{"report_id":"f4e65948-69ab-4b71-8b5d-2187e6ca2553","version":6,"status":"done","tags":[],"date":"2026-04-28T19:46:54Z","url":{"schema":"https","addr":"earn-satoshivm.pages.dev","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.159","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"title":"SatoshiVM","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T00:54:02.896645Z","times_seen":17863441,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.159","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T19:46:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:46:30Z","timestamp":1777405590,"ip_dst":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":54306,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:46:30.358408+0000\",\"flow_id\":2177875081317061,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":54306,\"dest_ip\":\"172.66.44.97\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"earn-satoshivm.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-04-28T19:46:30.346821+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-28","alert":"Hunting_JS_WebAssembly","trigger":"earn-satoshivm.pages.dev/2ab5d871ffbcee3b5a5b9.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"earn-satoshivm.pages.dev","ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-28T19:46:58.069482Z","last_seen":"2026-04-28T19:46:58.069482Z","alert_count":13,"request_count":12,"received_data":5148798,"sent_data":5703,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/2ab5d871ffbcee3b5a5b9.js","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"edba99d9af5a652d2478930c6f29f2f6","sha1":"5114f342b730c8712de561151bb983934d752004","sha256":"5ce023440e5a548b4e5a607f8c0b26bea44de66626fb5dea42ab37a0f1fab819","sha512":"184554bb8ba5db0bdeee5e22c11aff614727367ea9c4748758023e8705f8ae72872e45cc948fdf7a32657cefd9122ea088f23621d4157d50fe3be1c55ef30e88","ssdeep":"24576:XlXZ9jPJXpg1IzP2abvwuQVD0gnY7KQs+HPlthoF4evCJGwr0yNypDbmHd43jjMC:5jBXpyI6yQo7ebCNtSwr0/3XM709If0","tlshash":"77753334cf133ead9b6cdbbe95cb1b0d3ee44a93c484e4eaca6954e7c15ba40149bc44","size":1691681,"data":"","first_seen":"2024-01-23T04:30:46Z","last_seen":"2026-04-28T19:47:01.105845Z","times_seen":32,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-28","alert":"Hunting_JS_WebAssembly","trigger":"earn-satoshivm.pages.dev/2ab5d871ffbcee3b5a5b9.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/icon.png","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earn-satoshivm.pages.dev/","date":"2026-04-28T19:46:31.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earn-satoshivm.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 10963\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a2f2cf052bf998f20f4335bffe394038\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QrFk0oIclAGnO%2Fu%2F%2Fbr3NYr9%2F6RznC6sNNM6FF7INtA3MNXTS0e7I%2FCOOiTmMv8XVuXBmZtsdBzKbAPi0w4yURk2hPPv8390BUu5lDvhNFRf0dayyze76AqH4%2Bp33Xt714k028qnG3yBgPU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f3892d2885176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"a8f1974080c64cfba86a11c731fa0480","sha1":"a0209dcd48cc53069a62d96514f3e08f3fbe9c17","sha256":"a88c25bb143545e3d882a54d33a4733de1b42b8b7049a139360528bfa76c8ba4","sha512":"4803d9d76ff2d1be71ef0b448fa7b1fac096fc88ee2959694e72beae2a94d4b1a1cc3ec1e4476056357e3afac61442aeeada34c114791263a752f49b7f2d9e54","ssdeep":"192:xSBbniGQ5zx/N84hGwdjL1L4s8ghxuo9OfP2JVqEHPeH5pYdTlJ+3A:YliGWz5K40wdj6s8ghxtn7+pYdTlH","tlshash":"45327e91936ab231427cee947fc5cb96c48d7161f255b04641b2a70f3eab87212d7721","first_seen":"2024-08-20T03:58:55.692804Z","last_seen":"2026-05-03T03:12:46.015444Z","times_seen":9,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T19:46:30.