffcd52ec89660bc1c001a689a7bb5f3a6","size":1392,"data":"","first_seen":"2026-02-05T12:00:34.330246Z","last_seen":"2026-02-05T13:05:58.933688Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/HomeSwiper-DQepM5md.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e913fdf0944974493eebe27134b2cdcd","sha1":"36a5f27dd474df48cf9f19603c941540b67706f2","sha256":"1bd76ccf395a635261d64093714eacb822ef8f518e435b1b4e4d058dd686c08f","sha512":"0ac3d7dad2abd930dac5fad03084c0fb9ebffd4a95c4bb9a09a57eb97eedca1a4b2dcd7e066805102db3a0a114cc3ed6f3c3d0b1060bfb8663577683a01cf891","ssdeep":"768:4mWas966AxkMubeMEertdvjcCTzlhWDuIxOjxQ88TRKgf16F80n0F/jphx1pKI0S:fs96ITqDuB8Qe9pK0Ub80S3BhK+dN","tlshash":"36632bc63196f85783ea04e2503b0506b6291d94780ec098f57cddce3ea641ae6bff79","size":71256,"data":"","first_seen":"2026-02-05T12:00:34.329323Z","last_seen":"2026-02-05T13:05:58.916055Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"log.plausible.space/js/script.js","fqdn":"log.plausible.space","domain":"plausible.space","tld":"space"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b61c8ea52fe5ad1c778b6423c9b1e6","sha1":"96395022474cce70ed2c8c6c0376c36d26040d13","sha256":"91bda7309b059f33f21531717082b701d20fafbd5493c838029e942952018dd2","sha512":"a70cf48c4b472d264545840b5922119ab8b1523f295905c8484f8c1c36ea4b953c6f4d5bf605bc640390a355a2e5a3e97201fcc7da988f168a54f88e589f706b","ssdeep":"","tlshash":"e651916a7e41f53889b8e273622f332636373623752444020128dac23d24babc3a6dcc","size":2618,"data":"","first_seen":"2025-04-10T18:50:57.878891Z","last_seen":"2026-08-18T16:48:25.605496Z","times_seen":1614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/polyfills-C1Ps5tL3.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca0f166657c7cd0f21c2083fd59b5f95","sha1":"8db0f199bb8a13b1b1caf089a8874c5b5abcbbbb","sha256":"c206806303f8a183d2e352afe13b284e6cc0397e45ffb362c01478b8a6092ba3","sha512":"2a859b336d969aa48d806161622e1e4689b0a7bbfe0cd62954449de7da6b441590d08d332640a81ba35a614b1f557cc0bba017d90374128cbad7aa65c41b4314","ssdeep":"1536:nTOxARdAWwqivS6URDxmuo/FzO72PVlSydDQxGgWYQrGl:nTtRdtwqv6+xmu8FzO72PVlSyeVl","tlshash":"e2b3d589f6d6f0a243e770a4403f100bf23b6d55b80e8190e766d1e17cb9a4ad17bf69","size":107468,"data":"","first_seen":"2026-02-05T12:00:34.284637Z","last_seen":"2026-07-20T22:43:13.314982Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a6cf21f6e21c0f54c7220c807399231","sha1":"6c19165b0448d461c6552fabd4fa7e4a8e522173","sha256":"540f0eda101da28076f3c129493ac62e5ef3dd08a46d653dc30a1e6cefd06989","sha512":"d72d6cb2aa7ceb2e512e8668deb283df02258a01b9c8433b1f8cfd38ba2c9ac5601dc171e5c46feebf218da972c4d568ee3c8e1d190b9ae1ebf81e617c4309ed","ssdeep":"","tlshash":"70c02b0b42d84ba94e64b01fdf2e6d30a53009c74d025703782c76640829626070fdc0","size":140,"data":"","first_seen":"2024-05-12T00:25:45Z","last_seen":"2026-08-18T12:35:08.69239Z","times_seen":649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a721a50c61c92f9abfe8d63f825ee7b","sha1":"d8e59ff6d82b15eadd4cd1fd49a9baef1c3fa177","sha256":"fb95e46456b3cc9a3c9f488e3f8b62fdc2c2314b9d4dffff33391bef134f5c87","sha512":"67af8cad0d127d30ef79bcb73c0fb1ce8dcdf651e29e2f9c5b39a35c632742890cceb5d5a1adecb3b108724dc7105b6f0d4cd35a346cd59d5e971c043c2591f5","ssdeep":"","tlshash":"afe02bb775f4697908a9395f782be6843ca00e714869644029dd44a9e860e938d2adc4","size":400,"data":"","first_seen":"2023-03-14T12:34:09Z","last_seen":"2026-08-19T04:55:13.510459Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/index-wPQWv5Rh.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1876bb9b6efd84babf53f863f7818b40","sha1":"683f5ec0be214bb804d818960b6c3040fa069c8f","sha256":"b4350b007f0c0d66766732565329622f431b51caaf9b07ef9a2da72043582873","sha512":"e77c5e9717db9d367dc00ed62378d263367ab54bb8208b1929a0847e8885d5a54ef89919730a9fa3d50c3dfe6f33e6f42031a55612d3b2f640a0276656b735e1","ssdeep":"6144:V83Sd9QEkyh7e5gSB9TTGUDA/OEz5Do1arfrJABe0/N:Vt3h7e5gYTqUDA/OEa1aBieYN","tlshash":"d6946ddc718a74aa577705f5107f1106b3392d12780d8c50b669edea26f2c0aa2b7fbc","size":446502,"data":"","first_seen":"2026-02-05T12:00:34.346428Z","last_seen":"2026-02-05T13:05:58.945212Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cloud.imgs-cdn.com/users/NO/NO_c3351e13.webp","fqdn":"cloud.imgs-cdn.com","domain":"imgs-cdn.com","tld":"com"},"ip":{"addr":"172.67.192.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:20.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgs-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 11:07:33 GMT","end":"Thu, 12 Mar 2026 12:03:59 GMT"},"fingerprint":{"sha1":"D4:12:B4:45:C6:EF:76:36:E0:ED:73:95:33:6E:BE:2A:3A:A1:6C:C1","sha256":"F3:4F:18:1F:F4:70:07:9B:1C:0F:E5:99:DB:31:0C:B2:67:F9:C6:36:76:4C:5C:82:9D:CA:25:55:F7:82:E8:96"}}},"request":{"raw":"GET /users/NO/NO_c3351e13.webp HTTP/1.1\r\nHost: cloud.imgs-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8298\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 23:38:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694c796e-206a\"\r\naccept-ranges: bytes\r\nage: 3853\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZO7IjCFSSPiImKRqsN9DIvnqhkzP57iBvb3oAluYbqbMqfLf9%2BR%2Bdcm50jagea74GhZSQGn8emBT%2FMDfRPPfb9kXACs0XUbAakvUD89QiGRCQ%3D%3D\"}]}\r\ncf-ray: 9c929ced79eb1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8298,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4f2ecb9aa764cdafae5f07ba9059b171","sha1":"d020b188b543cb809050632e372734dcc9eafb3b","sha256":"f8cd46d1ef4b2cce299d9c8f7e379ffdf586f4eb075ac9b8b8737908678b405a","sha512":"587979089096bd1587762f655c790a3e0c01dad8367650c43eb7260fbd9e545c2690ff0cba0db85e96cd23bd8b32dda7185989cf68320bbfff59f534b725d2b4","ssdeep":"192:qjWm9sGFFay4AymgmfxO6mtbGtF9zgUAARuKD/bGO2EGtIqX6EzJZ8:a5Fay4AymgcWRa9PAAYA/bGU+q6JW","tlshash":"fa02bf88102b444384fdd09afe8f31691292580552bd5643aeb80ddb6ffb05b67ba16b","first_seen":"2026-02-05T12:00:34.313838Z","last_seen":"2026-08-07T09:47:09.705233Z","times_seen":103,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":42,"dns":8,"connect":3,"send":0,"wait":10,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.imgs-cdn.com/users/NO/NO_70aff7fa.webp","fqdn":"cloud.imgs-cdn.com","domain":"imgs-cdn.com","tld":"com"},"ip":{"addr":"172.67.192.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:20.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgs-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 11:07:33 GMT","end":"Thu, 12 Mar 2026 12:03:59 GMT"},"fingerprint":{"sha1":"D4:12:B4:45:C6:EF:76:36:E0:ED:73:95:33:6E:BE:2A:3A:A1:6C:C1","sha256":"F3:4F:18:1F:F4:70:07:9B:1C:0F:E5:99:DB:31:0C:B2:67:F9:C6:36:76:4C:5C:82:9D:CA:25:55:F7:82:E8:96"}}},"request":{"raw":"GET /users/NO/NO_70aff7fa.webp HTTP/1.1\r\nHost: cloud.imgs-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9270\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 23:45:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694c7afe-2436\"\r\naccept-ranges: bytes\r\nage: 3853\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8J97uH2C5tYdkAZE1cRzWdZSVmNpwh4D0fIpyo6OCCP5CxkRVOjWPSueJ94987dOUicYUPMc4ZLO8tou5KfxbDdwlDV6fqO08oWH39YonpSTw%3D%3D\"}]}\r\ncf-ray: 9c929ced89ee1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9270,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b8d5ec982e14c688d0ce30f2e9a0c6c4","sha1":"82613107ba02237a11125ec03061f3c4f4d6dfe4","sha256":"05e50774c767b922f681b2a232b8cdbbf330a780cd3f0a18e7bf481df90050c5","sha512":"2fb0f4be17f58f82dc0b24608f755169532b781a96460e30b007cd6ec65da3028f5dd67a15e24f316601d33972278167838932f5e7c7871355014049d3c2adfe","ssdeep":"192:4YByYg7mcrGGi6WftnaZ914thjYYX3YDUkGlsL50wuYD3G7iX+UFbdd34m:CYgScSV6WfBalwjYQ3Y/GaiwuaGFKv4m","tlshash":"2312c11127c9582686f2904c02e3719ba54ea2704bd1977b294f7d2971fdf411b1f46f","first_seen":"2026-02-05T12:00:34.35557Z","last_seen":"2026-07-22T12:24:02.62819Z","times_seen":88,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":42,"dns":7,"connect":5,"send":0,"wait":7,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward_min1.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward_min1.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4K3qz%2FTy6nP0RCpbqwveGULdrra2oKWtT5stRO%2FIIurhk6C512anJp%2FQH%2BA28oYlIE76cTvpBo5QLygElPvAR0Q6n8EkGtu5%2F9FIx6LIY1R%2FKLvJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0df8c941d985ad3dbc77f845f6d4f8a9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce8ca884e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1327,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e764e3955f667a2e3c3c5d5f6063c1b4","sha1":"24167940761acc963ce1962b721300ce95ac0be6","sha256":"b6264b6e6746503d5ede46e65dec48a4fc01162c6a86f4f7639e8da7c38683c9","sha512":"f51e292cc8b183421e6563cb7900c7b6578381ee8aff91ef7baba5223d9170190455439234d39dde10411b8e7fdb6fa6f725024b34705b0612cc1fb8042a2540","ssdeep":"","tlshash":"b62153c9bfb0a1fc594e47ed9b20b0fd1a57a1bcb49046b3c5a503841ac35251d8c95a","first_seen":"2026-02-05T12:00:34.372929Z","last_seen":"2026-07-12T08:52:38.171663Z","times_seen":71,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.imgs-cdn.com/users/NO/NO_26777260.webp","fqdn":"cloud.imgs-cdn.com","domain":"imgs-cdn.com","tld":"com"},"ip":{"addr":"172.67.192.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:20.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgs-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 11:07:33 GMT","end":"Thu, 12 Mar 2026 12:03:59 GMT"},"fingerprint":{"sha1":"D4:12:B4:45:C6:EF:76:36:E0:ED:73:95:33:6E:BE:2A:3A:A1:6C:C1","sha256":"F3:4F:18:1F:F4:70:07:9B:1C:0F:E5:99:DB:31:0C:B2:67:F9:C6:36:76:4C:5C:82:9D:CA:25:55:F7:82:E8:96"}}},"request":{"raw":"GET /users/NO/NO_26777260.webp HTTP/1.1\r\nHost: cloud.imgs-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2232\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 23:48:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694c7bc6-8b8\"\r\naccept-ranges: bytes\r\nage: 3853\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwyW%2BfRNOu%2B4VqlTxKZqrFo%2Fd4mdfQ5wQTc1nD0C9vHfzasFXxauZYIesF8DTKWvwx%2B1srojV2a8T7ZRZkTBN8YMgOW9ghnepyXnjGrZT%2FeGmw%3D%3D\"}]}\r\ncf-ray: 9c929ced59c91ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c2014bf3edee2cd18d71a0c9a9f1fff9","sha1":"188d62c0b07761a116e8b4e60c30accabe51548a","sha256":"1aba7339d50914752137d5ab006794d3c692a7b2136c8ff1817a96eb86ee12d7","sha512":"727b52dee94a0a7e710fc00badf4744efc398caa755d983f54d6cfa65b7f6f91ae50f17ca0cb324cfb8af2fcd63f28aa43b6c54bf62fafb07b2260ad9787b1b7","ssdeep":"","tlshash":"244119589427a67a9918cfc5cfa3261f90e5730c184579f4e3a230b9114ed5293eafb8","first_seen":"2026-02-05T12:00:34.320103Z","last_seen":"2026-07-22T12:24:02.60894Z","times_seen":88,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/polyfills-C1Ps5tL3.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/polyfills-C1Ps5tL3.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BDiG6M4357vVy2nbNDhk5K%2FE9qEczHqEQyuJqRJTy76OukkooPMoF%2B2BEhxcamRmwxilyERkuFcvWRG%2F8zSv6KzyPGzYcAwWDDWVBQt5mdiQsyM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a6562c40d5582ff7df9478f0c2d544db\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce38b524e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107468,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59764), with NEL line terminators","md5":"ca0f166657c7cd0f21c2083fd59b5f95","sha1":"8db0f199bb8a13b1b1caf089a8874c5b5abcbbbb","sha256":"c206806303f8a183d2e352afe13b284e6cc0397e45ffb362c01478b8a6092ba3","sha512":"2a859b336d969aa48d806161622e1e4689b0a7bbfe0cd62954449de7da6b441590d08d332640a81ba35a614b1f557cc0bba017d90374128cbad7aa65c41b4314","ssdeep":"1536:nTOxARdAWwqivS6URDxmuo/FzO72PVlSydDQxGgWYQrGl:nTtRdtwqv6+xmu8FzO72PVlSyeVl","tlshash":"e2b3d589f6d6f0a243e770a4403f100bf23b6d55b80e8190e766d1e17cb9a4ad17bf69","first_seen":"2026-02-05T12:00:34.284637Z","last_seen":"2026-07-20T22:43:13.314982Z","times_seen":84,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/index-wPQWv5Rh.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/index-wPQWv5Rh.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6UOUIyWD%2FGkhB6t9ONnyOu4ideA00DInFk0nxnnlGJC2GqtQAmpmUsbIbBJKppF%2FlrCPkFlKe5tzy83dSGRlmidL4rqpAa09AGViUjb%2F2Xkzl9w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f131e4da24863779d65ba23756e2a67e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce3fc9b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446502,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50353)","md5":"1876bb9b6efd84babf53f863f7818b40","sha1":"683f5ec0be214bb804d818960b6c3040fa069c8f","sha256":"b4350b007f0c0d66766732565329622f431b51caaf9b07ef9a2da72043582873","sha512":"e77c5e9717db9d367dc00ed62378d263367ab54bb8208b1929a0847e8885d5a54ef89919730a9fa3d50c3dfe6f33e6f42031a55612d3b2f640a0276656b735e1","ssdeep":"6144:V83Sd9QEkyh7e5gSB9TTGUDA/OEz5Do1arfrJABe0/N:Vt3h7e5gYTqUDA/OEa1aBieYN","tlshash":"d6946ddc718a74aa577705f5107f1106b3392d12780d8c50b669edea26f2c0aa2b7fbc","first_seen":"2026-02-05T12:00:34.346428Z","last_seen":"2026-02-05T13:05:58.945212Z","times_seen":66,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Top/menu.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Top/menu.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAmRIXLkFeuWn5rCPcWVKCcQjUELWRCpA7gWzVLHGJL0eI8WkfHIgAxMABx4TIi2uMIQOPAw4oA1GwYMtpTjaZNmqcpMWuPnaNx4VlpTqvQRTz32\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"01106b8e159c4ebd4ec3dfea0cc4994b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5c9484e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":677,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa9c798bd41e9988a1c829a49533e6bc","sha1":"667cf54392dc57df080c1f2827149cf6886edfa8","sha256":"b08110c56dff05767af905d6e390bf0f70ba83ebef6e59231c02b0fa93057a5d","sha512":"9d8360c1dd1045384efae6670b0c36d57d994d13605683607c165c8d961ecb43325b66fe8cccd6555494d111073da19ff2175c9253484b146ab816804efa3ee1","ssdeep":"","tlshash":"34017b0e62046505aa3cc3d375ac3a22332928c6b0c49168ae822b009394eec2d8dad4","first_seen":"2026-02-05T12:00:34.370996Z","last_seen":"2026-07-12T08:52:38.168326Z","times_seen":72,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Nav/video.