{"report_id":"6e57103c-8bd4-4a82-9760-08e22da2a1dd","version":6,"status":"done","tags":[],"date":"2025-12-25T22:33:26Z","url":{"schema":"http","addr":"bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"172.67.151.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"title":"Video | Content Delivery Network","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"172.67.151.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-29T22:33:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"bysewihe.com","ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-07","domain_rank":0,"first_seen":"2025-12-20T23:06:56.692443Z","last_seen":"2025-12-20T23:06:56.692443Z","alert_count":17,"request_count":17,"received_data":1474840,"sent_data":8039,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1676bfea4b16968bde6fe1baac971b25","sha1":"e2305c1343db7d63028d9c21e9c9fabcea6d33ac","sha256":"c3adea52d43109205f53a0bf6f885a407985bf7a47bff1c97dc931f3f8b91a37","sha512":"8ed77633c4837e8d89460de0498023d17b2c738723cb9b09aa77ffbec004f4ecc30a4ab0d3429848887fccff7084d232345f5ee0b3e12467cd135ecec3149694","ssdeep":"","tlshash":"092157581ce60876907369ab0f9ea2443a36d0d30186cc727e9ccb249f905ee06b6bc8","size":1111,"data":"","first_seen":"2025-11-16T08:53:46.805721Z","last_seen":"2026-04-05T15:15:56.195764Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-05T14:48:22.847969Z","times_seen":29778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/polyfills-wjtqc2V4.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4b56155557a453ea36976b2606d1036","sha1":"b4e50c149eb7814fd09c80ff3aae1c56d0b06a69","sha256":"17d0242807c28e9035817535e844b9c01f1432131791e55e737f505d87506dcc","sha512":"4119b032629064240dbb5fc57e630809482d9ade76ba0e626e672874556024e63108d4992fd1285589134af213d9fe55a0bf027a214076b0673a6461b16aae4b","ssdeep":"1536:DLjYwaM4RAQToClLvkZ3lu1khHZXa3odk1dJnMB1tiwX8RJ/W:DfPaM4Rdo/Z3sOJa32kPJnitiwWe","tlshash":"efb3e5c9f6c2f4a247e764a4403f110bf23b6d55b80e8194e366d1d17cb9a8ac03bf69","size":116819,"data":"","first_seen":"2025-12-25T20:57:24.332571Z","last_seen":"2026-01-01T13:00:48.548931Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/LegacyLayout-BM5zIppZ.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d694f15db929d7129ab37bed291d9f27","sha1":"aaad5a6593613becc21bb1f5486fe5a0843bb605","sha256":"a38fc82f85416b55d8b4653de95db5f61791d5edc0a31aad71bb597ccc6bdaf4","sha512":"a95647f628e5fd7cd5971644a82bb8b4d44a4d4f1e907ee8eba9f1abad718c398f3effa3152fba509cbda7222e04043ce316d0b822e0b7d7c8aa92e44cdb24f7","ssdeep":"768:a6WEiMMS+iPBOLmguM0NOeFEtyUFvLiO8lX1/iE7T2tWPP0cb4Q0KHqOr7xE0CrI:8D+v2tNQJD81Kw4mlD0","tlshash":"ddf2b604e218ae7efd6708c4f6af6114b15e0a55fa0a4ce0e5bf58290671d89f71bbcc","size":35927,"data":"","first_seen":"2025-12-25T20:57:24.327591Z","last_seen":"2025-12-26T01:58:24.443163Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f98cf8486a8beb4d2d271b8e9304216","sha1":"112dd81cdd24e37a4554c9a5c5327b30a476acf8","sha256":"77b18c051d8450512853f4643dd7ac0e4c3205b7ec4cd1373ca5ad0dd2f470c3","sha512":"110b22e3e2f501f3dcc8f1dea02efaaa338ae6379f15907e15301de227279570bd997c4dbdb46e3c8814dd61779303c6fd26b9c0dfe53f3a733c1379da5e85aa","ssdeep":"","tlshash":"ca90003208200280ae2c0a20200aa0888820ae3b232208a28bb20a0a08088a0028cbe2","size":43,"data":"","first_seen":"2023-03-08T08:46:55Z","last_seen":"2026-04-05T15:15:56.215205Z","times_seen":1572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d882b49167571a8dc4de310e0b2e623d","sha1":"426f496e1155dfab34840a7a467866838448c8d0","sha256":"6dc67eafa621e57610ed67c02b1c0c5532e495dfe555dcade99fb81b6744899b","sha512":"aef46b85426812f38eb29a030e1f82d73c053df2d2d9077eb0563f9906353228fd5ffec1d5afc12a76b564031171bf2ec78c994b883ebed865ebe5aad64fc674","ssdeep":"","tlshash":"e3c02b64e22c32c038bfe310486beb2c7503a5337f4b4e54196954aa2c2cd3b705b9f9","size":154,"data":"","first_seen":"2023-03-08T08:46:55Z","last_seen":"2026-04-05T15:15:56.199119Z","times_seen":1560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/js/jquery.min.