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4OsO%2BFtxRXJ8ipXgoIgzMv32PAxMgFoAWCIhJD6aUD6iI9H26hcsYA6fSEazJBRAhMVly2F3vUq%2FR5TlbR6ojBB0I7dppRnWXwfqzigs63eqpH0BoCLSUQ78bhFAfxijSiQd%2BOxijI8HFJM%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3892cbdff6b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":89251,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (361)","md5":"1fd707d30cd11a2296f91aa5ae1e690f","sha1":"8c24660a61e0f641f3a6ba08539d9d45ccd7cff7","sha256":"9d5cf6fa4231b61f81f8bb867fb4074431352ae0ccc43367ecbae0ba85950230","sha512":"cf246214c29f09684c7e89ba68308c9bb50b36308835f8d80033a3611d02196e9ad770a7270fb35c8e662f2b4f914c7d79632b78fd693ea1f83700bb546c8c7f","ssdeep":"768:cHk3+kD/aiLQ4xhU6Bs+nA0ADZWfZNkS5TL4r:cHkOkyWhJnAVaZhTa","tlshash":"3f93ea0f2aa734583413e59417f712583662b213e606dc64bacc179ccf83ad8aed5fad","first_seen":"2026-04-28T19:47:01.084189Z","last_seen":"2026-04-28T19:47:01.084189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":50,"dns":31,"connect":1,"send":0,"wait":205,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/IBMPlexMono-Regular.Qr8HzeZa.ttf","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earn-satoshivm.pages.dev/","date":"2026-04-28T19:46:31.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET /IBMPlexMono-Regular.Qr8HzeZa.ttf HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earn-satoshivm.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:31 GMT\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZtuSghLj1PO5SkOpDLxbF9WCKYp37y8v58KsKu4Z4hP66lCgKUih8jAL3t7cdATGQjEPeHBl7kULz0%2FDF1TTtJLSf9HX3yjBPkU7Em3Qqwr2G4Rt2R52C4SY9YgbtmcCPFBEySBqX6riGeo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f35c1911e4e93319e9ebf14031f938dd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3892d16c2d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133720,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409","md5":"ea96a0afddbe8ff439be465b16cbd381","sha1":"e1293fd8cce199a8bddb604e44d4af132911bd73","sha256":"2f1f8d81a8f9c5d931fd3431b9860a9bebecf7d80c43e950f7cabd2261996248","sha512":"0317d220c33255b0b87f5e6e57681076fd993539bc765da70e111a223c2648db6050e198acf5ec08973dffb5d54520a3080720d39c630fea018aa3e299aca68f","ssdeep":"3072:fVpga1W+2SWuOVfMMQ+n31lDLrLuYd2z9i597JR:fn5l2lDLrKYd2z9i37JR","tlshash":"abd3944feffb6a17b70e0af48de5b2b916b0ba1bef3161091c51d501c68f249422bd94","first_seen":"2023-12-17T20:07:34Z","last_seen":"2026-08-10T14:28:40.329449Z","times_seen":178,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/BtcVM-Architecture.jZLUUymN.svg","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earn-satoshivm.pages.dev/","date":"2026-04-28T19:46:30.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET /BtcVM-Architecture.jZLUUymN.svg HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earn-satoshivm.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:30 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Dr7WfD5XrpLETVGZyNK9k95mE4152%2BO3gJlUjr3sMBeRWODbIZ%2BT%2FZm36QHhQ5%2FByiRWlZBddK%2BIgfayYJPIn1A%2FRXOR3o2OxbUQQ4OKk44gG9EB2DzlkgxV9pYfhrpEoj0RheIYj%2F%2BVWQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"38c8b15b00eec18416b6cc239b8158a7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3892ce590e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201090,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd8e13c5b40b91ad513ab31d9a68d078","sha1":"de2c302a5f4aadd9b35ee2422611167ca142e4a6","sha256":"63fc7e7888ee8c4381d5364846906639b5aff455c1045b5e7f3d617cd536712c","sha512":"f822570402b267e99e1cb6cff32b8dde6459f771eea94cf9df9d9e6194e712ca4af70b46e223fa62b9cfe4ab6b7344ccde469cf0472f4a865d2a6fecd727d2d2","ssdeep":"1536:0d0WBi1xnm5IGzlcjMXl3yNsjFZrkeeuF6PQzRCbfiQdMLeZNbHbSQl+H4KS8r9O:o5E","tlshash":"8c1450e55a6443acb480a7ddb4141410f95e346b36eccee4fb1d9ed23b52cf688e8863","first_seen":"2024-08-20T03:58:55.695084Z","last_seen":"2026-04-28T19:47:01.087264Z","times_seen":8,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/index.iKCJUsQi.css","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://earn-satoshivm.pages.dev/","date":"2026-04-28T19:46:30.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET /index.iKCJUsQi.css HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earn-satoshivm.