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Nav/video.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rb9w5ywgE2nSUSSgnTKiqnnvfie634BgS%2FXKCSY%2B2I8tYnnHlHhusZ32Qn4X8o35NLERLEpH89LRvUCG3G6eHb%2BazvsHFOudZe2zrnakv3QEFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7e75701926f8dda934c6d69b2461e514\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5d9764e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":811,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"914fdb034ebdb2c4d4289a29090ed203","sha1":"741c42df6fb5bd3c754c71b6060095524d1666c6","sha256":"dbb091d2bdc67d4a86f7a39a9d0e3f100cc9a5b1acd0ebb030bc105b4167e39a","sha512":"5f8c647ccc8f80c32bb93a18b99d2c68978034afce8353df84e849e516f4b977a248961544b40b8a9f7f24333254a60bdc2b63bfd9ad66b3c4cf54a4cab5fcbb","ssdeep":"","tlshash":"0f01ced4c620376c820dc34f33317446332f34ecf9845b25986ea8ac0286985ed57ee9","first_seen":"2026-02-05T12:00:34.285487Z","last_seen":"2026-07-20T22:43:13.30386Z","times_seen":87,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/step2.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/step2.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBviOuobU3ahgSEDyfi0rLKS54%2BvBZc%2F0V9bAUQjhSauLtIn7qbp%2B%2FmbdyjoGuqUJ63WfJWJlW256kjuOP%2BPSXPfDD8aVvUwYhihLf8pj%2BvQCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e069e4d05cff55c477eba66e86fd4325\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce869724e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":445,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"422c9752b32e599b14d009ce06031f31","sha1":"806979db0f13c8802077a722563a27ff13679c11","sha256":"162d0d406d17de1cdefca9f39508d29ed74afb262429de41774169cef121be84","sha512":"fcfcc0acdd80b30e0e024094111fddfd26bf0aadb1ed3cabab9eaa84dd9fcea8ee8bca3fa19f076202ec6b956edbec2e80b017d11b798102829eb19cd9407177","ssdeep":"","tlshash":"c0f05c29d348654e050e8fd077546241d20e6359e3dc6091b54a2ce03613ae9a04bed8","first_seen":"2026-02-05T12:00:34.361958Z","last_seen":"2026-07-12T08:52:38.14273Z","times_seen":71,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward_min4.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward_min4.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BS2U8LFFYbqx62zKCqj0641Ycszuou0CIK83wbaLsvB9NjWYx6318tnVk0h70udmtsPVFcBAhcYCa3oBFHAJt3KodToPuMFEDDX14lzBiv9T9jA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"430553ca3b137cbfec423b9ec4bf1c5a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce8daa74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":848,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"481bae52f7bd7ea451c782f6d5b6f0f5","sha1":"c1dd97571f88eeb36fed6261b452e6d5f7b366db","sha256":"8b39737afb8c015073fb6c9732bd33af667b25cfc4db394fc6f3258397f31743","sha512":"0b1e46f1c7c83b9b2c234b3efd581bba6a5d97ac5de6ade741c064ff0f29b7b98605ea6ac84983433035812bb96ca21e872aea0bbb26a78cbe310e3a10c8b445","ssdeep":"","tlshash":"bf011ea4e63e26fc4a1a07a4ff51b1300f8e20eea1d1010cf6a684b073627e5e49c9d1","first_seen":"2026-02-05T12:00:34.362728Z","last_seen":"2026-07-12T08:52:38.166063Z","times_seen":71,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Top/lang.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Top/lang.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UzCn8XDdrgzsXDcsZMi9PESneL0DFJbRTy%2FqXZTwghAHBu4Z3fCFr2yyTc7rmpwXQvyYBSAFY3jND48MzB9NNNajv17kNkQZ0BC%2FkTE7wKo5jQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6db9c5c9af21e98f573933077e10bed9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5c9524e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2224,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e15854d206e888a9dd6ec5744455fdb6","sha1":"502017cbf78015148e585e2d6e3f80111de66533","sha256":"33decfdef8b3842b6bc00314f734f4062cb7679d5da5f5ac53e5a0589d1e5b1b","sha512":"483552d879c61d2ea65382ae34ff92b4719a2ed878a44f1065dfa306f2ea5c857efbd5bfa540028f047e46d95f9af37771b0f34822ac64b1b3f7f911264add49","ssdeep":"","tlshash":"7d41cbb0c61982bc6056df8e352d6c21b66d24b37ed4ccb8c6185dd120a1cfaedca1db","first_seen":"2026-02-05T12:00:34.344772Z","last_seen":"2026-07-12T08:52:38.131909Z","times_seen":72,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/HomeNav/fire.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/HomeNav/fire.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYS6hjCaxne12zoCNI47XBxZ3fB%2FXM5rcQSHxr59ObN49U9tN9pljnF9fY6%2FWMNkgvGOI%2FSaIfds4WiZMbraoYG47F7Bmc8khWWllIdvq9e04sUt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c929ce73e5a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7404,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3975)","md5":"9835ca33098bf4ac4875cdbd5988a727","sha1":"d108ff14be9e1ee73bf1eaa47d45442bb4fa57b9","sha256":"31253a3fc39e2fd14f735eece61a78bb22d6205781409dfa03bd22f20d7d4773","sha512":"4145f97f8475dfd7dfd93acddf47c8e77ce62f2710d864c45543247e944073b742d33531cbf6d3cc037d4ce7d885397b4af2760b502fd986b252d493ffc1b65c","ssdeep":"192:aOKwY1F7M7xV1a4/8k+RECnWbhZOLA3a7bSS5dShTwteoLWAtBuuZCxfS1PB1Xi9:aOKw+F7M7xf3Xa9WtZ3UGpxsBuuZCxaw","tlshash":"3de14322911ed614d9e28c8730cfb91678045431955a90d6eaac48eccfe7eafd3e3f49","first_seen":"2026-02-05T13:04:42.662483Z","last_seen":"2026-02-05T13:04:42.662483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/HomeFAQ-OISYuPS4.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/HomeFAQ-OISYuPS4.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8p4KGgvraxt3UcPkqq%2Fio3uGAuThlOj4F4np3MTXgwE4HDzJDEEb0itFpcuWEM%2BfoG4Ha93VG9TkSsvP21O90zQ%2B7xNfeI7cTtGEg%2FI8zn7NQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"77299aa4e3cb6fa05158f31434a068f1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5e9bd4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2250,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2249)","md5":"77e7b7d0b871b3068d31da17fd31904c","sha1":"2a42ecf0732ebc17be847667167b6d289e46363e","sha256":"5c6b56121bb1fb499e466a01cf2578ba28afaf4cfca516870901f6ec2517d432","sha512":"f7a5ddfe1dfdfe8b5663c3059b639c81f944ef42fa549286c7a2426462ce4497f46480bb68e4f7f2efd7e1193e5e3d6557e4d4b9764f476c691b8f6242ccb7c9","ssdeep":"","tlshash":"8641ab3f4603964de81f0ad4d2ca8e00327d895af7a18c696fb60d052660db0f19ffb9","first_seen":"2026-02-05T12:00:34.352262Z","last_seen":"2026-02-05T13:05:58.947823Z","times_seen":66,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/useWord-CZffCRsc.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/useWord-CZffCRsc.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/assets/HomePage-CyP8P9W1.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGmLwPT7o66Pj%2FpWIDMnrG%2BLIiy5qaG%2FNokGPRAuIKQuZ3QR2HVVQBxQWYOhjzixI92u6m53yTI0m7HfqvrINN0J9KKW3cGEl%2BiEdwzyjTbuWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8c1c5e508076c8baaa66cd9b0063a30f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce6cccb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7ef2850babb7762917902d1a8dc9f65d","sha1":"07acac5cba07495952a3f223f82866c25f5c92cb","sha256":"bfb160af732e768653934e4687cbf9cbac36dfc77096631854f00ef917beb6dd","sha512":"388cf9e223dda593f7258f745b23216e093626db455b8163d1b044a9c33fab52985f19fd44bd090b5f199aae32a9314f8712853cc1d47185cec6ac7f2a102fd7","ssdeep":"","tlshash":"70c02b453020caff133f05ee00b84c5443206c04326c6f64f118084b33d10830a67f09","first_seen":"2025-11-21T04:16:31.886206Z","last_seen":"2026-08-18T12:35:08.642164Z","times_seen":149,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward_min4.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward_min4.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T13:30:36.923321Z","times_seen":17991408,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"comeontasktogether.top/api/v1/user/detail?d=earnujmte-byhnbi.xyz","fqdn":"comeontasktogether.top","domain":"comeontasktogether.top","tld":"top"},"ip":{"addr":"104.21.85.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"comeontasktogether.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 11 Dec 2025 15:10:21 GMT","end":"Wed, 11 Mar 2026 15:17:28 GMT"},"fingerprint":{"sha1":"0C:54:33:D1:D3:5F:26:9D:2B:0E:52:C9:DB:1E:48:B3:3D:41:57:D1","sha256":"5F:EC:06:F9:36:5D:A2:F6:F9:21:E8:30:BF:74:5A:9B:80:A4:17:57:21:53:05:D6:37:17:C1:3E:4B:FC:26:5D"}}},"request":{"raw":"GET /api/v1/user/detail?d=earnujmte-byhnbi.xyz HTTP/1.1\r\nHost: comeontasktogether.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nlang: en\r\ncode: EE\r\nOrigin: https://earnujmte-byhnbi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://earnujmte-byhnbi.xyz\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nset-cookie: PHPSID=4f3cf1542561da415e9021e9411bd916; Max-Age=31536000; Path=/; HttpOnly\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FW%2BeLC9H4T4%2B30Op2hWGQc3UySpYZO%2BfDe3iYI%2FgGjBJppMJ37sr6MokHz8sO%2FpA9xHbsFGU64XNgmxqjS3vXZsnyja1aN2PYVJWNZOsZlxvkadB\"}]}\r\ncf-ray: 9c929ceaeae7569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1937,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7c27c9273adfec2ad5461c51a35c09ba","sha1":"fdc68c9a9aa151c83023a54c750dae42c5e1cf2a","sha256":"044fdd950b585b696c4fb3867d218f55e1af02bd8dc941a0c1f4ba8c98f60513","sha512":"a2a33210df6b3d7c050e19fe73be07272a483a681ef8b534613581787b2f1c3d581bf34950ea0e95de5f6890b49df566e0d402fe2eaa058908a239f06bc1b21d","ssdeep":"","tlshash":"69415aba3414ea9bb8d0ceca855b6bf95c2e30530fdc8483eb79949051a5dfe60684c5","first_seen":"2025-12-26T12:59:43.242551Z","last_seen":"2026-08-07T23:08:40.265169Z","times_seen":190,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/HomePage-CyP8P9W1.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/HomePage-CyP8P9W1.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/assets/index-wPQWv5Rh.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLm8xbDsWBHE9aIuKEd8OObm%2FgSih%2F421YDHifjt7QVMrjf17QKrumkSxGFdN5cX6o5EPUppEoq72sNNB3qTDhImDHuksH8xc5ueog0XvXVyiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"587e0517f9eddccbe9eb41aef4a0d9f5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce69c314e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9052,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (9048)","md5":"aa7d4c847643bda69d581e8bce94d250","sha1":"3b12af88c338eb6434c7d38bed0b60ecec92c6d3","sha256":"c01df73576fcbab53c2c549e6250ef4febb1243f33349e32e6abb8eb491ba156","sha512":"9844027e3264e57cd3d910fb9182f9fc9d44c7e09d1a006fefc9e2942cd2ee9d1ab95bdc64ae5390b262f4543c9eb69152f70db34b9c982756559eb543f214e1","ssdeep":"192:aXLCoF4kagCA6AbWxGkgx1VteOCztH2GH5QrA0:aXLCoakagCzAb0Gk4VcOCz92GcA0","tlshash":"23127740e146dfbeed7a1cd0ae2d8044701f5fd8db1bc891e07e28210b78586776bb9a","first_seen":"2026-02-05T12:00:34.364415Z","last_seen":"2026-02-05T13:05:58.914512Z","times_seen":66,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/currencyCode.json","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /currencyCode.json HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x63I35eX5V3HIG5xSarDlGK0i5px5yUNzLxARfM9XANwXNXh311FYlL6DYIvHKplTZEorD3j0f88aZAgXPuKnNd%2FtONYXDHX138m%2B553YR90GQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cdb533d179c10e2e2a900265cdcdc5ef\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929cecbde94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34453,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"96f59a2617db9c318050b99bab5eec21","sha1":"b6d7d827c1609632d3e9879e0f333e4dce3c7de8","sha256":"3e13666dc5721d2eeda2e9241de6645a758058d32074504d133696feaf078ad5","sha512":"ee6ead783bf7d5f8ebd424f09cda486299f2e43ed10c6578f96643eb3f50f2e0702be0b3d4526cdc43bc20a5e3824f5267fff284675712dfe080aaee8729ad05","ssdeep":"192:5ELx3HMZ5m9fUtwawjTO4Rm7GiUlMim0L:50Lx9290L","tlshash":"f6f2c56bd0994c9ba8b2b367714a1615f036932f2682084f79fc466c1ff3dba5102f6d","first_seen":"2025-09-08T01:23:12.568113Z","last_seen":"2026-07-15T08:23:18.486118Z","times_seen":282,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.imgs-cdn.com/users/NO/NO_f0779e63.webp","fqdn":"cloud.imgs-cdn.com","domain":"imgs-cdn.com","tld":"com"},"ip":{"addr":"172.67.192.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:20.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgs-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 11:07:33 GMT","end":"Thu, 12 Mar 2026 12:03:59 GMT"},"fingerprint":{"sha1":"D4:12:B4:45:C6:EF:76:36:E0:ED:73:95:33:6E:BE:2A:3A:A1:6C:C1","sha256":"F3:4F:18:1F:F4:70:07:9B:1C:0F:E5:99:DB:31:0C:B2:67:F9:C6:36:76:4C:5C:82:9D:CA:25:55:F7:82:E8:96"}}},"request":{"raw":"GET /users/NO/NO_f0779e63.webp HTTP/1.1\r\nHost: cloud.imgs-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3400\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 23:30:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694c7786-d48\"\r\naccept-ranges: bytes\r\nage: 3853\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eh60c5uhrWiuMhmqg6W7z3JASQAB7Pqfui61YrAV4VZfmilfEPe9Dro0ohIvPBLaxl79164PuuEFJEYuyTPFypQ0wagJMn8CwQ4A6mSnsbdBVA%3D%3D\"}]}\r\ncf-ray: 9c929ced79d81ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"174fc961530975a9ff5b5cbee3b5a220","sha1":"a779e3f2b2068ab78ae6681f733db948dd66cc81","sha256":"b01d78101dd0bd885278675d7a40e74d1da535e15479a94a7231bcfcb570e161","sha512":"0e0d3efbc6ee8b4c662837c8220d4b90f14537006d687bff5cbbb3e880f844aa1df66f7f0c13322891beb0286f5096957f1211e4f3ad7d58ed35db8cf680de26","ssdeep":"","tlshash":"0f616e0d4c07b00d6f2c09021985979a27f51ea26a3ff51778190614ad1835ff9ff788","first_seen":"2026-02-05T12:00:34.336165Z","last_seen":"2026-08-07T09:47:09.658868Z","times_seen":102,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":37,"dns":1,"connect":1,"send":0,"wait":8,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"log.plausible.space/js/script.js","fqdn":"log.plausible.space","domain":"plausible.space","tld":"space"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.space","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 02 Feb 2026 19:06:40 GMT","end":"Sun, 03 May 2026 19:14:00 GMT"},"fingerprint":{"sha1":"37:37:28:AC:59:F8:B0:0B:30:86:17:75:D1:F3:2D:33:2C:EC:97:14","sha256":"89:16:88:4F:DC:30:DA:87:BF:B4:83:5A:09:9D:D1:D6:B8:AA:E8:BC:B5:C1:A2:AE:4D:EE:02:46:5C:12:74:F2"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: log.plausible.