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-05T14:43:50.675854Z","times_seen":445348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/player/jw8_26/bafsd.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2432aca90e92e0370d2ded2545eb1fa","sha1":"8f1ae40f7dc9c4ccfcb91d04530a1f072e9d06eb","sha256":"89c40275bddb7257d519bda010de1c4df70a30b5f84be325f2ae53168f276cb5","sha512":"7278ab65bac73bbba9750c49161c677ad6d98d8d16f5f692a3b19e99423c2b32a9785a1bd4045321f4ffd0cf3c6270e5fe4b4ab1cc7bbe4f7cdfc3c40bb3f373","ssdeep":"192:Tb2KC3RtGFnoYcAb/XkLM17rbN5rYrWcYYgC/55wJjJUjfQFU75+xCj+8NcC+5wK:WLsrqh56lUb4kochTK","tlshash":"a852428b738da2be86fa33e4c43f2494e97ed272c115c4fab5b58a801d90815c397d79","size":13706,"data":"","first_seen":"2024-10-04T15:55:15Z","last_seen":"2026-04-05T15:15:56.102565Z","times_seen":1314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-05T14:43:30.149912Z","times_seen":33636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/index-BTunNfMd.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7e3044257c1220d4ebe25a34936ccc0","sha1":"8ac4a8062c337a5babf0240b789ffe07b100a839","sha256":"e6047b3fb3a635464fa8103aada745311f436cc9e5bf9620fdbe24321e2ca764","sha512":"1c907ab33f3870a4a9d5d95d850ebde9a6fbadd31975ae9e024dbe0ad0aa8aaa1b01837a07a4694601ad8b803a40e66ce9cb4255ab7ff07f9f999efea9d4cf1c","ssdeep":"3072:/lLLO6+QLgDynpgqYVESNp+B08OVn/YmPISf:xPz1Y/P8on/bPff","tlshash":"7a143ce831aab656abf306b5006f1503b33d1c172c4c8460e125ed9e76b590a91bbffd","size":205363,"data":"","first_seen":"2025-12-25T20:57:24.326205Z","last_seen":"2025-12-26T01:58:24.453626Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/index-Cy72BrVb.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"45651e33aa512261b6e6d60eff6a9076","sha1":"f5eb5a6b524668a3ba4afc4e3886730d04c2180d","sha256":"a42f3b2d39dafb0381153fd457b146ced9e28c74340827b1b59a01b8ccd3dfc3","sha512":"c1d854bc941fc766a4a29ae64da3743542462b1b1055920a2c901506efe60f721c7d191e4e5d4a5cb0e8624bebd49a97e596e729264bd6503899a34daac580a2","ssdeep":"192:hYEjQ7VQhyeyVK/2Nsq67qL3gl1I5/5uiadfkFEjfHodGlSkGJPXtC4/uQYO6qPq:hYEjQp8xyPNsz7eQa1a+UfHqGlmPXtju","tlshash":"df32fb50eaba743103b12495507d5253a227881d7cbd84d0f3aa4f2f2bc98466a3efbc","size":11653,"data":"","first_seen":"2025-12-25T20:57:24.331201Z","last_seen":"2025-12-26T01:58:24.444745Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/videoPagesBundle-B1DwWgsC.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"223fadf57ddaaafa217fd4ac28775f87","sha1":"384aaa8890b23fbfa8f0f74836bbd55c0c73c222","sha256":"f7c9e029fc2f88488e1673ac8730b8f1e9c2421c3dcbec2c3a6f3c4c92f1d479","sha512":"68a426508569d3c8b29136e0dbefecd3ebbae9ea5fca514076e428cf189f429c3f166dac41424fbcd163ac256a112b2ffb5475d8eedfe8337ecf3c224c4d11e5","ssdeep":"3072:PQ/VbguZPE7yybx7pB3MG7EB3MXqoiqf6G/gnZ7JgSPjWQu4rcwYl:PQ/xg6wFPMG6MXVf6agnbgwWl4y","tlshash":"24448e59a236a439a3f5055018af1002f5ec0ad0b52e5191f5aecc3e3fdbf52c1b7ea9","size":275678,"data":"","first_seen":"2025-12-25T20:57:24.328351Z","last_seen":"2025-12-26T01:58:24.447472Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f2dfc871117e44264ee487d8e08e03","sha1":"84df50deb1da07577c6308d6229b6838977355ca","sha256":"1d38267e6325306a1b5993faaf6250de6fdcffe27bd9a654895482f7662cab0d","sha512":"1507e457223f7d9e4236fc7b490a455e470aea75c55eb5ecd08e819e01c0e7722e0282e865d96d806c6ba65a6f62d53d32453633689c4f4afb8f8c506befb41a","ssdeep":"","tlshash":"e83155b63128347882f5166f7cbb664df07756512d1e9080905ce4643828f79f6334ce","size":1529,"data":"","first_seen":"2025-01-25T03:50:38.139741Z","last_seen":"2026-04-05T15:15:56.202947Z","times_seen":1087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"bysewihe.com/js/jquery.min.