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:30 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9uxEPIo1TectUAfHLCTTBci6K9RVmEt4z3k72rBRNJCFx1yNU7E1Rqio1i%2Bubr1X2vkufy3nJTQhRFypKkTPoYuw%2F2P3hamOyQe%2BlHdIaqkFlfO9KLef8vv2ey%2FILxbG7O5K%2BubvkPlPxw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f735e857a365ece17219497b1c046c7d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3892ce48d776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18381,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ef497a901695d30b1230c8e8a284f157","sha1":"f9bfe451cd780f90a5601cd1712d370252060563","sha256":"41d84c2c06ff16514a534ace5428596380a83f1c3fe67aad075a69be921c7cf6","sha512":"55e77de6841014d7f5ff8af14673c4f34c4504809daa0b86aea4ce82532b45fca1a000df8935b4a38509ff252c68c45821d936b374b33718facb2b545642d837","ssdeep":"192:G6bpL4MF/TYYxUScCEqYY1GUS/e9hYYPbeglvDAtZuVWlFaEriKAt/YuS7gtn0oZ:3UAOU0c75YbqJ7QycFJHn3y","tlshash":"0e8246822bb5381d3437d04825aa13d83758a203a30ff8f9f5c5238daf857a56695fde","first_seen":"2025-09-22T09:46:14.231877Z","last_seen":"2026-04-28T19:47:01.090444Z","times_seen":7,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/default.Mi0LIUba.css","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://earn-satoshivm.pages.dev/","date":"2026-04-28T19:46:30.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET /default.Mi0LIUba.css HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earn-satoshivm.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:30 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B3s%2BDfHWOr07i0rrT%2BNQFwAQkemzygDyYsw0MhNm1vG8W8ktmoqZnNkxO9r5wEn1vqmO9yuDj6IZF%2FTVw9O%2FY3oeWAUpxWD3hIXjrTBoPz2IoOttR01rDzrRN6sbgcxidRGXNebKoh6fdkg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b38f1885998bbb435eb98ac8521b796a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3892ce48dc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2654,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"26c95c3000f2621893ab9b879b146984","sha1":"7a55549d55de1954deb5d1523ba559490ddd8b88","sha256":"7cd6ccf7c870c3d9c29d531f266e7cd4d27ccb4f033c4949b468089ecf5b3d7b","sha512":"c0ed0051c4afd7827170c5a198cc16d6770f2a3e29078e3ef93b1a88f892e31355a392b8e5256b474f6ac3332c61fafeb39ba53ca86ceb70b28f9d64a602015a","ssdeep":"","tlshash":"ee51d143199e2104f677e408e9596b1cb34ce103ab8fc8e9bbd6108ecedd1d1b561b8c","first_seen":"2025-09-22T09:46:14.346471Z","last_seen":"2026-04-28T19:47:01.091889Z","times_seen":7,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/IBMPlexMono-Bold.2G3pxpXK.ttf","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://earn-satoshivm.pages.dev/","date":"2026-04-28T19:46:31.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET /IBMPlexMono-Bold.2G3pxpXK.ttf HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earn-satoshivm.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:31 GMT\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LWp%2FP0abG4AfgVq1g0nWpKMDuKgRZb%2BW9qYYG9pYJPVYDCDTXafq6bl5EsLA%2BmP%2FOMVsXoZSOSLU%2Fq5JxbMlGgalliXEligzi3r8AlG6JatEXWIeUCgYhFLF0xl6mWciveMlqbqgpMVmGjU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"59e6a7f3671975c43cc03b4c65de9be4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3892d17c9376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135932,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409","md5":"be4cc57a744421b843e08a2001436f40","sha1":"a921db7a8850fe3ccf326f419e48eb29241c8a8a","sha256":"d3cfb27531839bf27f9af6ccc75b862535167295080fd4420a71045e532c5caf","sha512":"7fa4af88accbf9519dd6572bc6b2f539feb0ffa4db23cdfe811c6ada283050b3d153f92f81b290969812cec2d6653da10dc004c0fb1c1bda740831a9109db3bf","ssdeep":"3072:MLJyUYNJ83Ve/hC4XmjQalonM4oge3YVvcGspYUI:M9qXY4XmLge3YVvczpVI","tlshash":"0cd3a34b9efb6f17f70a5af84de1b3b91670f617ef34620a6c409905c6cb249052be84","first_seen":"2024-08-20T03:58:55.69217Z","last_seen":"2026-08-10T14:28:40.352591Z","times_seen":34,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/btcvm.mp4","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://earn-satoshivm.pages.dev/","date":"2026-04-28T19:46:31.