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 34857\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 05 Feb 2026 03:23:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2FPUbu%2B6PFJVPK0nLTKtexN79sRUUIrGXYpsIY0%2Fp8htevrvToOxFkXE2%2BfIYDMYPw0KEOgEd5NRzG9eaJOemONGdu9%2BN4RYYrlTaTv%2FqhhUWuM%3D\"}]}\r\ncf-ray: 9c929ce37decdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2618), with no line terminators","md5":"b7b61c8ea52fe5ad1c778b6423c9b1e6","sha1":"96395022474cce70ed2c8c6c0376c36d26040d13","sha256":"91bda7309b059f33f21531717082b701d20fafbd5493c838029e942952018dd2","sha512":"a70cf48c4b472d264545840b5922119ab8b1523f295905c8484f8c1c36ea4b953c6f4d5bf605bc640390a355a2e5a3e97201fcc7da988f168a54f88e589f706b","ssdeep":"","tlshash":"e651916a7e41f53889b8e273622f332636373623752444020128dac23d24babc3a6dcc","first_seen":"2025-04-10T18:50:57.878891Z","last_seen":"2026-08-18T16:48:25.605496Z","times_seen":1614,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":11,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/step1.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/step1.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qpgRapKXp8QOgDocOB70XgrPiSPpEqBElDv940%2BogO%2BS%2BxUtL0Vq7JJG52NnXY5rGQciGh3gOLMLVm5DaoffHmo368iaURfHebtv6vyEiwvRiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"aa16fa0678248933cf852e67c11102db\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce8696e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":872,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66b8b5977c94f21562983e80299e0686","sha1":"f39bb4aa98c832e12498a70b0c087773240fd1c6","sha256":"8d15e92844e2e836bf637b2cee1f3c7152af38bf9a96fa9fee145e101a1b6cbe","sha512":"0c0dcc12b733294173e1c5827a249fd9728e8c59d3a84b0a77c4a221c31487729105f5e06ce891d9ad37fafc72dca8894b4740da3bdab634ac54b22fd9b1ddff","ssdeep":"","tlshash":"cc11ab44b125332e52e1ce79e02434a405cbd6adb1f048a5718955f072eafe8b7ed6d3","first_seen":"2026-02-05T12:00:34.287204Z","last_seen":"2026-07-12T08:52:38.130666Z","times_seen":71,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward_min2.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward_min2.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T13:30:36.923321Z","times_seen":17991408,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/close_black.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/close_black.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpsTaD1Bg4%2FRE6TeBe7OH7yONGt5Glbj9ZBfRz0wgOjVCWhTW%2Bw5sAnZIY8cCjNrcQuaEtDaBvoTTSz1DywGQR6vjIyGOlCgBR%2BgpOAVJDpbTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fa15454690de45cfba4da9bd11484134\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929cecee5e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1056,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7133666797b5024f302dd012ec29e04c","sha1":"e307d6bf52bb649a8aad632ccf2ab5ebd8703213","sha256":"baa7649b4752846cde29e2cf8888125f9958496ea0b8a342c7040d86a66da63f","sha512":"05737d9951d9b6dcc14e3ebc3c13f2e9011007be11fe06f7721e9637e177697d92f5683ce9754d0798b9d74555019aa7c5adb5fe0f47a2e0de20b54b2f2c7b34","ssdeep":"","tlshash":"fb1135099750fb10cc8c97d4a761df7c6b4e52cc24f5513eec5f59494153a7916484f1","first_seen":"2025-09-08T01:23:12.543961Z","last_seen":"2026-08-09T17:01:17.145682Z","times_seen":256,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/star.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/star.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsaawwYuezt5ovZg7xq5sIA3U0TVeYShn%2BCWdTksgrUL1Xv%2Fks5l7BGB7YjdcHH4hpQ8aP34C2cn%2FIYCOs9Vs%2Bdg7JSXeHBWd749M0l0HrVAxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"750ef459803370a8b2b5d6690a4a0b74\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce76eb04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0a5c5ed5a604bf5ff144d380ac632e7","sha1":"64eddef64612b71936f661bacfc5b7a47d9e2e41","sha256":"a5b4efd96b5cfc1731c0e0b3688d563ce970aa27516b50aae40344de6cd6dab1","sha512":"ef08751ca0f32cd439d7ae426d06c3db3706441b22a7b9e248303b18e4dd58329e5a5a9bd02cc6f613bdfb6d582d874a71214597cc6842248b8b9d0f2d6482b6","ssdeep":"","tlshash":"d001bcb58389697cec0ab143b425fe14e21a2183b8c04cb5c2690ce10d42dc3aed36db","first_seen":"2026-02-05T12:00:34.313052Z","last_seen":"2026-08-07T09:47:09.698568Z","times_seen":102,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"log.plausible.space/api/event","fqdn":"log.plausible.space","domain":"plausible.space","tld":"space"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.space","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 02 Feb 2026 19:06:40 GMT","end":"Sun, 03 May 2026 19:14:00 GMT"},"fingerprint":{"sha1":"37:37:28:AC:59:F8:B0:0B:30:86:17:75:D1:F3:2D:33:2C:EC:97:14","sha256":"89:16:88:4F:DC:30:DA:87:BF:B4:83:5A:09:9D:D1:D6:B8:AA:E8:BC:B5:C1:A2:AE:4D:EE:02:46:5C:12:74:F2"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: log.plausible.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 90\r\nOrigin: https://earnujmte-byhnbi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"{\"n\":\"pageview\",\"v\":3,\"u\":\"https://earnujmte-byhnbi.xyz/\",\"d\":\"h5-earnelite.com\",\"r\":null}"}},"response":{"raw":"HTTP/3 202 Accepted\r\nserver: cloudflare\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GJFbbn8rz2-iH3OjN9qJ\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49AD5RgVS2Y5l4ELGj2S8asSku1MdFZyBkI2r0HuQXztQdeNKXEzvbIBpsnfKBFYdsFa9z71%2FW%2BEymQQIyrVJ2ShIFxehI%2BswHbnhS0iEk5s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c929ce42901b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-20T13:29:13.076323Z","times_seen":451053,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":25,"dns":1,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Nav/daily.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Nav/daily.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DwYJg%2BpC7RroER1MKJ1kSUTAFokspIb54G%2B0pfYz1FFfwJArzlpolQEcNo95cfFx3fVADYc69CUMEjS3MjWlLMfDkxLMJvAGN259es0%2FR7ym477v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"edbf53319489a07c00063465881ff625\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5d97c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1423,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d182e256effd19224d381f6b73ba863a","sha1":"099f39987af6e13a29eb68183fb3e1753e3d330a","sha256":"56e7cf443bd4649ae0b7df7290dcf4c266782eecf1ae84274005d5058e2beeae","sha512":"5d18c003259b8245f16ba5f152fbb521c58d413fd25ffbd3ae5555bc004ce0cbc727a217cd9ce3e0e1e7a5e45ac9a264a59587c3c9e77c1d0ea4d3d1afc5ab89","ssdeep":"","tlshash":"44219b40a85e943d82460ea81e2ab9360f58dcea9d507ab6d03d8e3031c365fca0bc8c","first_seen":"2026-02-05T12:00:34.323025Z","last_seen":"2026-07-20T22:43:13.295969Z","times_seen":87,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/step3.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/step3.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9S9jl4R%2BSWGp5HhbJ6d4eEBsVZ%2Brp4eqrvr0IsMsG92igxlsqibJ88rJDl0g%2BfzeoJzWuueqI9jk70UthXWfddeIwTLPtJCAvv8jDcNLueEFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"085581c2a09b38f6d3af25b366e8d36b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce869764e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":723,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9d324619937747277c6479df9d94b12","sha1":"921d305a6e69a54ecea1d0b946651f3c557b0c46","sha256":"c4be367612a154e0f2a33e3d63473449be2b957b62bfee31a0bd73b4e21d27bf","sha512":"10002c026e5c4775706966a3b31a9e1622e609f231ff712b7dc9d82c552c8c78588df606a5c330685d55b981c3c733829add5f494362a7a13980dc91ca7e37b1","ssdeep":"","tlshash":"8301dc04a136aaaf8a2ed6f975707070098d60eeb5d4c46ee0a21ff47253868304459e","first_seen":"2026-02-05T12:00:34.342179Z","last_seen":"2026-07-12T08:52:38.177543Z","times_seen":71,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:37:03 GMT","end":"Mon, 13 Apr 2026 08:37:02 GMT"},"fingerprint":{"sha1":"9B:43:CF:B6:7E:4D:24:7E:07:88:71:63:84:E1:97:5B:A9:EF:30:0D","sha256":"B5:04:29:72:60:F4:B3:06:24:E2:C3:26:50:13:7C:7A:49:EF:69:31:3D:FF:AD:73:C3:5F:DD:58:F6:30:02:DC"}}},"request":{"raw":"GET /iframe_api HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script'\r\nexpires: Thu, 05 Feb 2026 13:04:18 GMT\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncache-control: private, max-age=0\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncontent-security-policy-report-only: report-uri https://csp.withgoogle.com/csp/youtube_main/strict;base-uri 'self';object-src 'none';script-src 'nonce-2QiEAwLBMT5f6TpQxxcNJw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval'\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-YNID=15.YT=Ctl6C4OMKFu3Aj4HleuowFNwlr7gj1HWDJbI9_D5KKhG4DJ6feOmNQobWs79AalBP6zgvGpNlJFujddqu5Wz-j2qbekZRxn85-SiIb-8ZRYAP_TdX8NbWJbbSxa_9SH9pz4iZkAqXXcA_SWVF5_dGoA3BLBqvZMba9XdNonAufXR-Ucxz9Lk3F4j5agDlA1oa5OeBFX7TCPx01p_am1q1rzsn7O47ABam4GjCFfsXa28KOP2VWmI3Vv74oeR-BpiLcRLQP31zrbT2mTm3LizZUyKoyj61WeGD9pH1v8s-ztaDw_c0qmVEzsgLod83cfGK-Rsr8J9aBWeEb9ezRtPgg; expires=Tue, 04-Aug-2026 13:04:18 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=6Yp5X04bs5c; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Fri, 12-May-2023 13:04:18 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=hDh_NFnRmfE; Domain=.youtube.com; Expires=Tue, 04-Aug-2026 13:04:18 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBD; Domain=.youtube.com; Expires=Tue, 04-Aug-2026 13:04:18 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CJWp9Nmcpb-nlgEQsNDw-7TCkgMYsNDw-7TCkgM%3D; Domain=youtube.com; Expires=Tue, 04-Aug-2026 13:04:18 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (501)","md5":"aeee5878aa9ac43a2e33dc3f448672c5","sha1":"5c7aaf951e7241b777627ef3581fba3f235945c3","sha256":"c38bc05406e2706ff26fd0f8e898c18d23ced0e8161d3d03f1342609f5da6627","sha512":"c319e78766497bdf9807788a898fd5e8972a143c450050b6520fbb9a8fde66076f841a3633e62da5674f1c193f597fe823566b811b2dd31e05db56135d5ff493","ssdeep":"","tlshash":"be11cb7b3e80e639869894e4a03fc31cb1b224957855cd9110cde899e65caca9d2d5fc","first_seen":"2026-02-03T19:08:25.700802Z","last_seen":"2026-02-10T17:15:10.980897Z","times_seen":2815,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":144,"dns":1,"connect":28,"send":0,"wait":56,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Nav/faq.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Nav/faq.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5zpY%2FBp74ZYikNuMpJA%2FF%2F7v7hGlOZcLDqwTTzbE9QbpOYm6SOl7g87BsMMaREtdrjv4x3D1JJYAwuANwSqqJ%2BnCrK92H%2BB%2FeeyyCWrb3v04Eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cc1f8a6ac79e02339661221acd2331c9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5d9944e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1694,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da397eb4234cf802eb28e5728f604b4a","sha1":"90e7f8effb79215cc2996de1c2f677e3ed2ecc9a","sha256":"301c0aeec895db52af4a781b6502b2f2ea8a86691e8602cf46cd43fd8fa89e4c","sha512":"4f2e44b29ed9788cd4a6808146bea2ea8e243df657de6f4331e6e57938374cc064047fa509d663bae2ad00388f88bc8454e7dfec8efe3c9c0028db3c22db684f","ssdeep":"","tlshash":"a1314480e690057a700657dfdd687c693819f0fd58a8ce3fe07d8ea748c2dce9a600c9","first_seen":"2026-02-05T12:00:34.347196Z","last_seen":"2026-07-20T22:43:13.353658Z","times_seen":87,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/GeneralSans-Regular-Dn3hZj8I.otf","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/GeneralSans-Regular-Dn3hZj8I.otf HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/assets/index-DZQ0cydN.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: font/otf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6JIFgXCIpU2tBFEdzbasylC8p4Q0BdXAzuMb1kiAM7qsZtzA2NNbeuSC%2F8PL%2F%2F7qKOvyC%2Bvor8oz0XYKp5LKXQ0PqrDKEkSUbzxwDZiRJw9lTe%2FD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9f9cc0351f0ef97bbaf269ee066021fc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce7af954e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45948,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"95afa0447815d0498c2ed4c828cdd92a","sha1":"b03745ee5c7610ffcd8b64a4a4ccf28e25ed9759","sha256":"f5cfd05c1dafa77e944670528a81958f7c21b7517bafd2a8796a3aa17e56b9ce","sha512":"1ea46cff6c87562823cad2fca7677eb15e2c28d6a18ad031bb39aa9bd84a86bb52c1c829a25b03c94ed776234d3eccfca1b60cb2b4b6bd8764faf5e346f4d995","ssdeep":"768:O35y79vZp3MeJ8qqNrflwkDrPUznaeYCPFYir6uYbkEP5jX7K2q+jqUmMNHVuivJ:OJy79vZp3MeJCBwkD7U7KMFZOpbkEP5r","tlshash":"f2236b96f7450b01c1527b3449bae734e732fa1c8afe6b0b55b552ad6c5e0c20e72ac3","first_seen":"2023-05-26T17:06:12Z","last_seen":"2026-08-19T23:43:51.32746Z","times_seen":367,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/comitAvatar/member1.jpg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/comitAvatar/member1.jpg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YzplzUxdUmW2q0Xi%2FS%2FQc6kMAmuwXLq6VtVPW0rZOSwfxurgelw5IIDdj%2BBA%2FEnpO2r6RgR536Pfz7PAw1RjFvjWPedjI0LEpJV1rL3mCs8MVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"fd1a1883485e17251becf345b054763d\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce8daa94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19793,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3","md5":"4cf7a3831cd1f9ba65556ddcce657c75","sha1":"aedfe2e7409b26ca467924dc314c4452221a578e","sha256":"e48993b1ea1f22306bce13b6440a0500445d6c57c43fe2a26cea5b863a3a3dbc","sha512":"239b51ead94ce4778a2e735b7ebb81cfab4a51b61a678fe8a729d8a5d063fd8fa11c7006e06e6c6750d1602157648761b12d8db16c52b1300c5d4558ceb01167","ssdeep":"384:Apur2/a/Ox83rvgJ/+JJbYR9U8USWNN9XT67IwXk+1hncdqfMaXzIT6:i/aGErA2JWoFSWnw0yncdqfMaXzC6","tlshash":"8092d012d306966ff831943d075421e614021ea556a9b78cb924feb02b1a2faa4832fd","first_seen":"2025-09-13T20:22:46.24607Z","last_seen":"2026-08-07T23:08:40.323724Z","times_seen":144,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/comitAvatar/member3.jpg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/comitAvatar/member3.jpg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eN5p3vGGCFjiCBZ7RrhIFyFjRTGj3h0zmLtuWPD%2Bekzx7IZafvOclMeMNH7uOjnuPv%2BowPJU7TyJkF%2Ff%2B07VmI%2FLFNltXboB9CrivFc%2F%2By1mM8x3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"f4e4c87806a086a7605072bd58c32764\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce8dac64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12448,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"4fe5d3f2e7efd62b8726749a31953cc8","sha1":"0bd8910b5fde6bc1112714c8bb869d96b8900002","sha256":"3ec8d59a11eba82d08f69bddc24c632824eb3be6fd873b369215a8152e63a441","sha512":"8c21e0eed9071fa37b1639024708300722929a3c5a9ee9d08a7d57eadd0980611ca84330812308537b3f78f30cf1eb5a1489380eaeb1eed7cbead9ee1a364af8","ssdeep":"384:rQ2DrwRfD5Rs6YZ9l06ai0QwHM7uvFMg/a:rbDrwplE92i0dvFMf","tlshash":"5042c0ad295c9b00b2732bbc3f5332297759e122d4a1818e570d575e7fae1ce2723351","first_seen":"2025-09-13T20:22:46.248666Z","last_seen":"2026-08-07T23:08:40.256555Z","times_seen":144,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-05T13:04:18.