Snippet of JavaScript showing that sends the victim's email to a .workers.dev subdomain Email submitted to API endpoint: Simultaneously, the user’s email and timestamp were sent to an API endpoint.