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 30894\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 16 Dec 2025 22:22:10 GMT\r\netag: \"6941db92-78ae\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 19 Jan 2026 06:43:25 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 488979\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWXyQWD0ki3E655HsO1CxC4plSpbmcMotpY2QDU9ShUx%2FX9icbDyrRIO9%2F8V7TLUyPT2GDJVGVCf7vNbNe4woCzQUoRheT3V%2BKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4cbb42568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-05T14:43:50.675854Z","times_seen":445348,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/index-D2agJO7t.css","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/index-D2agJO7t.css HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 65481\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 25 Dec 2025 00:56:10 GMT\r\netag: \"694c8baa-ffc9\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 01:37:21 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 75342\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bt%2BzU9f8R7FII2TJkNph%2FHM1lTt4YkJSnNMSsx0QHEAgAiNc2Zuu1xFt1e7Dj8xg1upB90DpplFiyCoQEkXSLpogoF5ojrwJi9Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4a8b23568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346771,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"441724d68bfeae1c38c896c3c18d5dbe","sha1":"1a6df48cb7a59537e6f9cbf91d84242345243314","sha256":"4cc3699bccd474031711167fb9427ef63c6c2da96dcb1f09ad2cd344b6966227","sha512":"67598f4128ae8ef7a3acc7167f6672b66a508c31e8c0c2f1a21e6fabe5f7d208ec4d364f0ab68a33b13a8b712f382950eba429a062882b7af88871ae8a37f454","ssdeep":"3072:gIwTTme/S3SYigENM6HN26QTnLNqyVlz1yaV65y6:gIgn/S3SYigENM6HN26QTnLRlz1ya6y6","tlshash":"0574e976f651352ef063c65a54d0fb9ea42a8102d6130bedf92777644f8a2cb0a73e4c","first_seen":"2025-12-25T08:11:58.774916Z","last_seen":"2025-12-26T09:59:53.676345Z","times_seen":8,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/videoPagesBundle-B1DwWgsC.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/videoPagesBundle-B1DwWgsC.js HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysewihe.com/assets/index-BTunNfMd.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 102319\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 25 Dec 2025 18:37:42 GMT\r\netag: \"694d8476-18faf\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 18:49:32 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 13412\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DvUn2WUljrLfVDlTjTK9NJCLDk30ZhnWED%2FnzU6jxc5dn9bki91pjNA3Kftj6ClXuF0xRPoJXysP9wJ7ZNfJ6MXLxVbFT4dXzEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4c2b39568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":275678,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"223fadf57ddaaafa217fd4ac28775f87","sha1":"384aaa8890b23fbfa8f0f74836bbd55c0c73c222","sha256":"f7c9e029fc2f88488e1673ac8730b8f1e9c2421c3dcbec2c3a6f3c4c92f1d479","sha512":"68a426508569d3c8b29136e0dbefecd3ebbae9ea5fca514076e428cf189f429c3f166dac41424fbcd163ac256a112b2ffb5475d8eedfe8337ecf3c224c4d11e5","ssdeep":"3072:PQ/VbguZPE7yybx7pB3MG7EB3MXqoiqf6G/gnZ7JgSPjWQu4rcwYl:PQ/xg6wFPMG6MXVf6agnbgwWl4y","tlshash":"24448e59a236a439a3f5055018af1002f5ec0ad0b52e5191f5aecc3e3fdbf52c1b7ea9","first_seen":"2025-12-25T20:57:24.328351Z","last_seen":"2025-12-26T01:58:24.447472Z","times_seen":6,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/images/logo.svg","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/images/logo.svg HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 16 Dec 2025 