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VsUyDVbaOre2VO%2BvEY9fKMT7YQ4oE6fnBSm6dg6pjPkG%2BhYqPyPZE7ixQ%2BmHjdBv0MRwCYSrLy%2Fqzu2zfvvKRiUnWC7vK8oESr7TAm56SHKeuI6q\"}]}\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3543\r\ncontent-encoding: br\r\ncf-ray: 9c929ce1f8098deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7404,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3975)","md5":"d7acc2aaf031d9a867e585d72f692a41","sha1":"5eaf3f58abf7bde9655ec4ef76c303ff850736ed","sha256":"84ad119e4be146d5ac0ea916e1f974f6a138602ea9d62db1e0b4d4d157ca7a58","sha512":"2021bd5b39beaa80fc3556458902d06e8f28ab012600c165e952eacd3d3a21f17585959a51e83601e2fe20e70967386d889d19776f2c6d0f48baebeaa882bbff","ssdeep":"192:EOKwY1F7M7xV1a4A3aS9/8REk+7bCnWbhZOw5deLWASoThTwbTu2ZCxfS1tB1Xir:EOKw+F7M7xfovZs/4eWtZH2KTu2ZCx0q","tlshash":"5be14322911fd620cae28d4331ce791678085431965684e7daad48eccae7e7bd3e3b08","first_seen":"2026-02-05T13:04:42.67589Z","last_seen":"2026-02-05T13:04:42.67589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":71,"dns":57,"connect":1,"send":0,"wait":10,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/GeneralSans-SemiBold-DQ6WvPG1.otf","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/GeneralSans-SemiBold-DQ6WvPG1.otf HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/assets/index-DZQ0cydN.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: font/otf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAomi6m%2B2TL6G5SuUNmIe%2BE6NdNZM58qGLS7wB7YodDJvYrQMuA5qKOHUa3C5iTLpl7Im1X%2FXoH0T7o%2BwGJ7AdY713eH3SuRMyhhka4MoQe2Jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6e5c3fe0b267256ccc36c6abe538c5ce\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce7bfa84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46640,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"858d81205b791170eaf0bc30c2ec7bc5","sha1":"24d398d7f5e7ebc4ba9488552455b79d38e17221","sha256":"6ad3ed9661df911b511135f494805704dea322dc2ae10a9620764f56df39c30b","sha512":"dfb54d625efbed4ff9c81d82ce48526d3df02513b77b624bd0a7bb9ac5dce5e7a5d11da88ec2b2751347d1f1540cea7dc412beaeb1997ca81b3b816756b09351","ssdeep":"768:t3E79vZp3MeJ81ARlwRaNS2dszB0zdXnaB96y//dwy4dkEzQDYU+3qeQNzvwRJzq:t079vZp3MeJrvwYNKKzdXaB960+kEzQp","tlshash":"62236c82fb4a4702d153bb348cb6d338c732ba248bbe634b657967755d0d0c65ea26c3","first_seen":"2023-05-26T17:06:12Z","last_seen":"2026-08-19T23:43:51.361943Z","times_seen":317,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/logo.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/logo.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrExbsdaHf0bTsvoQb09tAVlW5PHQxK2itpCv63clF54Cd%2Fz9c%2BzEpSy8BU%2F3EBxsC7NqpDzM318HfczraSfL1XxsFu5Z%2FRCF0ptvhLWrmrXibAl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"ef0390c1f8d8d6de9eda7d05fca76060\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce849184e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 180, 8-bit colormap, non-interlaced","md5":"29ca039173c0a55c342c8787f1db0eca","sha1":"b7125fa8d9dcf91511a2aa7181c9cc13e85aa476","sha256":"85cc3847d4b477b12f2a15734a840160bd4cc36c5030f9c8216b11d8f15aab8b","sha512":"3b9832925b023d9d6deb4d2e64a1e806e9a9d9e160b5ae667b8c83ee2d6ce397e9e16d443c8260bd8d9f7a331a2f8c2270d30dd74a5740f235ab8f20e313e5a9","ssdeep":"384:jP/wqBFsOyy3g7ZYrLOIplrHUjUl6ria+XGN/P5ud7/OkiTFkKCGcnIDqvLO9pJ+:jP3B9nwNKOAUIUiGsLZ8eKCG8zLOPvA","tlshash":"eca2d1d2f953d7e9da2b8cc056cbe2a1d699253026c4315edd01b18baf701f09b687f2","first_seen":"2026-02-05T12:00:34.369258Z","last_seen":"2026-07-12T08:52:38.185642Z","times_seen":71,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/4e51e895/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:37:03 GMT","end":"Mon, 13 Apr 2026 08:37:02 GMT"},"fingerprint":{"sha1":"9B:43:CF:B6:7E:4D:24:7E:07:88:71:63:84:E1:97:5B:A9:EF:30:0D","sha256":"B5:04:29:72:60:F4:B3:06:24:E2:C3:26:50:13:7C:7A:49:EF:69:31:3D:FF:AD:73:C3:5F:DD:58:F6:30:02:DC"}}},"request":{"raw":"GET /s/player/4e51e895/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 10535\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 03 Feb 2026 08:46:54 GMT\r\nexpires: Wed, 03 Feb 2027 08:46:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 03 Feb 2026 05:44:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 188244\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32131,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (570)","md5":"e52aa0ebc4c3eaec9b5dc3fb189816ad","sha1":"deee2067e9e36617f997fb3be3788432b87129a7","sha256":"e9abd0d74c5ecca848c706e3f94780a00efc33f66f1a7971ded040458851fd69","sha512":"c1274aa8cacaa39f2724cdbc73acff36088115445878ed95e4fa62553cfd35475d5db1266b5dafd3e71fc8fb645baa6837f84de0478bee8848cd8e1969b94099","ssdeep":"384:LZ9f+ec30st6d53jPj6ANwSYpBZKjTfPXRbiNu44mHQP4Ia3zPw5BWngmurjtF4x:LGMws5vZqjQj7BO4G3IaIgurjtcG12","tlshash":"0ce2c6cdbbb1b4314373a5f5902f100fb23e586eb4088999b284d8e16cf59694627f7d","first_seen":"2026-01-29T12:44:11.570685Z","last_seen":"2026-07-11T04:57:24.138665Z","times_seen":25164,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_top3.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_top3.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1s388IuwGuRwQFPMOQjKvtBnfwDbtAt5c5tp9o4LUd7Uj%2BeYmXpf%2FY5QgEcX4OXvRohCzSZWcdnfoIx%2BPVixlCnQ%2BUjNWprh48TKuPbbakewQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"5ca648b4d05f27a2524702b8b0f1a1f0\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce75e9f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5888,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d69b45cbcccc682199880daf4fec5fef","sha1":"62a9530d0187d4a4014760ffa35f8d81e22d3ca5","sha256":"276793679130e0a9623f679dcf9bc4b208c75a53d4a6369695dd07a43b4006fd","sha512":"2d3a956e3d88a7f180de8f5559833426fbb974a62a10bbcd57e105b7979f85bcef3aac319cb45e438a1b78a190c27c5b4964645b4fa5fd7f8add71f7737b3898","ssdeep":"96:lF3VGHHCsRozHy1jFVixtoyd9pe8Jid+6Did+uQNWfwdTzunPu:lF3V4COGHobdigqw+yPkun4u","tlshash":"b8c19e77ffc1742795d364ca8380c7788b6d70a483a629a31d052cf18037495cda016d","first_seen":"2026-02-05T12:00:34.339973Z","last_seen":"2026-07-12T08:52:38.111324Z","times_seen":71,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/GeneralSans-Bold-BWHD35xo.otf","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/GeneralSans-Bold-BWHD35xo.otf HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/assets/index-DZQ0cydN.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: font/otf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SLa8sytfbnkU8QTakdy62NaHxmK02Qc%2FUWtxIWjxyHix5gT8lfIs6hcPhYF%2B%2F5OZaI3EJa%2F7pAWwY6SZGQYoGzUv%2B8MDoeVjjUm9FrksHxWMevu0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4f43dc2beb93592c65b11680455cdd8d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce7af724e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43260,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"398fa49258135c6cefe9383eb0cb19e7","sha1":"7c66f9cd8c3240fde8504746b849217901adfea1","sha256":"88bff1f629ba18f1342250753648b9e74196b8a2229fbf2f53d602d787fd23fc","sha512":"dedd6a08758030adf38d24af7f055ad3584be51cc15cad70a126878abce216dc79f7810386459471b7c57483f923a2764163a31c6931b924c938d513bf9d3193","ssdeep":"768:daS3H79vZp3MeJ8aBG4U1lwLMZVCLu/N3ETWaDNfkuIFF3Ejz3MPuoQMivbFy+:dR379vZp3MeJDiwL0cL6aRfkuzz3MPuz","tlshash":"ee13089a3a077345d112f6384db79734db30fa244ff99a4a51ba49ba5c9c2870d33393","first_seen":"2023-07-24T14:56:47Z","last_seen":"2026-08-18T12:35:08.654557Z","times_seen":256,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/HomeSwiper-Cdeaubi7.css","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/HomeSwiper-Cdeaubi7.css HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCZgTzOlDqLaX16hR9wxcv%2Fh0XRnWuMvNDmW%2BtrStzPORkut%2Fb2j36OfENaH8BUIkfLNvI2FwEUHqvCAtdPyPsnpAUpUnUwk5QTqpE1vbFRRew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"887861bdde22a850d0392d0b07369145\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5d9964e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3072,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3071)","md5":"114849174f3af0c0493da7cf3697516c","sha1":"64c07f9b1cb7cb2715f85752987fd2a353f19520","sha256":"315b11f2a45898716382016be22f62242c17685c9fe3a4a39a5a1ac986f3d0cc","sha512":"3f4ed5fd5044c614e7a3c57390ca56760ee2055bd1dec8cc3ddcceeeccd815733fb5f069e0f472d695c226b88f845718550e3c6462bcb4f93a758945933e07f3","ssdeep":"","tlshash":"8551c23ae85055bae4276d2066d84dc80224d46186719deee5183d1cefafbf4076f34f","first_seen":"2025-12-21T20:17:46.799754Z","last_seen":"2026-08-18T21:09:42.611818Z","times_seen":101,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/HomeSwiper-DQepM5md.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/HomeSwiper-DQepM5md.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RpSnHn1nLuNQ9OuVGa5VQongYPg5kbvZD2K3LY9S1%2BJUDYy822neQwbE0bHmrOr19qEG1RQs9r8IZqrrpK7D45J%2Fqac86hs89jvNmm5PZIQ1Zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9ecf5a767ab56667ddc6a095ff129f91\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5e9b74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71256,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e913fdf0944974493eebe27134b2cdcd","sha1":"36a5f27dd474df48cf9f19603c941540b67706f2","sha256":"1bd76ccf395a635261d64093714eacb822ef8f518e435b1b4e4d058dd686c08f","sha512":"0ac3d7dad2abd930dac5fad03084c0fb9ebffd4a95c4bb9a09a57eb97eedca1a4b2dcd7e066805102db3a0a114cc3ed6f3c3d0b1060bfb8663577683a01cf891","ssdeep":"768:4mWas966AxkMubeMEertdvjcCTzlhWDuIxOjxQ88TRKgf16F80n0F/jphx1pKI0S:fs96ITqDuB8Qe9pK0Ub80S3BhK+dN","tlshash":"36632bc63196f85783ea04e2503b0506b6291d94780ec098f57cddce3ea641ae6bff79","first_seen":"2026-02-05T12:00:34.329323Z","last_seen":"2026-02-05T13:05:58.916055Z","times_seen":66,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/step2.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/step2.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBviOuobU3ahgSEDyfi0rLKS54%2BvBZc%2F0V9bAUQjhSauLtIn7qbp%2B%2FmbdyjoGuqUJ63WfJWJlW256kjuOP%2BPSXPfDD8aVvUwYhihLf8pj%2BvQCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e069e4d05cff55c477eba66e86fd4325\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce8ca794e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":445,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"422c9752b32e599b14d009ce06031f31","sha1":"806979db0f13c8802077a722563a27ff13679c11","sha256":"162d0d406d17de1cdefca9f39508d29ed74afb262429de41774169cef121be84","sha512":"fcfcc0acdd80b30e0e024094111fddfd26bf0aadb1ed3cabab9eaa84dd9fcea8ee8bca3fa19f076202ec6b956edbec2e80b017d11b798102829eb19cd9407177","ssdeep":"","tlshash":"c0f05c29d348654e050e8fd077546241d20e6359e3dc6091b54a2ce03613ae9a04bed8","first_seen":"2026-02-05T12:00:34.361958Z","last_seen":"2026-07-12T08:52:38.14273Z","times_seen":71,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/User/coin.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/User/coin.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXnYKp6fbRmUX%2BZvtv7XNUJOK9wUhCmu%2B1jwmRGMjJk9%2FAbaWwyn1cRqYCp7UYMtXdbIfiHT%2FE%2BkAdJ8Tops721IVOEdkA2YuzWqONQLGpVARg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"a89187f1e8fbce3ea4edb0dbae563c61\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce5c9634e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"bd8a3f9460d47a00357977c5743b2fd2","sha1":"ddd0bbefcb9e1a1632f1e2bebe81ac6f5bb900b1","sha256":"5d07f290392f357baaa50f1c3ea4b69178c415c8c46f12c53730c775b2d92f7e","sha512":"3ff59846343e232cd3821087bc36eb4642d0d9959c3cb7ce004f8d63ff6f64df9b3a3edf11d287f998a1110087299922ce4a0d2188c16c95a0506c6d3a66dc9d","ssdeep":"96:Ycpwk3YMv7dAVxYP8VsDs+QWlmJ8tLyetC4AuCLERHRwbWw5b:YCwklOP+8uiWlmJ2Lyeg4AWH6bV5b","tlshash":"8ad1afb316a51fa8eff9e89e8760ad03dc2095c3cd6915d4f87123f55a0a2c10c6c0cb","first_seen":"2026-02-05T12:00:34.295515Z","last_seen":"2026-07-12T08:52:38.13397Z","times_seen":72,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Nav/invite.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Nav/invite.