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET /btcvm.mp4 HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://earn-satoshivm.pages.dev/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:31 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2824923\r\naccess-control-allow-origin: *\r\netag: \"4a8c8c46c571ac73f09d5f4ea1609b43\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHAmhmT3J0GyUSc0uIpFccdHApf4RLGRAKPw58xIQSr%2FJPa0facMeVjb54u0w%2FrpFnikZ6q96VmP1%2BepB1AzGefJJjO1sxMicxYwpB%2BjWPiu59po3v1j7%2FpilLkU8TwK84i9Hr7hp34Y938%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f3892d1fe1276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2824923,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"add45f9c0a0eae8434574e36bf100bdd","sha1":"aca76b18a04625fa8bc7f1de2f2eaed5e7153474","sha256":"aefac21621805c410f2e11aa50074d1472732c3c98d6352020f3e03beb0143db","sha512":"1ced88259a55bdac8ca251298f18675a677692d8693056107cecbe82c47748197f8de303016d7e510a930a7bc11621be814579b69bca7576703502fd19f2a152","ssdeep":"24576:RuQlPn9lUoMCTc87+4w4YZ3Q/CHy5Y+NfNN9:RZ9RTc8nRVR5Y+NL9","tlshash":"592523fb2f7150db229e68130e504a7b5e3a23f4070fa46e72243a037d585dba277d69","first_seen":"2025-09-22T09:46:14.189599Z","last_seen":"2026-05-03T03:12:46.019853Z","times_seen":7,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/2ab5d871ffbcee3b5a5b9.js","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://earn-satoshivm.pages.dev/","date":"2026-04-28T19:46:30.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET /2ab5d871ffbcee3b5a5b9.js HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earn-satoshivm.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:30 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bxHFTC2JY650OPSbXQn8x8ZY7fzTz58CBkDdRDB4DX1H41fBFR8VxGDDxm%2FWHVb6HLqXfV%2FtTaNVozLSCq3LXwrL7YBksEHe%2ByKjWp395pp0yrXaWH8LcfVnH3qRqw%2FIZKqpHmRDgGBgWbM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bcd9310884008a7af55defefca33b2ab\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f3892ce48ce76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1691681,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63653)","md5":"72500f7ce19131d7341f0ef7c62c7af0","sha1":"e95a02f6643ecbbb95a83d19ba00480bb374dc83","sha256":"1c618ff64bd0b9673b9eed09ad60e34eed673252eb7dba12f2ce1add26bc9f3e","sha512":"fadfb19ee4ebe8e672bedf0e1a834a1f10a223c941e6b6011f18624a96620f9aba3d95968701b5971bba78c53aa0d15b27ae8e11261da27ca7c4c7c2ef5f8382","ssdeep":"24576:XlXZ9jPJXpg1IzP2abvwuQVD0gnY7KQs+HPlthoF4evCJGwr0ym:5jBXpyI6yQo7ebCNtSwr0x","tlshash":"8f252339ef432eae9bace67bd1cb0f0d3db849139889d4e9d65820e7c05be4044dac54","first_seen":"2025-09-05T04:41:43.790579Z","last_seen":"2026-04-28T19:47:01.097655Z","times_seen":3,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-28","alert":"Hunting_JS_WebAssembly","trigger":"earn-satoshivm.pages.dev/2ab5d871ffbcee3b5a5b9.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/x.Mn3A-93R.png","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earn-satoshivm.pages.dev/","date":"2026-04-28T19:46:30.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET /x.Mn3A-93R.png HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earn-satoshivm.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 8395\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"17bcc616d83611f2fe4fec71e9cfcf6c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOEXQztjCQ%2Faaer6ypqKGX76mmjkizZk4UhczbfFmz%2BLgTxUl%2FFLHkyLZ9YiOI9oaosou%2F%2F%2FJmUgNWfLFA6rxnv8EJOGdibDgIf6lk5sEJbzUC2oXIwdYqInSMSO%2BGTRlihIBuakXqWBOJs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f3892ce58f376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 147, 8-bit/color