22:21:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 16 Jan 2026 12:39:19 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\nage: 726825\r\ncf-cache-status: HIT\r\netag: W/\"6941db75-b38\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hv9rVQuGiqEzIIzrAke2PU%2BEZiLj%2BBLFWB6HGi2LUd%2Fd4qbEYL2PuDMYmtIgwpLF19nIsk%2B78i%2FYTtPPalqYPuNW28EtEQvqUaQ%3D\"}]}\r\ncf-ray: 9b3bcc4c9b3f568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2872,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67b665cca56bf48426d17cf37961c61f","sha1":"f72322db0a7dec18d48c5067d5e14ac362f2d845","sha256":"2008a6c40369f9f5da5277cb3ef062f3cae401fa0b225a4d637c1ad3146c861f","sha512":"c1ed84a00988ba7148dd0d733bb7535cc6e785e7ff2573c4c1177f68e15b739168f2b9379b11c26d73913da23a3c513698f3a2cd0f1ed48cfb7f42aedb2b3dfd","ssdeep":"","tlshash":"345120b0a1e5e42ef11c017ddb9058243b18a0d7e3009519f51e273a9f298c7af9f7e8","first_seen":"2025-12-07T20:07:36.453472Z","last_seen":"2026-01-18T08:59:42.607443Z","times_seen":91,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-25T22:33:04.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /e/8l7p4ft40ub1/maze_-mfc-202302030138 HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 25 Dec 2025 18:37:42 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QgMbWVdxnEO9faqhnTVQ1m60Q7d2YAEOWPpsedmFq3HOmE5hnQEWGLYP92RCmpK3J%2B39XkSO1vUk2dWkGBq%2BGHdghRhWg4X%2BsBk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3bcc487ffcb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2953,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (435)","md5":"399210076f6f8a1037591ce1c55e167e","sha1":"460c56509eb85fe08a3724034ee46aad1b7f0b69","sha256":"84738479ca015bbe41f66b3ebed0d22b77dfcb4b1e818756ea8e81232db6d4af","sha512":"90199f5257a9c6ea1c5e81e2ed66d04cc7398e3d1886327b1d68359be416b94736b172b175af29d03a8ded09e84ab5efcd7e795723ab4f4cc27d05eccb0d67db","ssdeep":"","tlshash":"de516246acf4c9b70176296f2e29f5083da191c34109dc513aedc4b88f50eda0e6bdd8","first_seen":"2025-12-25T20:57:24.346229Z","last_seen":"2025-12-26T01:58:24.4732Z","times_seen":6,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":43,"dns":8,"connect":1,"send":0,"wait":103,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/videoPagesBundle-CVR9WjYW.css","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/videoPagesBundle-CVR9WjYW.css HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 4029\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 16 Dec 2025 22:22:10 GMT\r\netag: \"6941db92-fbd\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 16 Jan 2026 12:48:53 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 726250\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=thsYR2HAt6FRBFjJyoVkxCap3K3A%2BlCzKnwKa1AD4uVKBKwQvMYHkKDJdu8K4Jgow6NHzm5RCHF3pdFr8Ef084uvp9wMAwSPXgc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4bbb31568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18966,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18965)","md5":"79e53f4dcc9656ac16dd05aa6087e79c","sha1":"3e7e99d5d9fbb597e58e330ff43bdaf528c5283e","sha256":"1fb218d07c797ed9af02cf070fbaaafe1cef61a05aeb835e3b85cdbc9516dc68","sha512":"05a4b89eebf9aeaa018dff2a909077ddb4feac8ebc1cf2e0b7780568c64158ae630a859e89c3e7ac359a4b58c75cc367a4003d19329ef02de53c5bc670794fe8","ssdeep":"192:AebfIKjwoShGQ89hzf/Xx3tJ3foTuLkbL86YplGBfIs90NZtt2fwaJotQSHqB2:Ae7NFfzHFtDQ6zH/3","tlshash":"f6822421d625de1db52bc09a7cd0468ef8654205f22343f9c9a3a3664f8a1cf9b732cd","first_seen":"2025-12-07T05:24:19.704632Z","last_seen":"2026-01-13T06:55:59.834035Z","times_seen":131,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/api/videos/8l7p4ft40ub1/embed/details","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /api/videos/8l7p4ft40ub1/embed/details HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nX-Embed-Parent: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wObewFIkoF0QcZ542apMNj0cdKUeWO4QItzJuP3p3438zDXj%2F8q7OMiFJs%2FqQvKtzWSjzQAVfBmSajIXKyt1gCK1SAKFlmc5shQ%3D\"}]}\r\npriority: u=4,i=?0\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3bcc4cdb45568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"08a88cbd42ed40bec8fc4373253f993f","sha1":"7b809f54f988f4cdd8de67a7c82b2efce64974b2","sha256":"8426b5e4f7ab9767892ccc050a539b417d93677f62222e122984073e6f74aa7f","sha512":"72c91db3e2571da8269f44c729cbd1b54847e4ab85bd7fc42be265310abb2b1f8e540894fca82dd854b85f5050e4fdb943f85dca6f9367d403408ee7b1d8d760","ssdeep":"","tlshash":"9480000c02c2820e0802e2202e8c283002cc82a808e88e200003882800c82828c020c8","first_seen":"2025-12-07T20:07:36.454302Z","last_seen":"2026-02-07T12:02:30.243254Z","times_seen":13,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/player/jw8_26/bafsd.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /player/jw8_26/bafsd.js HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 04 Oct 2024 05:52:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 2095\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"66ff82ab-358a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2FfWm0fclQtBOfsiFx6GYLKUD5eAV6uzdu7oyG90%2BQsdvdNTLrS7r%2Bov28KYPJJiOmxQ%2F8sgD4fzd9G69kYAvx3fFvgUmX%2BqLjE%3D\"}]}\r\ncf-ray: 9b3bcc4d1b48568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13706,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c2432aca90e92e0370d2ded2545eb1fa","sha1":"8f1ae40f7dc9c4ccfcb91d04530a1f072e9d06eb","sha256":"89c40275bddb7257d519bda010de1c4df70a30b5f84be325f2ae53168f276cb5","sha512":"7278ab65bac73bbba9750c49161c677ad6d98d8d16f5f692a3b19e99423c2b32a9785a1bd4045321f4ffd0cf3c6270e5fe4b4ab1cc7bbe4f7cdfc3c40bb3f373","ssdeep":"192:Tb2KC3RtGFnoYcAb/XkLM17rbN5rYrWcYYgC/55wJjJUjfQFU75+xCj+8NcC+5wK:WLsrqh56lUb4kochTK","tlshash":"a852428b738da2be86fa33e4c43f2494e97ed272c115c4fab5b58a801d90815c397d79","first_seen":"2024-10-04T15:55:15Z","last_seen":"2026-04-05T15:15:56.102565Z","times_seen":1314,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/polyfills-wjtqc2V4.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/polyfills-wjtqc2V4.js HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 46905\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 25 Dec 2025 17:04:54 GMT\r\netag: \"694d6eb6-b739\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 17:04:55 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 19689\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfX1mGo%2Fbe%2F8tYckMwCggfXfRBvEBnzBA45kn%2BFsB9KiISGsQbsFAmCmzoF3HR21IIq8xIi4r4FXuKZ4GOTbWiK8a0H8x5xnQMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4a8b21568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51776), with NEL line terminators","md5":"a4b56155557a453ea36976b2606d1036","sha1":"b4e50c149eb7814fd09c80ff3aae1c56d0b06a69","sha256":"17d0242807c28e9035817535e844b9c01f1432131791e55e737f505d87506dcc","sha512":"4119b032629064240dbb5fc57e630809482d9ade76ba0e626e672874556024e63108d4992fd1285589134af213d9fe55a0bf027a214076b0673a6461b16aae4b","ssdeep":"1536:DLjYwaM4RAQToClLvkZ3lu1khHZXa3odk1dJnMB1tiwX8RJ/W:DfPaM4Rdo/Z3sOJa32kPJnitiwWe","tlshash":"efb3e5c9f6c2f4a247e764a4403f110bf23b6d55b80e8194e366d1d17cb9a8ac03bf69","first_seen":"2025-12-25T20:57:24.332571Z","last_seen":"2026-01-01T13:00:48.548931Z","times_seen":21,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/index-Cy72BrVb.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/index-Cy72BrVb.js HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysewihe.com/assets/videoPagesBundle-B1DwWgsC.