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQAWyXzLMYtZaUvk%2FNw%2FIdAcPY%2FaxSMOiHl15EzgoKDPEQKJL9YSYJ6mQ1ET%2FzJdj4ZYnlZ3XN56MzjJLQUZE8lpPVyr8v3TpM0uy%2FkhhifZ%2BLk1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6839071889550ec3b873668ec6135157\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5d96b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":924,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"af1df3de89487c21e81a6622ef2406f5","sha1":"e4753c62d5840c44cea2c1696eebf4d4be4e8072","sha256":"2da7b75d36f9eff64ec3680fed788e40afc3f97117107c11dffeac1fbe7920da","sha512":"e3f8f04631d238ee98065f149cc8a4a9945d0fc83d210661080054e0d903143af85f8875f9a3dfa5a0fa485935375b644423bd437a8c4f24f64b60a199a75040","ssdeep":"","tlshash":"55117df04b6c66ade95e527ec353314723ae61e3b0cc42b8cadc67255143ce39d03a49","first_seen":"2026-02-05T12:00:34.333484Z","last_seen":"2026-07-20T22:43:13.300448Z","times_seen":87,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/HomePage-CN8hqexI.css","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/HomePage-CN8hqexI.css HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cA8xRUDgxi2mvatYH7RrTal0Hmdnt9lUBpimBfBAltGuHtPcFRaa578sIHPqHOf8jSPWl%2BuGEjvfAwE4JU8dT7c3qNKIR%2FMm5ZARXSLzu2AHmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4b84636b5af8ebea7544f4db9d490c84\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5d9ab4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":584,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (583)","md5":"221d662dffe767be22294c054749ea42","sha1":"f6e6984196af03217bc31ea1e6e579ea2f1a70e6","sha256":"ec1f61307684ff751e3f4c61d2a5c1facd6a6a29e30017b9857081973b07de26","sha512":"b692783aff70c8c110e00856e7fd44951cf51b60953c9b1ad0bfb6a6f54d8efd1cd28c81b65dd05a81b0f4955d0b9d2214784069606a44294080fc67dced1bb2","ssdeep":"","tlshash":"81f041aed3032605f780e3c09ac59f0821ac7902c1170684a6d1a07e03843ff28b6b03","first_seen":"2026-02-05T12:00:34.281347Z","last_seen":"2026-07-12T08:52:38.140815Z","times_seen":71,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/HomeSwiper-DQepM5md.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/HomeSwiper-DQepM5md.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/assets/HomePage-CyP8P9W1.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RpSnHn1nLuNQ9OuVGa5VQongYPg5kbvZD2K3LY9S1%2BJUDYy822neQwbE0bHmrOr19qEG1RQs9r8IZqrrpK7D45J%2Fqac86hs89jvNmm5PZIQ1Zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9ecf5a767ab56667ddc6a095ff129f91\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce6cccf4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71256,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e913fdf0944974493eebe27134b2cdcd","sha1":"36a5f27dd474df48cf9f19603c941540b67706f2","sha256":"1bd76ccf395a635261d64093714eacb822ef8f518e435b1b4e4d058dd686c08f","sha512":"0ac3d7dad2abd930dac5fad03084c0fb9ebffd4a95c4bb9a09a57eb97eedca1a4b2dcd7e066805102db3a0a114cc3ed6f3c3d0b1060bfb8663577683a01cf891","ssdeep":"768:4mWas966AxkMubeMEertdvjcCTzlhWDuIxOjxQ88TRKgf16F80n0F/jphx1pKI0S:fs96ITqDuB8Qe9pK0Ub80S3BhK+dN","tlshash":"36632bc63196f85783ea04e2503b0506b6291d94780ec098f57cddce3ea641ae6bff79","first_seen":"2026-02-05T12:00:34.329323Z","last_seen":"2026-02-05T13:05:58.916055Z","times_seen":66,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward2.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward2.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Qsj%2FprqqZoDhEWKI2OGcLuaV4RZj95nXKSD8zxiYMQ1F14AQ0zNQNjmGt8%2FUQrbzNmExPGIjS0nKMw%2FW1ldRxYJQx9c0lvNAgE9u3cE2PnQr8P0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"a98b7f6d1e3bfc8144ab06a5942dd70d\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce78f3e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 354 x 291, 8-bit/color RGBA, non-interlaced","md5":"ceb2c1c391d41d1718a91c5684c3b50f","sha1":"48fb8ece20f1077e6c31d8891de243b9ff8d8568","sha256":"31da284ebad5da93f59a5b685ee85d01ce986e97449b684a57bdcbb67785f70a","sha512":"16c546b3f33c2407b6a7fa04758691ad63afc7b328d1f4a32c58cd1918c588acc87253dbc02b3e9d48bda64bcb3ccc5ef0de9f49c010c27f94a623c52cdb6a87","ssdeep":"1536:7CCc3MhmqJYnyToL68dBnFIJvVwZep09BgdqAKvl:7CCcueBPdsvVwMpMgdS","tlshash":"4f530208f44cbffa487704667b951b863be0dae421eb075c8864ad479b1850bf29df72","first_seen":"2026-02-05T12:00:34.326344Z","last_seen":"2026-07-12T08:52:38.185142Z","times_seen":71,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/step1.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/step1.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qpgRapKXp8QOgDocOB70XgrPiSPpEqBElDv940%2BogO%2BS%2BxUtL0Vq7JJG52NnXY5rGQciGh3gOLMLVm5DaoffHmo368iaURfHebtv6vyEiwvRiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"aa16fa0678248933cf852e67c11102db\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce8ca744e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":872,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66b8b5977c94f21562983e80299e0686","sha1":"f39bb4aa98c832e12498a70b0c087773240fd1c6","sha256":"8d15e92844e2e836bf637b2cee1f3c7152af38bf9a96fa9fee145e101a1b6cbe","sha512":"0c0dcc12b733294173e1c5827a249fd9728e8c59d3a84b0a77c4a221c31487729105f5e06ce891d9ad37fafc72dca8894b4740da3bdab634ac54b22fd9b1ddff","ssdeep":"","tlshash":"cc11ab44b125332e52e1ce79e02434a405cbd6adb1f048a5718955f072eafe8b7ed6d3","first_seen":"2026-02-05T12:00:34.287204Z","last_seen":"2026-07-12T08:52:38.130666Z","times_seen":71,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/useWord-CZffCRsc.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/useWord-CZffCRsc.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGmLwPT7o66Pj%2FpWIDMnrG%2BLIiy5qaG%2FNokGPRAuIKQuZ3QR2HVVQBxQWYOhjzixI92u6m53yTI0m7HfqvrINN0J9KKW3cGEl%2BiEdwzyjTbuWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8c1c5e508076c8baaa66cd9b0063a30f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5e9b44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7ef2850babb7762917902d1a8dc9f65d","sha1":"07acac5cba07495952a3f223f82866c25f5c92cb","sha256":"bfb160af732e768653934e4687cbf9cbac36dfc77096631854f00ef917beb6dd","sha512":"388cf9e223dda593f7258f745b23216e093626db455b8163d1b044a9c33fab52985f19fd44bd090b5f199aae32a9314f8712853cc1d47185cec6ac7f2a102fd7","ssdeep":"","tlshash":"70c02b453020caff133f05ee00b84c5443206c04326c6f64f118084b33d10830a67f09","first_seen":"2025-11-21T04:16:31.886206Z","last_seen":"2026-08-18T12:35:08.642164Z","times_seen":149,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward1.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward1.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VP43LzQfvIj1IKuu7sjdjWw55TTlviTu1zH%2F33NUk4REIAaTENUg60KTuStBKmt863tpEPZb4PWKcVaTIVtIMJ9SOBFg%2BLI3Lnt%2Bv35sk8zQhBGg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"b22c8ab35fbf8fa12e71a370742bc87e\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce879984e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 399 x 302, 8-bit/color RGBA, non-interlaced","md5":"00ec4bf7f5ba4d29025f61541879321a","sha1":"798480b03fb0bd96c5527d03c08fb99ae1fb6d74","sha256":"5de4c476656809a6d2e58393b9344e441b029f977cc90657c9cd3b340596d109","sha512":"6225ed8c0661bcfd2e760942233fe66ea402a0485aca500e40ee3c2656f315654f7b98157ec87ad8fc67a80c1556c3be990c0607e306a3b60253b29b8de4833d","ssdeep":"3072:XYegc+8b44nG1w4L5qoboDSxt4//IVqbgKn5:oegrg44G1R9q1ScoAbd5","tlshash":"5dd3123aeddf79fd5db2ced74835986ea065083f4b821ba91c6cb18e7d8e28021d7144","first_seen":"2026-02-05T12:00:34.370138Z","last_seen":"2026-07-12T08:52:38.119895Z","times_seen":71,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward1.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward1.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VP43LzQfvIj1IKuu7sjdjWw55TTlviTu1zH%2F33NUk4REIAaTENUg60KTuStBKmt863tpEPZb4PWKcVaTIVtIMJ9SOBFg%2BLI3Lnt%2Bv35sk8zQhBGg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"b22c8ab35fbf8fa12e71a370742bc87e\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce8ca824e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 399 x 302, 8-bit/color RGBA, non-interlaced","md5":"00ec4bf7f5ba4d29025f61541879321a","sha1":"798480b03fb0bd96c5527d03c08fb99ae1fb6d74","sha256":"5de4c476656809a6d2e58393b9344e441b029f977cc90657c9cd3b340596d109","sha512":"6225ed8c0661bcfd2e760942233fe66ea402a0485aca500e40ee3c2656f315654f7b98157ec87ad8fc67a80c1556c3be990c0607e306a3b60253b29b8de4833d","ssdeep":"3072:XYegc+8b44nG1w4L5qoboDSxt4//IVqbgKn5:oegrg44G1R9q1ScoAbd5","tlshash":"5dd3123aeddf79fd5db2ced74835986ea065083f4b821ba91c6cb18e7d8e28021d7144","first_seen":"2026-02-05T12:00:34.370138Z","last_seen":"2026-07-12T08:52:38.119895Z","times_seen":71,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Nav/cash.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Nav/cash.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjakr2uy8Okr4uHViKnkgvcYsnFgFyVNm6hDOcsIw2ajEl6IIwZ%2BXhj6cL0IKIlKjYwlTfXtwvWmkRbbsuVwjn2o6ICqAKVKa%2FDZ6fJoZuMSDAtG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c7fc92e2dba82852730fcac725ec6bcb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5d9874e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1310,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f9af35ad9c9812a3ac9dfd9b0583c8c","sha1":"9ed1972c41ddfd0bf93c157a863f259b79d543b1","sha256":"da5c4d109b52f6776bb76b06b8c8b0027f38c845e197fbd01fd353a2afcf6420","sha512":"93bf74da6e6a2dd835bb69584ce7ea8c7176380882d8a4ec80ffbd003ec506d22d0c86d521bc93758cee2e73c3e2aea10888f335fa98254caa36d05eed871c4c","ssdeep":"","tlshash":"892126688d655360829d93c9fa09f846fa38b0df78decfe432349e9051b0dc7a9880c7","first_seen":"2026-02-05T12:00:34.361031Z","last_seen":"2026-07-20T22:43:13.338717Z","times_seen":87,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/trust.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/trust.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vaZkdgX0BaKAHHb4DMkvpq87uLZeyKRXAmGTfwG9UVF6SNJQa9pFwoYXtmNY5SG4Q%2FWHlYb8HFezKLfXSsAEpd5fp0a4%2BlvEOTDW6f2HcvIDIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"05074454d151043032ec90d338e77a80\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce76ed34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 354 x 38, 8-bit/color RGBA, non-interlaced","md5":"1b7b0bac5ac7aca1b87c2d129c546c91","sha1":"9189823153fd757781f9ff6ea2f03e9f229ef19c","sha256":"74f5f7d531b6af53a525d026e69304dc663bf98534ff349477be60b9867447fe","sha512":"00c2255ef364b207cb56eb89fa11652b90f0f19bc2795f1aafe458d5cd8cae9e965a54d8008e43fafe76e6e13a87b2d5ca5254e635bea0dd9624b6467143d42e","ssdeep":"192:5W+3F9V5RdcgTzVzywR9HGzyWyyn59eNz35B6VOFGf:0ubNzDgzXgJQO8","tlshash":"5cf1af0dc7d96637d2d27f6a7515d0128a9f92e9ecc48d3786146ccb323062b520ba1d","first_seen":"2026-02-05T12:00:34.335271Z","last_seen":"2026-07-12T08:52:38.180333Z","times_seen":71,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/step3.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/step3.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9S9jl4R%2BSWGp5HhbJ6d4eEBsVZ%2Brp4eqrvr0IsMsG92igxlsqibJ88rJDl0g%2BfzeoJzWuueqI9jk70UthXWfddeIwTLPtJCAvv8jDcNLueEFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"085581c2a09b38f6d3af25b366e8d36b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce8ca7d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":723,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9d324619937747277c6479df9d94b12","sha1":"921d305a6e69a54ecea1d0b946651f3c557b0c46","sha256":"c4be367612a154e0f2a33e3d63473449be2b957b62bfee31a0bd73b4e21d27bf","sha512":"10002c026e5c4775706966a3b31a9e1622e609f231ff712b7dc9d82c552c8c78588df606a5c330685d55b981c3c733829add5f494362a7a13980dc91ca7e37b1","ssdeep":"","tlshash":"8301dc04a136aaaf8a2ed6f975707070098d60eeb5d4c46ee0a21ff47253868304459e","first_seen":"2026-02-05T12:00:34.342179Z","last_seen":"2026-07-12T08:52:38.177543Z","times_seen":71,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/comitAvatar/member2.jpg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/comitAvatar/member2.jpg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhQH%2FYFYIqLAFS6jX63Y0%2BOYsZnbFhaAasMkMkd7GnnsGKDgPJ1bx0ZkYmIWm2q5HuSSBF%2FZcjg8d%2B3wA2GUOBGw0skndwIOZv%2FfKQ0gMcAvV6h9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"a440a348f451b28601fcd8459b67a8a9\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce8dac34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3","md5":"fcab6cab69294ac824a3898f3015e77d","sha1":"4887e6ac7e0c191d2c7b651024dc1f097489d533","sha256":"0f3fed6b519150cafa2267f4799fa7142820866eb23737f13a54f4a4c1ca9655","sha512":"dd8dc91e7a8773dab940f63d6f915525f468fcad635cac502eabf05d9f75789fd24c2460c87f49acafde572ab132922b8281619c65eb501da5274358983dd0b1","ssdeep":"384:YdE3ot60XaHP2oHJ0covAWyEoza5oQ5l2k:Ym3w4+w0covA3EozaoQj","tlshash":"2042c024174d9c93fcc271fec8e19665c9245401df901136db8d5538962f1aebecdf86","first_seen":"2025-09-13T20:22:46.256117Z","last_seen":"2026-08-07T23:08:40.261373Z","times_seen":133,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/BottomBar-C5hHESOR.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/BottomBar-C5hHESOR.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2jbqtVoRPEuHYmr3k5V4qdVBg3eYoehySbbIoR15u23cVPqtrKNPMeS17BxpRC4F0MB%2FL0vA6gj7Bm8O3Gl%2FlMdEcyJUcHd%2BY9Mhv7Z0XoCHnav\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5c5585ccda3cd4e7de02818825ec6f3b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5e9c04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1388)","md5":"78213a1dd15651182373dad778f48aba","sha1":"12950d499ade43e0d07e150ed2918798951ff44e","sha256":"eca4b4d41e1b342527247420363f689a8eb72c805ba140994bf8e0fdeada44aa","sha512":"90ce4fbc3dad095e183d4fb28a875b2a5f2f2f3f32d6cfdebf1dfe6fec82f761acf13a9adb4d9a897938d3bf03b2c641d9a6a7ebf5daaf4ff59b21eee3d3289a","ssdeep":"","tlshash":"53214c84a1c99beeed6508c45a5dd348700b1ffcd52ec89660bc1c001a689a7bb5f3a6","first_seen":"2026-02-05T12:00:34.330246Z","last_seen":"2026-02-05T13:05:58.933688Z","times_seen":66,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/HomeNav/fire.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/HomeNav/fire.