RGBA, interlaced","md5":"1bd207bec6e2b4de6d397512e45535ff","sha1":"3b6783e9b1338f56fca9f0c1dda2ec1eb79fe007","sha256":"28f1383a0ff83d0c9cf5933160f70c48890b82fd64a4aa494cd9bc36a40309e9","sha512":"79a4e29e767b8d4f74a5d2c7fe8e51f726e029ec0013c5f1f02872cdfc441b2d1cfbfb23456cbe500a4d047e542d50f13ad7ce244461c97c9bccd3353337c8cc","ssdeep":"192:pekygtDu2kWxA5Da4/ITQ+KAeJZHvzwZMylg1VFOrRWOJQd:pTtDskuDa4/iQ+K5j7Ip+wtWp","tlshash":"33029fd29beda515fe99da39f1551644c84d2708fee3610906f78b34cec3ac9d841cb8","first_seen":"2024-08-20T03:58:55.689521Z","last_seen":"2026-06-06T08:39:50.572816Z","times_seen":11,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/github.VN0UL5eP.png","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earn-satoshivm.pages.dev/","date":"2026-04-28T19:46:30.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET /github.VN0UL5eP.png HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earn-satoshivm.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 12071\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f25ce1cc3692da17e578a288d96ab6dc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhWZ6bKIKuut3J4r%2BOH2ABFTVu5i83wF%2BeoJ6KGqm8kQvoDhtj6Pkl50SKPT0QzIqpjJaNXH0zN1nnYKS7mAZc1J8ER1F3Nukf1UcOgl5d%2BOw%2Fs06y3BFhRuirJKVGeiRxePhwm8qVbZUGk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f3892ce58fc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 157, 8-bit/color RGBA, interlaced","md5":"6c63444dab62cf5949b52ae658d81231","sha1":"e7e4875f2efb47ee375ba651476709a0c9498074","sha256":"8a8ed791c4c98a792be286e3a00e4b0cde2d55000aa31d787773755c500efeeb","sha512":"b345bfb7b9c5bc9cb97e20e438d4b3fa99b1e4c6ae1c3e8bf15c7528f69039e598402a6d3cbb8eb49119903032a29aec88ce82492841b40cfe455793f749cbf7","ssdeep":"192:YZbbbVeBcLquYjHPVNnT5ulvW0NFwbGn6HmbbMyFt8lUiCAe5Z1SapHB:YZbbhR+ugPVNF+uQYJRyv6PYwaxB","tlshash":"2142d0ce978bed24d22a3074ce42f68cefa881ddf22e7975872e8085044f3745136b80","first_seen":"2024-08-20T03:58:55.690314Z","last_seen":"2026-06-06T08:39:50.599594Z","times_seen":11,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"earn-satoshivm.pages.dev/discord.cpfghEKz.png","fqdn":"earn-satoshivm.pages.dev","domain":"earn-satoshivm.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://earn-satoshivm.pages.dev/","date":"2026-04-28T19:46:30.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-satoshivm.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 20:57:47 GMT","end":"Sun, 26 Jul 2026 21:57:43 GMT"},"fingerprint":{"sha1":"BB:19:B9:0E:98:01:9F:E8:DD:55:2F:A5:9B:F0:C3:EA:9C:D8:0B:5F","sha256":"8F:F1:E4:0C:42:EC:7B:99:55:71:88:2A:7B:07:18:39:D7:05:5D:C3:B7:62:FB:15:A2:19:EF:F2:5C:DA:6E:2C"}}},"request":{"raw":"GET /discord.cpfghEKz.png HTTP/1.1\r\nHost: earn-satoshivm.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://earn-satoshivm.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:46:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 10509\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f96f225d611f6c47bf238557773819d8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vums3VKi9jWIIrX4XR49ra%2Fc2DL4Or%2BSZ2qYTwD0ebzhcALLn1cIsuZXrMat%2FwLL5pArTuVe9NssXWbtL2qaOdKmRNJ%2FZHK0Q0O0OK5sTHYTbruCrrpZ21OSG0FHeOHBswp7bRAFFobPE88%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f3892ce590676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 179 x 135, 8-bit/color RGBA, interlaced","md5":"094b3641bdc498f16b364be76572caa0","sha1":"a94a050b95a04edd456efb85ec8c4f07fe9fe4fd","sha256":"b6db9ccff297ceb8a8e13959c78464cc07a21a12608066f1d67e42cabeb4044d","sha512":"03bf44e2c34abc6d4b1f416b5385a6dbe2b0d1395f709a4d40aa76bb52aaee960321ecdcd3b36ff11fcbf1591b5160f6dab6311564c64ea835b4143c51ee83e8","ssdeep":"192:ZjHjDyekyZkzY+3zw/7DKfr+pxHb3vIjqCT+5QDV2M1zCCzG8NVYjexEYviUc:ZbPypyKznw/fKC7bAjqJOQIeCzJHYje6","tlshash":"8022c0919b064c72d6379e3ffb66c3299ecbc4811265884138c78373757eaa41fb12b8","first_seen":"2024-08-20T03:58:55.690922Z","last_seen":"2026-06-06T08:39:50.608919Z","times_seen":11,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"earn-satoshivm.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}