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4110\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 25 Dec 2025 18:37:42 GMT\r\netag: \"694d8476-100e\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 18:49:32 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 13412\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYKtSXZcLXaAPDNCPPbsQ%2BUBuHXltr1gE3RTMEQgqtSNuZUaYrKA%2BMeHZ1RsX1ftyO9TunbZUf0Xtsu9dQcojwEI40zW0l4klqs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4c6b3d568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11653,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11652)","md5":"45651e33aa512261b6e6d60eff6a9076","sha1":"f5eb5a6b524668a3ba4afc4e3886730d04c2180d","sha256":"a42f3b2d39dafb0381153fd457b146ced9e28c74340827b1b59a01b8ccd3dfc3","sha512":"c1d854bc941fc766a4a29ae64da3743542462b1b1055920a2c901506efe60f721c7d191e4e5d4a5cb0e8624bebd49a97e596e729264bd6503899a34daac580a2","ssdeep":"192:hYEjQ7VQhyeyVK/2Nsq67qL3gl1I5/5uiadfkFEjfHodGlSkGJPXtC4/uQYO6qPq:hYEjQp8xyPNsz7eQa1a+UfHqGlmPXtju","tlshash":"df32fb50eaba743103b12495507d5253a227881d7cbd84d0f3aa4f2f2bc98466a3efbc","first_seen":"2025-12-25T20:57:24.331201Z","last_seen":"2025-12-26T01:58:24.444745Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/LegacyLayout-BM5zIppZ.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/LegacyLayout-BM5zIppZ.js HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysewihe.com/assets/videoPagesBundle-B1DwWgsC.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 10840\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 25 Dec 2025 18:37:42 GMT\r\netag: \"694d8476-2a58\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 18:49:32 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 13412\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8jHfAo1ddVh%2BegQTgvHt8ii7EBo4ND%2FLde%2FX8OK8BBaZYa531bAxdC7Ef7RckTFF6nVSKTQDZ2vi%2FGgfpm6TEl9vN4O7nWkE78%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4c6b3e568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35927,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (35913)","md5":"d694f15db929d7129ab37bed291d9f27","sha1":"aaad5a6593613becc21bb1f5486fe5a0843bb605","sha256":"a38fc82f85416b55d8b4653de95db5f61791d5edc0a31aad71bb597ccc6bdaf4","sha512":"a95647f628e5fd7cd5971644a82bb8b4d44a4d4f1e907ee8eba9f1abad718c398f3effa3152fba509cbda7222e04043ce316d0b822e0b7d7c8aa92e44cdb24f7","ssdeep":"768:a6WEiMMS+iPBOLmguM0NOeFEtyUFvLiO8lX1/iE7T2tWPP0cb4Q0KHqOr7xE0CrI:8D+v2tNQJD81Kw4mlD0","tlshash":"ddf2b604e218ae7efd6708c4f6af6114b15e0a55fa0a4ce0e5bf58290671d89f71bbcc","first_seen":"2025-12-25T20:57:24.327591Z","last_seen":"2025-12-26T01:58:24.443163Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/index-BTunNfMd.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/index-BTunNfMd.js HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 66595\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 25 Dec 2025 18:37:42 GMT\r\netag: \"694d8476-10423\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 18:49:32 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 13412\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LsFgYyLQab4URYX1TwzumzjoYHKG1qeTTZfT%2FF2dXyiguK%2BP5ywJLFLxIRNkz5za7Gz4v%2BNGgiavPFKqV%2FMsBP4JwvKpEbp2nC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4a8b22568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205363,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50421)","md5":"d7e3044257c1220d4ebe25a34936ccc0","sha1":"8ac4a8062c337a5babf0240b789ffe07b100a839","sha256":"e6047b3fb3a635464fa8103aada745311f436cc9e5bf9620fdbe24321e2ca764","sha512":"1c907ab33f3870a4a9d5d95d850ebde9a6fbadd31975ae9e024dbe0ad0aa8aaa1b01837a07a4694601ad8b803a40e66ce9cb4255ab7ff07f9f999efea9d4cf1c","ssdeep":"3072:/lLLO6+QLgDynpgqYVESNp+B08OVn/YmPISf:xPz1Y/P8on/bPff","tlshash":"7a143ce831aab656abf306b5006f1503b33d1c172c4c8460e125ed9e76b590a91bbffd","first_seen":"2025-12-25T20:57:24.326205Z","last_seen":"2025-12-26T01:58:24.453626Z","times_seen":6,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/LegacyLayout-CFRnNQjR.css","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/LegacyLayout-CFRnNQjR.css HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 3872\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Dec 2025 10:54:05 GMT\r\netag: \"693bf44d-f20\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 11 Jan 2026 19:21:42 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 1134681\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSoP5ZZbMXFy2MdsdzyT4gJWDVg%2Bli4lP7Se7TiZjip72EO%2FizZN6HA0rdrDat3h%2B3DAYwiXG%2BkvfndzZ42Sx5Eczjk3SR5wdFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4bbb30568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18362)","md5":"4c2ae8753fcae04ba62e0f1d90ef832f","sha1":"f9e6ef1a606c9ae41cd0ca3b368330b6b1b20b46","sha256":"54648a25cc9d5c17dbe3d86f4a16cf256499849e252e9f578c9f6fedcc900d03","sha512":"813764b529c56389931871ea41330d07fc43f7a044e46a2312fefb72a82bbcb4a4c12071d0bb0fff9ec85d3170f370c49eb91be78511984c607d912784256382","ssdeep":"192:llhnnIh8hzI86V6bBsbPh+O2qxquEuOufFa+:Jn+Bfobubpd2qxqcFa+","tlshash":"3882842db60d343dfcebc19a59b0a34da0849806f81747f9ab1796150feb2472b7e948","first_seen":"2025-12-12T18:18:40.267738Z","last_seen":"2025-12-27T19:44:01.874483Z","times_seen":59,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/index-Cy72BrVb.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/index-Cy72BrVb.js HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4110\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 25 Dec 2025 18:37:42 GMT\r\netag: \"694d8476-100e\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 18:49:32 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 13412\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqLD%2Bym4By%2FPaGPYAI5T%2FWJjbWi%2B3ihl%2BmUkPlZcY7OSXZ1GDevZrOurvnkyRBQQ3WCbTFiR37798Cm%2B8lxcIutKrAupNXypSQc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4bcb34568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11653,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11652)","md5":"45651e33aa512261b6e6d60eff6a9076","sha1":"f5eb5a6b524668a3ba4afc4e3886730d04c2180d","sha256":"a42f3b2d39dafb0381153fd457b146ced9e28c74340827b1b59a01b8ccd3dfc3","sha512":"c1d854bc941fc766a4a29ae64da3743542462b1b1055920a2c901506efe60f721c7d191e4e5d4a5cb0e8624bebd49a97e596e729264bd6503899a34daac580a2","ssdeep":"192:hYEjQ7VQhyeyVK/2Nsq67qL3gl1I5/5uiadfkFEjfHodGlSkGJPXtC4/uQYO6qPq:hYEjQp8xyPNsz7eQa1a+UfHqGlmPXtju","tlshash":"df32fb50eaba743103b12495507d5253a227881d7cbd84d0f3aa4f2f2bc98466a3efbc","first_seen":"2025-12-25T20:57:24.331201Z","last_seen":"2025-12-26T01:58:24.444745Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/videoPagesBundle-B1DwWgsC.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/videoPagesBundle-B1DwWgsC.js HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 102319\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 25 Dec 2025 18:37:42 GMT\r\netag: \"694d8476-18faf\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 18:49:32 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 13412\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GUD3jOWLaPtfRUewnjBdq%2FG4TMtBYIJoWzePkzZ%2Bj3SlyJvQSK%2BxLxpzeYcROLM%2FaAwy757iRiOM0AkKa7bcEQ25n%2BUBHKy5ndw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4bcb33568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":275678,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"223fadf57ddaaafa217fd4ac28775f87","sha1":"384aaa8890b23fbfa8f0f74836bbd55c0c73c222","sha256":"f7c9e029fc2f88488e1673ac8730b8f1e9c2421c3dcbec2c3a6f3c4c92f1d479","sha512":"68a426508569d3c8b29136e0dbefecd3ebbae9ea5fca514076e428cf189f429c3f166dac41424fbcd163ac256a112b2ffb5475d8eedfe8337ecf3c224c4d11e5","ssdeep":"3072:PQ/VbguZPE7yybx7pB3MG7EB3MXqoiqf6G/gnZ7JgSPjWQu4rcwYl:PQ/xg6wFPMG6MXVf6agnbgwWl4y","tlshash":"24448e59a236a439a3f5055018af1002f5ec0ad0b52e5191f5aecc3e3fdbf52c1b7ea9","first_seen":"2025-12-25T20:57:24.328351Z","last_seen":"2025-12-26T01:58:24.447472Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/assets/LegacyLayout-BM5zIppZ.js","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /assets/LegacyLayout-BM5zIppZ.js HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 10840\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 25 Dec 2025 18:37:42 GMT\r\netag: \"694d8476-2a58\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 18:49:32 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nage: 13412\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RpTQkQhdPV4jwvY4JlqjLMI16oevAF3mhPqAMH5PFtc64c8beMidIYukBYkKidfekpcovRFzCwQnvwzI72DwyhWJV%2FSj%2BLnVuTI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3bcc4bdb35568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35927,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (35913)","md5":"d694f15db929d7129ab37bed291d9f27","sha1":"aaad5a6593613becc21bb1f5486fe5a0843bb605","sha256":"a38fc82f85416b55d8b4653de95db5f61791d5edc0a31aad71bb597ccc6bdaf4","sha512":"a95647f628e5fd7cd5971644a82bb8b4d44a4d4f1e907ee8eba9f1abad718c398f3effa3152fba509cbda7222e04043ce316d0b822e0b7d7c8aa92e44cdb24f7","ssdeep":"768:a6WEiMMS+iPBOLmguM0NOeFEtyUFvLiO8lX1/iE7T2tWPP0cb4Q0KHqOr7xE0CrI:8D+v2tNQJD81Kw4mlD0","tlshash":"ddf2b604e218ae7efd6708c4f6af6114b15e0a55fa0a4ce0e5bf58290671d89f71bbcc","first_seen":"2025-12-25T20:57:24.327591Z","last_seen":"2025-12-26T01:58:24.443163Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bysewihe.com/api/dashboard","fqdn":"bysewihe.com","domain":"bysewihe.com","tld":"com"},"ip":{"addr":"104.21.12.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138","date":"2025-12-25T22:33:04.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bysewihe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 09:49:41 GMT","end":"Thu, 05 Feb 2026 10:48:01 GMT"},"fingerprint":{"sha1":"99:17:6C:F4:35:21:09:54:6C:EC:83:6B:C0:C3:E5:AA:B1:1C:2A:AE","sha256":"78:9D:7F:4B:7C:02:9B:21:B0:1B:9B:A7:8A:28:87:4B:66:8C:4E:3D:2E:9A:3D:85:04:06:B4:1C:F5:6A:B9:46"}}},"request":{"raw":"GET /api/dashboard HTTP/1.1\r\nHost: bysewihe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bysewihe.com/e/8l7p4ft40ub1/maze_-mfc-202302030138\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 22:33:04 GMT\r\ncontent-type: application/json\r\ncontent-length: 113\r\npriority: u=4,i=?0\r\nx-byse-notification: {\"id\":\"dfa977a65e91aa9a4bccc15117b5a1626b3d5392\",\"type\":\"error\",\"message\":\"Authentication required\",\"operation\":\"dashboard\"}\r\nx-byse-notification-id: dfa977a65e91aa9a4bccc15117b5a1626b3d5392\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DHSaoJEp974f%2F9GmwULC7xdk0NVEVrZplcrkqopihbFkv5vQMbLjkl7tTbCYoJe6ozaYqRqXTpO%2FcFbb%2FWXp9Rd%2BIsJJxp%2Bhkv4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3bcc4c2b38568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f43e2245c7a72ac5ebb31cc7e667e09d","sha1":"b820a4922292070c6a5601344756d33ca00aaf77","sha256":"de71e9a0b281fffae4cadf6514ca0cda3fd37d0623805ec6b0840842d43df03c","sha512":"7b3ad10f9792d9c0c8c2a04f236d76f2f8e15dbf15ffe5ae301f38669f3650b3d5b2f7400c30a266f9e3bd22e6a82dc65b37db0f724c1bacfe42dc9d67d9fbb5","ssdeep":"","tlshash":"24b092ca43c9286f9f8302a29a06065003e2dcaaa6a2088152d974786080a65c74b059","first_seen":"2025-11-07T19:01:05.666127Z","last_seen":"2025-12-26T01:58:24.449527Z","times_seen":75,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"bysewihe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