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYS6hjCaxne12zoCNI47XBxZ3fB%2FXM5rcQSHxr59ObN49U9tN9pljnF9fY6%2FWMNkgvGOI%2FSaIfds4WiZMbraoYG47F7Bmc8khWWllIdvq9e04sUt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c929ce5d9704e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":7404,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3975)","md5":"d5a7c3618c347024450a762f856fd65f","sha1":"5011dfe3ca43df2df80886fe15c3e2d8c6ef29f1","sha256":"b07bae23440e7a16c79593a6e79aa02427f6b948f10bb787f35905ff9b5fa599","sha512":"b8a262f4c51ff095e5402a4b68bb2381e638fa649a033b252103ba2bcda15a15af61ecca603d9f94ca136f65a7ad96e4811c7286a236f314eb25ecf3cb791f36","ssdeep":"192:COKwY1F7M7xV1a47bhZOLREk+A3aCnWbS9/XhTwTtLWASe5dOVu+ZCxfS1vB1Xid:COKw+F7M7xfztZs/hDWGZRnhVu+ZCxWs","tlshash":"bfe15226911eda11c9e28c5330ceb90638044431959a84dbdaac48eccff6e7bc7e3f49","first_seen":"2026-02-05T13:04:42.68674Z","last_seen":"2026-02-05T13:04:42.68674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/index-DZQ0cydN.css","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/index-DZQ0cydN.css HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHvFCaFcVQqJj7rxRCspPKPSuhpudgnE%2BPB2R5TjXu4y1bmjvYaafFqCPrWgt4Mzs6KF5JkJzFPsP8pY%2FtEfEibT0QS4mtpIrLdlQcb4kW3P3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ca49cc27bc7c6ef01e00ed339917790f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce309b24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44322,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (44321)","md5":"c8964e7b682b8ac1d06948e11248d664","sha1":"cec3c5f6167ec694468261f372294e2f563cf968","sha256":"24dae1b8286dd3cb9bde132b7380ae447ce5de4d7704ceccf536b430d591e84f","sha512":"0ef11305e9346a113b62c923c598199264bf7892ab68d4d04a0a8bb51c8c882e5853a2766541920dafa2d3fb7183b8cba34fa737c0d24cda1d9f5181b05ec1ed","ssdeep":"768:wOPQqgntRH1tRpFHY90BWGe+GWVxTUshd3JIZN4yrAM:wOGHlpFHY90BWGe+GWVxTUsh3lyrT","tlshash":"9313ca6f5a00107a7c5749f1e2d8af98e65af0d3cf3249eef5421a148fc33e62996709","first_seen":"2026-02-05T12:00:34.367574Z","last_seen":"2026-02-05T13:05:58.953712Z","times_seen":66,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\nexpires: Thu, 05 Feb 2026 13:52:18 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YcpBdGRtg6%2FaglfFuP5806TiYOjebFEGYTor7PnuU8F3uuvawPnr2TFLmcfgd4BVsXjWafOHSNrO%2FC62lqz3Suy7RUInhAuQ2jXJbZY1qaIV3uRj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c929ce309b44e4c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-20T13:28:44.392047Z","times_seen":125722,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/logo.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/logo.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrExbsdaHf0bTsvoQb09tAVlW5PHQxK2itpCv63clF54Cd%2Fz9c%2BzEpSy8BU%2F3EBxsC7NqpDzM318HfczraSfL1XxsFu5Z%2FRCF0ptvhLWrmrXibAl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"ef0390c1f8d8d6de9eda7d05fca76060\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce8ca6d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 180, 8-bit colormap, non-interlaced","md5":"29ca039173c0a55c342c8787f1db0eca","sha1":"b7125fa8d9dcf91511a2aa7181c9cc13e85aa476","sha256":"85cc3847d4b477b12f2a15734a840160bd4cc36c5030f9c8216b11d8f15aab8b","sha512":"3b9832925b023d9d6deb4d2e64a1e806e9a9d9e160b5ae667b8c83ee2d6ce397e9e16d443c8260bd8d9f7a331a2f8c2270d30dd74a5740f235ab8f20e313e5a9","ssdeep":"384:jP/wqBFsOyy3g7ZYrLOIplrHUjUl6ria+XGN/P5ud7/OkiTFkKCGcnIDqvLO9pJ+:jP3B9nwNKOAUIUiGsLZ8eKCG8zLOPvA","tlshash":"eca2d1d2f953d7e9da2b8cc056cbe2a1d699253026c4315edd01b18baf701f09b687f2","first_seen":"2026-02-05T12:00:34.369258Z","last_seen":"2026-07-12T08:52:38.185642Z","times_seen":71,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward_min3.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward_min3.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmYHeWDEJQJ4ISgHLf%2FIM9yfMHejty5dC5acCFQqJcKFG59e1OlcCkbjkPKVKaOoPOpwkJPaNSPMCnSxjVfJgzm1%2Fyx%2FRIYo8%2BUus6cqiBNwnJ0S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ef88c476df43beaf6fa082c469abb35b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce8daa64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":732,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8985b299e3b03bab671e368e231019cb","sha1":"9aa88d4dd8bd829300877d06ccb786b6a4b7629c","sha256":"43a0f13ba23762a8a31c4ffe044717f23731ebf6c2d13173f8aa94679750201a","sha512":"dcb543d52ef7316fe9a51fad6d12c4cf833f4037781d3a6cb87514ae6037e251673f455a9a06b0f23a81739a45b130204a42a16f218c9aea52c93beb4bf82ebc","ssdeep":"","tlshash":"24019c58eb7d5a1e4f09d3d078f024724a4db0bc7184c57f959865b02f0b594309e86d","first_seen":"2026-02-05T12:00:34.348935Z","last_seen":"2026-07-12T08:52:38.112652Z","times_seen":71,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/close_black.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/close_black.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:20 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpsTaD1Bg4%2FRE6TeBe7OH7yONGt5Glbj9ZBfRz0wgOjVCWhTW%2Bw5sAnZIY8cCjNrcQuaEtDaBvoTTSz1DywGQR6vjIyGOlCgBR%2BgpOAVJDpbTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fa15454690de45cfba4da9bd11484134\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ced0e9e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1056,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7133666797b5024f302dd012ec29e04c","sha1":"e307d6bf52bb649a8aad632ccf2ab5ebd8703213","sha256":"baa7649b4752846cde29e2cf8888125f9958496ea0b8a342c7040d86a66da63f","sha512":"05737d9951d9b6dcc14e3ebc3c13f2e9011007be11fe06f7721e9637e177697d92f5683ce9754d0798b9d74555019aa7c5adb5fe0f47a2e0de20b54b2f2c7b34","ssdeep":"","tlshash":"fb1135099750fb10cc8c97d4a761df7c6b4e52cc24f5513eec5f59494153a7916484f1","first_seen":"2025-09-08T01:23:12.543961Z","last_seen":"2026-08-09T17:01:17.145682Z","times_seen":256,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.imgs-cdn.com/users/NO/NO_9da60945.webp","fqdn":"cloud.imgs-cdn.com","domain":"imgs-cdn.com","tld":"com"},"ip":{"addr":"172.67.192.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:20.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgs-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 11:07:33 GMT","end":"Thu, 12 Mar 2026 12:03:59 GMT"},"fingerprint":{"sha1":"D4:12:B4:45:C6:EF:76:36:E0:ED:73:95:33:6E:BE:2A:3A:A1:6C:C1","sha256":"F3:4F:18:1F:F4:70:07:9B:1C:0F:E5:99:DB:31:0C:B2:67:F9:C6:36:76:4C:5C:82:9D:CA:25:55:F7:82:E8:96"}}},"request":{"raw":"GET /users/NO/NO_9da60945.webp HTTP/1.1\r\nHost: cloud.imgs-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5712\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 23:40:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694c79d4-1650\"\r\naccept-ranges: bytes\r\nage: 3853\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BAHI%2FSCFzJy5SO0%2FOKAhkafc2EjjOiT%2FyqaqSf7YgvT5sPWsQsb68vozAxMA4mb49JgmNo2q%2B4ltGKzpLWh8o1IwWrh8NrZRUjFybEEhio%2Ft4g%3D%3D\"}]}\r\ncf-ray: 9c929ced79e21ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43bd63d004200c8a4013f6a4214a0b1d","sha1":"96376244009d742f202dee2d3ecd262259b0e848","sha256":"37830eb16c014510febe892c736f5e58d78fa817c78ce4c801cf5f63cac692d2","sha512":"e1c89f49a0c6aa0b91820916c1e3de68b6c66e781472fcf56a0b24d906fcb5816dce005e9a0720a9327c1c1fdabdf649bf8b1228941163ab7edf53cb0ec3a2a4","ssdeep":"96:agIkbh+4uCfk6AlAZijLhnohoDLQ6JQGPMdtTX6pB3N2ybqo1QX4a7MkTJxaThqZ:agzg4uC3WAkjd0oI6OGPMdtTX6PsXNYo","tlshash":"f3c1ae95787344a2aced8d3e4bf81df09ace78a192b28d276775a651a730497e130307","first_seen":"2026-02-05T12:00:34.353952Z","last_seen":"2026-08-07T09:47:09.630767Z","times_seen":104,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":37,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Nav/home.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Nav/home.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDTKXU0HWIgbgkm2GzDeFZw3u1ZMHcckT0Na2W2o3TnHpE9NIOhgmyVhGhendME8NI%2BhDmfy2z0OjdExsa4sxGI5ckw9S5GuAthRhWgb%2Bb6%2Flw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8cfd28bce789a2c6bc7a230c9b6c519c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5c9694e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1d5484110ecb154139afdb8e619d84b","sha1":"72691c2a3899a349ec9fd357724daa8aa0c49fc3","sha256":"3b0abe25e68a35ca47f6824ee21549022de1c5dd2ca2c6f672ec50655b95a76a","sha512":"06dffbe199a1fa35d467d34d4d86a8fb3a93dfa7ac606c46e90c2b2afcba67d6a9b2de568cea43dd68fc0f7055f744d09a7f64eaf3128e5d717565f2a6681817","ssdeep":"","tlshash":"2c3144c11c6f3a36742d87aade6ee126e02d3697b5f58cada39149564c43cb84c40cdf","first_seen":"2026-02-05T12:00:34.348048Z","last_seen":"2026-07-20T22:43:13.314443Z","times_seen":87,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_top2.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_top2.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1koAZblvmpXoIMLK7a%2FPzOpvwZa4d1psPQrNhCPjBWv%2BEDL5WI9cNZLX%2BTIrvmbTTMA2Bsj5C7akKeo4rr1IEZL8aR2v4qGMD1O7N8icT8qfvjPH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"6bcc3ca2dd61a8ae76d4f381e7405c25\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce76eba4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b93f2762979f3d791f349b3eb1cc5a81","sha1":"c43695d62313522b455427e6321ff666ff440b2f","sha256":"c84060d663fb453c999842115c68399ce4fff85865f42683ff065654de641959","sha512":"553043c0375cdc2b34cb21a5b636be0ed9b128cff0f518c9d2033da282f3dd67b0c0609eb66b49368e757df337eed5049fc3e9c57233f7b3b95ef394db84f58f","ssdeep":"192:EDk2cdx5rh+wDF6aUDrg5ewYD1JCwSXDyN3pokHmaOGs:EDArh4GlAJHSXDq+kHhOR","tlshash":"6412bffad89d7f2b8271e068cbf239d368e481607f1ddd11ea99744435b0612cac470e","first_seen":"2026-02-05T12:00:34.359298Z","last_seen":"2026-07-12T08:52:38.184503Z","times_seen":71,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/comitAvatar/member5.jpg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/comitAvatar/member5.jpg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ioqrkeP3PNZATUqIXCTHJBOSriMrp7K51Tkh6r%2BXT6vZ80Jx5iS5mwkSJ7Ng9MChhOOK0u54jU%2BhyIPmMX%2BtIKA0wYtnAQ8kr9zeYreaqg6xjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"be0a62092488f16e704989c18ea4f9a9\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce8dac94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9732,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3","md5":"d0518074fff0bde08ef1c599fdd69782","sha1":"d20249a48affdb8c0fd11e89e9b327b196df37ef","sha256":"175577485037c57098036875ba46342d380b8f02647a26fcbd7bafa5321920da","sha512":"58c039ff140e17b8bf27457d648d688c4a91d2eeb82c40b2a65ada4c00a7a45a53c07e6f5610e83140a23a7f7d41ef3ccc34a352378383b8b9c9d99183e3d0d3","ssdeep":"192:PkzgPFC9bSNQyeDX2Rme80zT2yJ5aP65IfS6KoEHYfOBCcF5tkYCVfpxKJ8JH:zcWRCEE0zT2yHP5aS74fOBCcAhv9","tlshash":"4c12bf0bb38e93f1f0d158b50e450768a7019957dac1b7186e293a327edd6dec96ac20","first_seen":"2025-09-13T20:22:46.234308Z","last_seen":"2026-08-07T23:08:40.262071Z","times_seen":130,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/HomeFAQ-OISYuPS4.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/HomeFAQ-OISYuPS4.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/assets/HomePage-CyP8P9W1.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8p4KGgvraxt3UcPkqq%2Fio3uGAuThlOj4F4np3MTXgwE4HDzJDEEb0itFpcuWEM%2BfoG4Ha93VG9TkSsvP21O90zQ%2B7xNfeI7cTtGEg%2FI8zn7NQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"77299aa4e3cb6fa05158f31434a068f1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce6ccd54e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2250,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2249)","md5":"77e7b7d0b871b3068d31da17fd31904c","sha1":"2a42ecf0732ebc17be847667167b6d289e46363e","sha256":"5c6b56121bb1fb499e466a01cf2578ba28afaf4cfca516870901f6ec2517d432","sha512":"f7a5ddfe1dfdfe8b5663c3059b639c81f944ef42fa549286c7a2426462ce4497f46480bb68e4f7f2efd7e1193e5e3d6557e4d4b9764f476c691b8f6242ccb7c9","ssdeep":"","tlshash":"8641ab3f4603964de81f0ad4d2ca8e00327d895af7a18c696fb60d052660db0f19ffb9","first_seen":"2026-02-05T12:00:34.352262Z","last_seen":"2026-02-05T13:05:58.947823Z","times_seen":66,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/HomeNav/fire.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/HomeNav/fire.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYS6hjCaxne12zoCNI47XBxZ3fB%2FXM5rcQSHxr59ObN49U9tN9pljnF9fY6%2FWMNkgvGOI%2FSaIfds4WiZMbraoYG47F7Bmc8khWWllIdvq9e04sUt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c929ce8088b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":7404,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3975)","md5":"8ee8a60490d3cbe59322e9456f699e41","sha1":"371f9343084bd244b9b61eb5455d25a23668955e","sha256":"320cb442cde204e9fca94a15dbfa441efd9612071f4b9d3764716397d5f71b7f","sha512":"01992b779174d3fda3a02da01ae7c755f3c8b43c247a159995c91b972b65485b7c6200293e69a30c01a6fd4e1a3907848dc5e18a00dd4b38b9327ea5bd757ccf","ssdeep":"192:+OKwY1F7M7xV1a4CnWbhZOLREk+7bS9/8A3dTLWAhTwSoet5LJuWZCxfS1zB1Xih:+OKw+F7M7xfKWtZs/4GZ3QC1JuWZCxi4","tlshash":"02e13336911eea10c5e29c5330cebd0678049431955a9597eaac48eccee7f6bd3f3b48","first_seen":"2026-02-05T13:04:42.692017Z","last_seen":"2026-02-05T13:04:42.692017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_top1.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_top1.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HTtKjCAfMqkBHS9WLxvdn8gp4mosqWmVyqNwcTVJgsaMsMt5enuBTlBB%2FAMV2Z8KbcbmX0k8vOCczI9Nq%2B07w1Ip1nL%2Bkb2eXhW1QrEePnke9cxZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"2924322d135789453f0e56d82f82b2bd\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce8088f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"965bbd7ecc6de72eb0227328a2ca4932","sha1":"097bc4090142b997fcbc201fa670f0251ff0eba4","sha256":"64d7626b2a2f643a01c30117844d347424567d8690df49dd86fd90ff573a81f9","sha512":"ee96c507d6039e8cc5a2003756a9ea431ebd139a45267c85d92acf57d11d6049da6ed9e9ccc1f789ec1691e800fc8eeada2dc83ec1ea5ae8e1ba9b3fa53d6c04","ssdeep":"192:4pz67EdMQOj/0WzKNQdTfy0+3ZGpzn8CinLM:uRdM170Wsc7y0Lln8CMLM","tlshash":"c8e1aef1b2b40ea352c72dcb48b0cc1e31d4fd913fba5864a00edd66a2958cd9198396","first_seen":"2026-02-05T12:00:34.345639Z","last_seen":"2026-07-12T08:52:38.17104Z","times_seen":71,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward_min1.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward_min1.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T13:30:36.923321Z","times_seen":17991408,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/comitAvatar/member4.jpg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/comitAvatar/member4.jpg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTaE284g%2FlLJbLWFkiIkP%2BlZ95bqx%2F0YprPXyoncIdRRkPeW8KQX8oSwLKTa8LWknYM1G1u3yGYLe6LOslIy8fUYxSxS%2FvrQUwhW4BBEPQFRDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"d3082df2b0905c0333e61d855d22987a\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce8dac84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7085,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3","md5":"d58c7868c9c96314a7f81d0b545e0871","sha1":"52385c5f7979a34fbd4c9966554e682b122b0337","sha256":"11ea8bafab0fea59d4949293c8fd32342ecaece28734411421349dfcfb457679","sha512":"faf2c7cb9ab388f39b3c0e51ffad2d490b53940a655fc204527291e5cfca7e317f74adbf30200f84cfe17d46e3aa39c9b7aff0edf238e42fbb874f1e1993e47d","ssdeep":"192:IYj8JnH2p/hGxL965/hcx3RKNM79oXhEHwh6Qr9:lyH4/gL965MoDRt/5","tlshash":"91e1af7ff9d94034daf2d239c0e20c8642743da4a6e0357f19e1a05105f80f969e98f8","first_seen":"2025-11-21T04:16:31.859004Z","last_seen":"2026-08-07T23:08:40.330862Z","times_seen":143,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/toast_success.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/toast_success.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJQfJCA6Re5PKds4e%2BK8fzaJ92hpV4QEBgwMTF6iIjrK6ANfugpgsMxUBnLWn1VP%2BEIS3YugyglrL%2Fv2OJZocbRIgGrYLs%2B9gUoREs3F3Bntyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f6573c21f014e588c17d94fe860b4312\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5d9ac4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"45d90896f2bfaeed0387e8d27d2fe23d","sha1":"8612c5c9627a383cd7424b73ba20c764bbc8006c","sha256":"73d37f588b6106ce8c2e09b2dfff1cc57d52080e5bae38a2a7106a65ffddc58a","sha512":"8629373125222ed11578f0a7e5254caeebca843d9f9e0181f17ca45b524638d0f88b42b5710fb33072f5f6147f2c0b562583a4bfd3f9b2bf4ab7aa8ce80b6f55","ssdeep":"","tlshash":"fff059a0c3c4587cd80c8a5f16682e117009f19bd0e4f93cc61e9be42846dec3c4bc6a","first_seen":"2025-09-08T01:23:12.599536Z","last_seen":"2026-08-18T12:35:08.653296Z","times_seen":308,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/HomePage-CyP8P9W1.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/HomePage-CyP8P9W1.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLm8xbDsWBHE9aIuKEd8OObm%2FgSih%2F421YDHifjt7QVMrjf17QKrumkSxGFdN5cX6o5EPUppEoq72sNNB3qTDhImDHuksH8xc5ueog0XvXVyiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"587e0517f9eddccbe9eb41aef4a0d9f5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5e9af4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9052,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (9048)","md5":"aa7d4c847643bda69d581e8bce94d250","sha1":"3b12af88c338eb6434c7d38bed0b60ecec92c6d3","sha256":"c01df73576fcbab53c2c549e6250ef4febb1243f33349e32e6abb8eb491ba156","sha512":"9844027e3264e57cd3d910fb9182f9fc9d44c7e09d1a006fefc9e2942cd2ee9d1ab95bdc64ae5390b262f4543c9eb69152f70db34b9c982756559eb543f214e1","ssdeep":"192:aXLCoF4kagCA6AbWxGkgx1VteOCztH2GH5QrA0:aXLCoakagCzAb0Gk4VcOCz92GcA0","tlshash":"23127740e146dfbeed7a1cd0ae2d8044701f5fd8db1bc891e07e28210b78586776bb9a","first_seen":"2026-02-05T12:00:34.364415Z","last_seen":"2026-02-05T13:05:58.914512Z","times_seen":66,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/favicon.ico","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDyx3Ka4VPNmuv3DErzvnbkHRZZ4oz8nUtvz1zjdme8yDlTQOPHIJejBwwVA%2FeqU8y2hhcRb8%2BXRvNlZnacsjGdhloYO92Yo8a1OG3LCfAA2NEDA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c929ce67b8d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":7404,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3975)","md5":"eb9a04707dff7f37383454ccb752db8f","sha1":"fa4693a1aa94f01da158578379137ebdd2cdc680","sha256":"d6b333b76d383c89677b3d33beaf5033126846c107cd0720732c408b8ce2d5fd","sha512":"b6084101d713559ba771ea3c519902b348af986af5150cca8ab39989daf7e46486a2c49fe7aacefc94139f3cdd15a8b4a2984d2aab5c1655be7599a48d5bb9df","ssdeep":"192:oOKwY1F7M7xV1a4CnWbA3aS9RE/87bhZOLkRoeTLWAShTwt5LPuKZCxfS1pB1XiT:oOKw+F7M7xfKWEvj66tZXk36PuKZCxkO","tlshash":"fbe15421951fda14c9e29c5330ceba0678048471955a94e6daac48eccfe7e7bd3e3b48","first_seen":"2026-02-05T13:04:42.694751Z","last_seen":"2026-02-05T13:04:42.694751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/safe.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/safe.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qfGT3OWwehroMj2PBBP7IRigbr1mHAufIrIQmWPG53A9%2B42Em%2FUWSFyRFkCGWC4PtBWVVsfSpgfiAuS4c3uOvnqVQ9Ue7YIMeE2Vsoag2P5Zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cedb8ba69a67510d9573d7531d17ef37\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce8aa134e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":912,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7fb69b4c324149c958ac55d7fe5f1b7e","sha1":"dc9d5a3e59c83a6ab7496c863284f2e2a265a252","sha256":"1780cfd76ea7535784dcbb8f14da1ba37638b402f9f7425d0a7ad6caf934a875","sha512":"4d439cd32206d4fdc8911c8b3162a11dac8cede07e3bc235cc0d0d743d98e147e34f864d02a8744a36c55213c8ff9d7ec33a9d9a7955e4e5c6ebe9b44307cd33","ssdeep":"","tlshash":"1e1100d9c318796e86dd87cb83126120b32e31e2b7821970d14e5a752583c44cf83cd9","first_seen":"2025-11-21T04:16:31.953671Z","last_seen":"2026-08-07T23:08:40.265769Z","times_seen":120,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fawazahmed0/currency-api@latest/v1/currencies/usd.json","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/@fawazahmed0/currency-api@latest/v1/currencies/usd.json HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nOrigin: https://earnujmte-byhnbi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 3285\r\ncf-ray: 9c929cec4fcc0883-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2026.2.4\r\nx-jsd-version-type: version\r\netag: W/\"1d53-9VQ3W514r/VlqB5oycjWg3pOC4Y\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230025-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 8951\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oswhPqEvtVx01Nel%2BvujSH9yMJcZGU%2FeTQis6V%2Bx0kk3lFItc0%2Fmds6O9GY0SNrZ1YQXxdu4am2ZNI3oB4uT0J5hTZcHqYkmWPDcQ6QHUdoadOJ267vhdHpE6X1O4JIp6PI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7507,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b2f65401dccc5959c1d80834eb44352c","sha1":"f554375b9d78aff565a81e68c9c8d6837a4e0b86","sha256":"caa472e837e15d77b6c1013e4d3107d334b298b2edd234c2c7782b84773a1748","sha512":"3e973ee0b1ba32ee6959cc2a23667cf2fb6aa8b6e66e3cde8b5e8249e21a6ef4d527f200117395809233635c142b4e6b586eaf80c93ccf3ea1fe2542c2d2ea91","ssdeep":"192:j3rA+JQBF5UBKqRnmxbc+kZOzSnYd+GlvWeTRVCuP7DVP0sQR6NcjN1b5v1yR/:j7CFmXRnmxbc+kZOz0CZlJTrCmfVPLO0","tlshash":"79f1308b81f533e6b5d489be0a3db260085f3a7b1c91c366df607e1692681bb1589d23","first_seen":"2026-02-05T12:05:41.321163Z","last_seen":"2026-02-05T13:05:58.928223Z","times_seen":28,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":13,"receive":2,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.imgs-cdn.com/users/NO/NO_83840cda.webp","fqdn":"cloud.imgs-cdn.com","domain":"imgs-cdn.com","tld":"com"},"ip":{"addr":"172.67.192.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:20.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgs-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 11:07:33 GMT","end":"Thu, 12 Mar 2026 12:03:59 GMT"},"fingerprint":{"sha1":"D4:12:B4:45:C6:EF:76:36:E0:ED:73:95:33:6E:BE:2A:3A:A1:6C:C1","sha256":"F3:4F:18:1F:F4:70:07:9B:1C:0F:E5:99:DB:31:0C:B2:67:F9:C6:36:76:4C:5C:82:9D:CA:25:55:F7:82:E8:96"}}},"request":{"raw":"GET /users/NO/NO_83840cda.webp HTTP/1.1\r\nHost: cloud.imgs-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7304\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 23:26:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694c768c-1c88\"\r\naccept-ranges: bytes\r\nage: 3853\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FzwoZLdFvWjDLzjqjolXW6TwwKwSFKTB5PNQheDofxeNlRNbe%2BvHqU0ePteGoi6jc5F9lfbUmgLAQmJN7%2FDDy9fZQzZgLnjPb7DZmtEVRMxlug%3D%3D\"}]}\r\ncf-ray: 9c929ced59c71ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7304,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"412ea5177140421f8aec2249f25a6d7f","sha1":"e497ae09e7236c8d06c702cb2d3dc4cc7e729dcf","sha256":"94134545dbc502a18c1fc6ab103a3be99abf9b8461d49f64252e2c2ef8161dca","sha512":"01ae967c772344763ec4d22bd92220224a079310553465b8d2cff1963f175cea1523c5abd241bbb98b76407739044567114a648886b9ff4d760e11af72bfff47","ssdeep":"192:AyofiPRu4OnsWOW5NjnV7ZN8C4PE942vmFFLkEvVk23gVJS0gveRF9:hOnm77E97+LkxVoNYz","tlshash":"b2e19eb14d489ff05e8e5d2dc7c92ac429580ce2aaa4c70462d7ec4961fdcbaa03478d","first_seen":"2026-02-05T12:00:34.339069Z","last_seen":"2026-08-07T09:47:09.639427Z","times_seen":102,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":13,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/index-wPQWv5Rh.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/index-wPQWv5Rh.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6UOUIyWD%2FGkhB6t9ONnyOu4ideA00DInFk0nxnnlGJC2GqtQAmpmUsbIbBJKppF%2FlrCPkFlKe5tzy83dSGRlmidL4rqpAa09AGViUjb%2F2Xkzl9w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f131e4da24863779d65ba23756e2a67e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce34aa74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446502,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50353)","md5":"1876bb9b6efd84babf53f863f7818b40","sha1":"683f5ec0be214bb804d818960b6c3040fa069c8f","sha256":"b4350b007f0c0d66766732565329622f431b51caaf9b07ef9a2da72043582873","sha512":"e77c5e9717db9d367dc00ed62378d263367ab54bb8208b1929a0847e8885d5a54ef89919730a9fa3d50c3dfe6f33e6f42031a55612d3b2f640a0276656b735e1","ssdeep":"6144:V83Sd9QEkyh7e5gSB9TTGUDA/OEz5Do1arfrJABe0/N:Vt3h7e5gYTqUDA/OEa1aBieYN","tlshash":"d6946ddc718a74aa577705f5107f1106b3392d12780d8c50b669edea26f2c0aa2b7fbc","first_seen":"2026-02-05T12:00:34.346428Z","last_seen":"2026-02-05T13:05:58.945212Z","times_seen":66,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"comeontasktogether.top/api/v1/user/detail?d=earnujmte-byhnbi.xyz","fqdn":"comeontasktogether.top","domain":"comeontasktogether.top","tld":"top"},"ip":{"addr":"104.21.85.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"comeontasktogether.top","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 11 Dec 2025 15:10:21 GMT","end":"Wed, 11 Mar 2026 15:17:28 GMT"},"fingerprint":{"sha1":"0C:54:33:D1:D3:5F:26:9D:2B:0E:52:C9:DB:1E:48:B3:3D:41:57:D1","sha256":"5F:EC:06:F9:36:5D:A2:F6:F9:21:E8:30:BF:74:5A:9B:80:A4:17:57:21:53:05:D6:37:17:C1:3E:4B:FC:26:5D"}}},"request":{"raw":"OPTIONS /api/v1/user/detail?d=earnujmte-byhnbi.xyz HTTP/1.1\r\nHost: comeontasktogether.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: code,lang\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nOrigin: https://earnujmte-byhnbi.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://earnujmte-byhnbi.xyz\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: code,lang\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWpTjmIgge3hyHiQz3DITcJxZTSwJoH0O2yc4ONhop648l9kTFxBSzhkGKqN0mBy5%2FbKl%2FZ1%2BGfUjZ5cJyBdAaH4WFqwQ%2FXBcR1W2uDKyZ0MtZKQ\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c929ce87818569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T13:30:36.923321Z","times_seen":17991408,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":35,"dns":1,"connect":1,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_top1.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_top1.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HTtKjCAfMqkBHS9WLxvdn8gp4mosqWmVyqNwcTVJgsaMsMt5enuBTlBB%2FAMV2Z8KbcbmX0k8vOCczI9Nq%2B07w1Ip1nL%2Bkb2eXhW1QrEePnke9cxZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"2924322d135789453f0e56d82f82b2bd\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce76eb54e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"965bbd7ecc6de72eb0227328a2ca4932","sha1":"097bc4090142b997fcbc201fa670f0251ff0eba4","sha256":"64d7626b2a2f643a01c30117844d347424567d8690df49dd86fd90ff573a81f9","sha512":"ee96c507d6039e8cc5a2003756a9ea431ebd139a45267c85d92acf57d11d6049da6ed9e9ccc1f789ec1691e800fc8eeada2dc83ec1ea5ae8e1ba9b3fa53d6c04","ssdeep":"192:4pz67EdMQOj/0WzKNQdTfy0+3ZGpzn8CinLM:uRdM170Wsc7y0Lln8CMLM","tlshash":"c8e1aef1b2b40ea352c72dcb48b0cc1e31d4fd913fba5864a00edd66a2958cd9198396","first_seen":"2026-02-05T12:00:34.345639Z","last_seen":"2026-07-12T08:52:38.17104Z","times_seen":71,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/logo1.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/logo1.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2BsS9Q%2FA757krY3ZvPf%2BAopY%2BmHYJA8ZUhZllpGHelGqlculrEBgGYPc79Et3PtPmzbs0Pt4MpkcT1oljtrHLff03q5u%2BlvTqQG5oX5xogh5jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"ab279f8ec1c7f5df248f7e8e61424072\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce5a8fd4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit colormap, non-interlaced","md5":"bfbc234b139cd62874d94f89b03e2c6f","sha1":"455bd56bdc5adfa5572767af6b40465b20bed0f9","sha256":"7d4242c55a2e7c23a9fade3af7f5409a8866f84aa41a3c8b519724676c625c9c","sha512":"0326c2bda3394c40f40bd7a397e60941201ead76897b00c30089b5062c3f613bddd6f3d0f0ef88c0b4bfb0027aadaf41fecf18590793571e42424270a3bad134","ssdeep":"768:3jnLln/S9fGzp99V6N7id6BZBM8mKkUNuUicl7JYes0ggglKP:3jtS8zz/666TBMXUN5rtHP","tlshash":"ed03f2b3120d17a1e4335674693c6adb19a16c62c9bcebcf0d1471cc4f39e4ab7a115b","first_seen":"2026-02-05T12:00:34.337629Z","last_seen":"2026-07-12T08:52:38.141465Z","times_seen":72,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_top2.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_top2.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1koAZblvmpXoIMLK7a%2FPzOpvwZa4d1psPQrNhCPjBWv%2BEDL5WI9cNZLX%2BTIrvmbTTMA2Bsj5C7akKeo4rr1IEZL8aR2v4qGMD1O7N8icT8qfvjPH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"6bcc3ca2dd61a8ae76d4f381e7405c25\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce818984e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b93f2762979f3d791f349b3eb1cc5a81","sha1":"c43695d62313522b455427e6321ff666ff440b2f","sha256":"c84060d663fb453c999842115c68399ce4fff85865f42683ff065654de641959","sha512":"553043c0375cdc2b34cb21a5b636be0ed9b128cff0f518c9d2033da282f3dd67b0c0609eb66b49368e757df337eed5049fc3e9c57233f7b3b95ef394db84f58f","ssdeep":"192:EDk2cdx5rh+wDF6aUDrg5ewYD1JCwSXDyN3pokHmaOGs:EDArh4GlAJHSXDq+kHhOR","tlshash":"6412bffad89d7f2b8271e068cbf239d368e481607f1ddd11ea99744435b0612cac470e","first_seen":"2026-02-05T12:00:34.359298Z","last_seen":"2026-07-12T08:52:38.184503Z","times_seen":71,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/comitAvatar/member6.jpg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/comitAvatar/member6.jpg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hywsmJCkYmLjiEhNcUIfBkHWXdjWtFixjaF%2FDjZpWwuPMSGH2patePXJ9VReGnsqQm9bV%2BXTaIGU5Efmw3jKKpLdj9WTJB471jYxtmiIhPaTtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"d765d235586c16bb4554a7395513067e\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce8dacc4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13872,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3","md5":"9f175305b26737606035bea3981b6689","sha1":"3de424eeff32edd4b122e1235c33f89d5783e854","sha256":"2052731f411945684189b6085b917ace8546443be206f6cab35e05bc577d4814","sha512":"8ae9a34508d4053f1fbae4361170615cddb5e146aab6a109e0ceea42a62d408cb45ef9a229575baf6ff5f48b1fc9e89c3a37c02fac0489720352095929a34438","ssdeep":"384:uQB6js0m2It6Y90rZlJZkhBEXHdGVyopKj+:Z8qt6Y90rZDZkhBzVVI+","tlshash":"ef52bfc4fb4e2a63daabe770c2d1931967ec7b9429da792c00c2a03453a16f11b251fc","first_seen":"2025-11-21T04:16:31.911451Z","last_seen":"2026-08-07T23:08:40.26985Z","times_seen":129,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Top/close.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Top/close.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmjc3iQsJvAjgIaC81cyftza5ev126GPDneceVVCrEt9ig4L5amJQGDe%2BV1IIhbTL%2FPYA0smI18iU4v%2FG30sXAxIG%2FQjHpBSoqLAxUu5etdUMek2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3985323e7f6dd38d492674f1b81f83bb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5c95c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd9464ba67a45d82a67edc1f6aa4e97c","sha1":"31c9d1e155b8e7adffda42b8e0f43647177512d9","sha256":"39b86a5b9f667caaf9facc62a3ec8f7db274b386711c68d2fd42d7fda6df693c","sha512":"d1b3d70f55b482a916eb9134f6e120a9c514f0cd3a7a8d2106490c5178b5a8a71d8a9d29718fcd9315bea878a82497e91fd52f41190547b1b71431856a78bcab","ssdeep":"","tlshash":"e5e0d85493755f5543cdc3956e7b3663202ca5cadd4b81b8d08318095dc4df12d54b95","first_seen":"2026-02-05T12:00:34.363545Z","last_seen":"2026-07-12T08:52:38.155515Z","times_seen":72,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Nav/payment.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Nav/payment.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0OOkgiHqyEr2anQx9y42PkuyXb8c8QzJCmxJV0jQ3ozZX7UrmQe98PhSdzZ5UJWL2owWA8pP41eZgcV%2BLzlhrhK%2FFnAWGGDXAbvGqo804v%2FE55L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d43746e759a3bf12c4f9a8cfdfbd1b38\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5d9894e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"763b19ba740f8f45ad95db4910043f75","sha1":"e2bbbf90e71f5bf8702706b95dbed6fc98303d8f","sha256":"27b9105d28a9ecb810c45bfcf2042dd4f5a85f64b2aecfc60faa62809a62a023","sha512":"d45a28a51411385d0275dea969e8a1244c83b4a37cab054e23c21951ccce0e951b01d6ade476dbbf0d516c953bfbbd8390af97d6267c5de862e3a5cc2e5db448","ssdeep":"","tlshash":"dff046e08d634358810856c8661c5e7c316b7062aecc0f68e0db5e95015a8feda1ba9d","first_seen":"2026-02-05T12:00:34.354763Z","last_seen":"2026-07-20T22:43:13.323769Z","times_seen":87,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward2.png","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward2.png HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncf-cache-status: HIT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Qsj%2FprqqZoDhEWKI2OGcLuaV4RZj95nXKSD8zxiYMQ1F14AQ0zNQNjmGt8%2FUQrbzNmExPGIjS0nKMw%2FW1ldRxYJQx9c0lvNAgE9u3cE2PnQr8P0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 3542\r\npriority: u=4,i=?0\r\netag: W/\"a98b7f6d1e3bfc8144ab06a5942dd70d\"\r\ncontent-encoding: br\r\ncf-ray: 9c929ce8189b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 354 x 291, 8-bit/color RGBA, non-interlaced","md5":"ceb2c1c391d41d1718a91c5684c3b50f","sha1":"48fb8ece20f1077e6c31d8891de243b9ff8d8568","sha256":"31da284ebad5da93f59a5b685ee85d01ce986e97449b684a57bdcbb67785f70a","sha512":"16c546b3f33c2407b6a7fa04758691ad63afc7b328d1f4a32c58cd1918c588acc87253dbc02b3e9d48bda64bcb3ccc5ef0de9f49c010c27f94a623c52cdb6a87","ssdeep":"1536:7CCc3MhmqJYnyToL68dBnFIJvVwZep09BgdqAKvl:7CCcueBPdsvVwMpMgdS","tlshash":"4f530208f44cbffa487704667b951b863be0dae421eb075c8864ad479b1850bf29df72","first_seen":"2026-02-05T12:00:34.326344Z","last_seen":"2026-07-12T08:52:38.185142Z","times_seen":71,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward_min3.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward_min3.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T13:30:36.923321Z","times_seen":17991408,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/BottomBar-C5hHESOR.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/BottomBar-C5hHESOR.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/assets/HomePage-CyP8P9W1.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2jbqtVoRPEuHYmr3k5V4qdVBg3eYoehySbbIoR15u23cVPqtrKNPMeS17BxpRC4F0MB%2FL0vA6gj7Bm8O3Gl%2FlMdEcyJUcHd%2BY9Mhv7Z0XoCHnav\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5c5585ccda3cd4e7de02818825ec6f3b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce6ccd94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1388)","md5":"78213a1dd15651182373dad778f48aba","sha1":"12950d499ade43e0d07e150ed2918798951ff44e","sha256":"eca4b4d41e1b342527247420363f689a8eb72c805ba140994bf8e0fdeada44aa","sha512":"90ce4fbc3dad095e183d4fb28a875b2a5f2f2f3f32d6cfdebf1dfe6fec82f761acf13a9adb4d9a897938d3bf03b2c641d9a6a7ebf5daaf4ff59b21eee3d3289a","ssdeep":"","tlshash":"53214c84a1c99beeed6508c45a5dd348700b1ffcd52ec89660bc1c001a689a7bb5f3a6","first_seen":"2026-02-05T12:00:34.330246Z","last_seen":"2026-02-05T13:05:58.933688Z","times_seen":66,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/GeneralSans-Medium-Dnk_K_Tg.otf","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/GeneralSans-Medium-Dnk_K_Tg.otf HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/assets/index-DZQ0cydN.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: font/otf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALiZED1hUNC9tv8pCP1yVkptIBVAxaRJgsTuKQKofwnxwE4gbgwBky2jNE1G5msgw1yMymZEP0QNhEbhcn6DXvqliJZHr8ktqhEEZCZ8lXwX9Rc0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ca84a67f19ee41b8509951100b750612\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce7af7e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46424,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"543e455dde358b0724b7b27e5e9abcce","sha1":"90d6eedb55a4df589dcdb4038aa2feecb8c4ef3a","sha256":"a4c6067d3415ab1ec2e17e6bd0406c0d3f7a28c707c5ddd85ca6458cabd3dbf0","sha512":"8dfe1743cc88b58acbeaf985fd3bdca54f1d562303b450ad2b22b571def1ad3c706294c2d4f102f6dc4423fae0039a5dddcef48f8e6efa81c8213a806831698f","ssdeep":"768:+sw9X3xA79vZp3MeJ8u9Vlw/4p430jWoBM9K3wyynGcvkEt7PpqK3Y7TlJ9Nziv6:Aq79vZp3MeJJDwQp4EjlBM9KgllkEtjs","tlshash":"77234b96b7061705d113bb388cb7e338d330b92c87ff564ba4ba59a92d9c1c74c62687","first_seen":"2023-05-26T17:06:12Z","last_seen":"2026-08-19T23:43:51.339459Z","times_seen":369,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Home/home_reward_min2.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Home/home_reward_min2.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DIT52BGm%2Fj1FUlLSEwx8WJswvZqKFsnUj8E7jHaiFrlg4FtM8ftKkIw3ZSwnBGHYEdIUVMkVFKnJvD3bteKEBaU8lgMKajNInyVlzhywC%2FkPEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"002e88691594e410402448db817f8371\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce8ca8d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":792,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bdf5548f8829e52628790af8ef3d483a","sha1":"e3e8a93a4133e00adfb1e061721e18378d58badf","sha256":"58e820efa269126c8f89c7a19833df93fe2eb53f8112f032503e3f01f70e6ad9","sha512":"84c3c7d20ee24d8af81123631f012c1d2c19195246b26d38ff0ca8ea1c03ae975d9da6ca6b88259b177a0fb97edc8567e17434366e3030acc5d2b198389c46b9","ssdeep":"","tlshash":"3801f15ce12c02bd4e0e87e4eb6532f90e8d91ee3590963cbaa009b031226a9f49d5c9","first_seen":"2026-02-05T12:00:34.353051Z","last_seen":"2026-07-12T08:52:38.160478Z","times_seen":71,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/no-DPATb4DZ.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:19.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/no-DPATb4DZ.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/assets/index-wPQWv5Rh.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:19 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPsXCiW992zxAEQD1wLEIhbCGyxJPKbqQhwACSBbm6OvGRudIRjmsmGKiRFlUOvPJCPinrjehbwdT4tPw7sM46Qqwiw%2FJdNv0tZz9StlSqFRBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b036991982dbc67aa66b7108114ef8c9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929cec3c5e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27794,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (27338)","md5":"9ca1ac319196bac9a1ca6e08261188f0","sha1":"d84ff1416bf8089992f1daae12521bebc53af672","sha256":"19ebfa6dc36dc58633a8d41c72df4e0e4156091662d5749ee8712a11ed4f9613","sha512":"148045316914ad5151f20f1fefc0a57b8f0c37d7c776b01811eaac9e3294a2272bfc37ff91e51fa30acb202e00cff4183d54531ef18f6ae2e86b745efbf204f1","ssdeep":"384:ImtrMPPFsRkfQHE1YB2JqXJjlAcp1TBdv7YuBdHyFERTIFmbHfVvZ7ELmSSozauR:ImUF7smYB2Jq1P1TBquBAMUFedpEyGR","tlshash":"80c2f9f6c901a53ab55952d1bd06e207f2fc852ec624ca6a498f845f1dc3df9633e388","first_seen":"2026-02-05T12:00:34.341313Z","last_seen":"2026-02-05T13:05:58.931315Z","times_seen":66,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/assets/polyfills-C1Ps5tL3.js","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /assets/polyfills-C1Ps5tL3.js HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BDiG6M4357vVy2nbNDhk5K%2FE9qEczHqEQyuJqRJTy76OukkooPMoF%2B2BEhxcamRmwxilyERkuFcvWRG%2F8zSv6KzyPGzYcAwWDDWVBQt5mdiQsyM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a6562c40d5582ff7df9478f0c2d544db\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce35ad34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107468,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59764), with NEL line terminators","md5":"ca0f166657c7cd0f21c2083fd59b5f95","sha1":"8db0f199bb8a13b1b1caf089a8874c5b5abcbbbb","sha256":"c206806303f8a183d2e352afe13b284e6cc0397e45ffb362c01478b8a6092ba3","sha512":"2a859b336d969aa48d806161622e1e4689b0a7bbfe0cd62954449de7da6b441590d08d332640a81ba35a614b1f557cc0bba017d90374128cbad7aa65c41b4314","ssdeep":"1536:nTOxARdAWwqivS6URDxmuo/FzO72PVlSydDQxGgWYQrGl:nTtRdtwqv6+xmu8FzO72PVlSyeVl","tlshash":"e2b3d589f6d6f0a243e770a4403f100bf23b6d55b80e8190e766d1e17cb9a4ad17bf69","first_seen":"2026-02-05T12:00:34.284637Z","last_seen":"2026-07-20T22:43:13.314982Z","times_seen":84,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earnujmte-byhnbi.xyz/imgs/Nav/task.svg","fqdn":"earnujmte-byhnbi.xyz","domain":"earnujmte-byhnbi.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earnujmte-byhnbi.xyz/","date":"2026-02-05T13:04:18.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earnujmte-byhnbi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:54:06 GMT","end":"Sun, 26 Apr 2026 03:53:57 GMT"},"fingerprint":{"sha1":"63:58:10:6B:67:4F:5C:09:1C:D6:94:AF:7D:D2:80:22:D2:57:B4:AD","sha256":"51:CB:EB:09:83:96:B4:01:69:81:A9:D1:D7:F1:55:84:5D:89:2D:9D:84:F1:0F:9E:74:F8:04:CC:4A:11:5F:35"}}},"request":{"raw":"GET /imgs/Nav/task.svg HTTP/1.1\r\nHost: earnujmte-byhnbi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earnujmte-byhnbi.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 13:04:18 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3JU8dsjwp%2BFU1bPf4Os17QlcAlAkVw5kVgJ1bU2%2B9uyxltBHIRq%2FDF2zFxnRxHP1bscv%2BFoVeY2n70FFMiuaDm4RE%2BP317AdmvN1B582xVUOFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d3fdbcca1459f2414195741e96cc0345\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 3542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c929ce5d9724e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1253,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17200946e7300b99bfb23f67693fa0f6","sha1":"427a7ca2b213065cfe5874854e6495c253ead970","sha256":"48bed135a7c36ba751c7e83fcf2a4ae8f62ce52fb790cd87c0a174f9d77e259a","sha512":"1369940e141bcce5790a4b6fb25377814e16d89c6a7c1dc6073353e4818354c92c46a64844e11e63994982525944e9a0e5119529ed38f09fb048823b0a83c553","ssdeep":"","tlshash":"ee21f554c5500615ec0623caf929fc54a56cb0dfb8e9cef882697fa10072cd7aa8d08f","first_seen":"2026-02-05T12:00:34.334363Z","last_seen":"2026-07-20T22:43:13.297121Z","times_seen":87,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"earnujmte-byhnbi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}